Privacy Policy

Sarum Digital ("we", "us") is the trading name of Sarum Digital Ltd, a private limited company registered in Scotland (company number SC849936), with its registered office at Central House, 119 Whitefield Road, Glasgow, G51 2SD. We are a UK marketing agency that builds advertising and enrolment systems for beauty, aesthetics and vocational training providers. We run the website sarumdigital.com and the client platform at app.sarumdigital.com.

For personal data we collect through this website, our enquiries and our own sales process, we are the data controller. You can contact us about anything in this policy at umar@sarumdigital.com.

• Enquiries: when you use our contact form we collect your name, email address, training centre name and your message.
• Booked calls: when you book a call through our calendar we collect your name, email, phone number and any answers you give in the booking form.
• Calls and meetings: notes about your business and what you need. We may record video or phone calls to keep accurate notes; we will tell you at the start of the call and you can ask us not to.
• Website usage (only if you accept cookies): pages visited, device and browser information, and actions such as booking a call, collected by the Meta Pixel and Google tags. See section 7.
• How you found us: when you book a call or send an enquiry we record where your visit came from (for example a Google search, Instagram or one of our adverts) and the page you arrived on, so we know which of our marketing works. This is read from the page address and the referring site; nothing is stored on your device unless you accept cookies.
• Technical data: our hosting provider keeps short-term server logs (such as IP address and time of request) to keep the site secure and working.

We do not ask for, and ask you not to send us, special category data (such as health information).

• To reply to enquiries and hold calls you book — steps you ask us to take before entering a contract, and our legitimate interest in responding to business enquiries.
• To provide our services if you become a client — performance of our contract with you.
• To follow up about our services — our legitimate interest in business-to-business marketing. You can ask us to stop at any time.
• To measure our advertising and improve the website — your consent, given through the cookie banner. You can withdraw it at any time.
• To keep business and tax records — legal obligation.

We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

We use trusted service providers who process data on our behalf and only on our instructions:

• Vercel — hosting for this website.
• HighLevel (LeadConnector) — our booking calendar, CRM and messaging.
• FormSubmit — delivers contact form messages to our inbox.
• Meta Platforms and Google — advertising measurement, only if you accept cookies.
• Call recording, note-taking and email/productivity tools we use to run our business.
• Our professional advisers (such as accountants) where needed, and authorities where the law requires it.

Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where that happens we rely on UK adequacy regulations (including the UK–US data bridge) or approved safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Enquiries and call notes where you don't become a client: up to 24 months after our last contact.
• Client records: for the length of our contract and up to 6 years afterwards, for legal and tax purposes.
• Cookie data: see section 7. Your cookie choice itself is stored in your browser until you clear it.

Essential:we store your cookie choice in your browser so we don't ask you again. This is needed for the site to work and does not track you.

Advertising and analytics (only with your consent): the Meta Pixel and Google tags (through Google Tag Manager) help us understand which adverts lead to enquiries and booked calls. They set cookies such as _fbp (Meta) and _ga(Google), which typically last up to 13–24 months. Nothing is collected by these tools unless you click "Accept".

You can change your choice at any time: Cookie settings. You can also block cookies in your browser settings.

When we run marketing, enquiry handling or the Sarum Digital platform for a training provider, the training provider decides how their learners' and enquirers' data is used and is the data controller. We act as their data processor under a written agreement and only use that data to provide our services to them.

If you enquired about or enrolled on a course with one of our clients, please contact that training provider about your data. We will help them respond to your request.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted in some circumstances;
• restrict or object to how we use it, including objecting to marketing at any time;
• receive your data in a portable format in some circumstances;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email umar@sarumdigital.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put things right first.

We use encrypted connections (HTTPS) across our website and platform, restrict access to people who need it, protect accounts with strong authentication, and encrypt stored integration credentials. No system is completely secure, but we review our security regularly and act quickly on any issue.

We may update this policy from time to time. The date at the top shows when it last changed.