Legal

Privacy policy.

How we collect, use and look after personal data on this website. Written to be read, not to be endured.

Last updated
3 November 2026
Applies to
rubikdigital.co.uk

Who we are

Rubik Digital Ltd ("we", "us") is a digital agency that designs, builds and grows websites, registered in England and Wales under company number 07116439 (registered office: Studio I1c Witan Studios, Witan Gate, Milton Keynes MK9 1EF). We are the controller of your data. This policy covers the personal data we collect through rubikdigital.co.uk: the enquiry forms, the newsletter signup and job applications.

For personal data collected through this site, we are the controller: we decide what is collected and why. We handle it under the UK General Data Protection Regulation and the Data Protection Act 2018.

The data we collect

What we collect depends on how you use the site:

  • Enquiry forms.Your first and last name, email address, company, and, if you give them, your phone number and website. We also keep anything you tell us about your project, including the services, goals and budget you select.
  • How you found us.When you send an enquiry, it includes how you reached the site (for example a search engine, an AI assistant, social media, an advert, another website or directly) and the pages you viewed on this visit. We work this out from the page that linked to us and any campaign tags in the link. It is held in the page's memory only, never in a cookie or on your device, and is sent only if you submit a form.
  • Newsletter signup.Your email address, and the fact you asked to hear from us.
  • Job applications.Your name, contact details, CV and covering note. Applications are sent from your own email account, so we receive them as an email.
  • Spam checks.Our enquiry forms run an invisible check that looks at technical signals from your browser to tell people from bots.
  • Technical data.Standard server logs: IP address, browser and device type, pages requested and the time of your visit. These keep the site working and secure.
  • Analytics.Only if you accept analytics cookies: Google Analytics records the pages you visit, how you reached the site, your approximate location and your device and browser type. It doesn't tell us who you are.

We don't ask for special category data and we ask you not to send any you don't need to. We don't collect data from children, and the site isn't aimed at them.

How we use it

  • To answer enquiriesand to prepare proposals and discuss your project. Knowing how you found us tells us which of our work is reaching people.
  • To send the newsletteronly if you subscribed. Every email carries an unsubscribe link.
  • To handle applicationsby assessing CVs, holding interviews and letting you know how things went.
  • To keep the site healthythrough security monitoring, blocking spam, fixing problems and, if you allow analytics, seeing which pages are useful.
  • To meet our obligationsfor accounting, tax and other legal record-keeping where it applies.

We don't sell personal data. We don't use it to train automated systems, and we don't make decisions about you by automated means.

Our legal bases

Where UK GDPR requires a lawful basis for processing, ours are:

  • Legitimate interests.Replying to enquiries, understanding how people found us, handling applications, keeping the site secure and blocking spam. We balance this against your reasonable expectations, and you can object at any time.
  • Consent.Newsletter emails and analytics cookies. You can withdraw consent whenever you like, without affecting anything we did before.
  • Contract.Steps needed before we take you on as a client, such as a proposal, a quote or a signed project.

Cookies

This site sets no advertising cookies. Google Analytics cookies are set only if you accept them, and you can change your choice at any time from "Cookie settings" in the footer. Our cookie policy lists everything in detail.

Who we share data with

We share personal data only with the providers that make this site work. They process it on our instructions and are bound by contract to keep it secure.

We also disclose data where the law requires it. We never sell it, and we don't share it for anyone else's marketing.

International transfers

Some of these providers store or process data outside the UK. Where that happens, we rely on the safeguards recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it: enquiries and proposals for as long as the conversation is live and for a reasonable period after, newsletter details until you unsubscribe, applications for the length of the hiring process (with your permission if we'd like to keep you in mind for later roles), and technical logs for a short operational window.

When we no longer need it, we delete it or strip out anything that identifies you.

Keeping it secure

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and limiting access to the people who need it. No transmission over the internet or electronic storage is completely secure, so we can't guarantee absolute security, but we'll tell you and the regulator promptly if a breach puts your data at risk.

Your rights

Under UK data protection law you can ask us to:

  • Give you a copyof the personal data we hold about you.
  • Correct itif anything is wrong or incomplete.
  • Delete itwhere we have no overriding reason to keep it.
  • Restrict or object to our use of itin certain circumstances.
  • Move itby giving it to you in a portable, machine-readable format where the law allows.
  • Stop marketingor withdraw any consent you've given, at any time. Unsubscribing does this for the newsletter.

There's no charge, and we aim to respond within a month. If you're not happy with how we handle your data, you can complain to us first, or to the Information Commissioner's Office, the UK's data protection regulator.

Other websites

This site links to other websites, including our social profiles and the AI assistants in the footer. Those links open the other site with a general question about Rubik Digital; we don't send them anything about you. Once you're there, their own privacy policies apply, and we're not responsible for how they handle your data.

How to reach us

For anything in this policy, whether a request, a question or a complaint, email [email protected] and we'll take it from there.

Changes to this policy

If we change how we handle data, we'll update this page and the date above. Significant changes get a clearer heads-up, on the site itself or by email where we hold your address.