Privacy Policy

This privacy policy explains how RareBear Digital Ltd ("we", "us", "our") collects, uses, and protects information about you when you use our website (rarebeardigital.com) or engage with our services.

Who we are

RareBear Digital Ltd is a UK digital marketing agency.

• Registered office: Suite A 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
• Company number: 15842201
• Contact: [email protected]

For data protection queries, contact us at the email above.

What information we collect

Information you give us

When you fill in a contact form, book a call, or otherwise communicate with us, we may collect:

• Name
• Email address
• Phone number
• Company name
• Message content
• Anything else you choose to share with us

Information we collect automatically

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Pages you visit and time spent on them
• Referring website
• Device type
• Approximate location (city/country level)

We collect this through cookies and similar technologies. See our Cookie Policy for details.

How we use your information

We use your information to:

• Respond to enquiries and provide our services
• Manage and improve our relationship with you
• Improve our website and services
• Send marketing communications (with your consent)
• Comply with legal obligations

Legal basis for processing

Under UK GDPR, we process your data on the following bases:

• Contract: to provide services you've requested
• Legitimate interests: to manage and improve our business, respond to enquiries, and contact you about relevant services
• Consent: for marketing communications and non-essential cookies
• Legal obligation: where required by law

Third-party services

We use the following third-party services that may process your data:

• Google Analytics 4 (Google Ireland Limited) — website analytics
• Google Ads (Google Ireland Limited) — advertising and conversion tracking
• Meta Pixel (Meta Platforms Ireland Limited) — advertising and conversion tracking
• HighLevel (GHL) (HighLevel Inc., USA) — customer relationship management, contact forms, and booking calendar
• Cloudflare (Cloudflare Inc., USA) — content delivery and security
• Google Workspace / Microsoft 365 — email and document storage

Each of these has its own privacy policy, which we encourage you to read.

International data transfers

Some of our third-party services are based outside the UK. Where we transfer data internationally, we rely on appropriate safeguards such as:

• The UK Government's adequacy decisions
• Standard Contractual Clauses
• The UK Extension to the EU-US Data Privacy Framework

How long we keep your data

• Enquiries: up to 3 years from your last interaction
• Active clients: for the duration of our engagement plus 6 years (for accounting and tax purposes)
• Marketing list members: until you unsubscribe
• Website analytics: typically up to 14 months

Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, email [email protected]. We'll respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data security

We take reasonable technical and organisational measures to protect your data. However, no method of internet transmission is 100% secure.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent version. Significant changes will be notified via the website or email.

Contact us

Questions about this privacy policy? Email [email protected].