1. Who We Are
Dleading Creative Designs ("we", "us", "our") is a digital agency based in Holbeck, Leeds, West Yorkshire, United Kingdom. We provide web design, web development, SEO, graphic design, social media marketing, and related digital services.
For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), we are the data controller of any personal data you provide to us.
Contact details:
• Business name: Dleading Creative Designs
• Address: Holbeck, Leeds, West Yorkshire, United Kingdom
• Email: info@creativedleading.co.uk
• WhatsApp: +44 742 725 9935
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Identity & Contact Data
• Full name, email address, phone number
• Company or business name
• Details you provide when using our contact or enquiry forms
Technical Data
• IP address, browser type and version, operating system
• Pages visited, time spent on pages, referral source
• Cookie identifiers (see our Cookie Policy for details)
Communications Data
• Messages, enquiries, or feedback you send us
• Records of correspondence (email, WhatsApp, phone)
Marketing Preferences
• Your preferences for receiving marketing communications from us
We do not collect any Special Category Data (such as health, racial, or financial data) and we do not knowingly collect data from children under 16.
3. How We Use Your Data
We use your personal data for the following purposes:
• To respond to enquiries and provide quotes for our services
• To deliver the services you have contracted us to provide
• To send you relevant marketing communications (with your consent)
• To improve our website and user experience through analytics
• To comply with our legal obligations
• To prevent fraud and ensure website security
We will never sell your personal data to third parties.
4. Legal Basis for Processing (UK GDPR)
Under UK GDPR, we rely on the following lawful bases:
• Contract (Article 6(1)(b)): Processing necessary to fulfil a contract with you or to take steps before entering a contract.
• Legitimate Interests (Article 6(1)(f)): Processing for our legitimate business interests such as improving our services, fraud prevention, and direct marketing to existing customers — provided your interests don't override ours.
• Consent (Article 6(1)(a)): Where you have given clear, freely-given consent — for example, signing up to marketing emails or accepting non-essential cookies.
• Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable laws.
You can withdraw consent at any time by contacting us or using the unsubscribe link in any email we send.
5. Who We Share Your Data With
We may share your personal data with trusted third parties strictly where necessary:
• IT & Hosting Providers: Servers and cloud infrastructure we use to run our website
• Email Marketing Platforms: If you opt in to marketing communications
• Analytics Providers: Such as Google Analytics (data is anonymised where possible)
• Payment Processors: Where you make a payment for our services
• Professional Advisers: Solicitors, accountants, or auditors where required by law
All third-party processors are bound by data processing agreements and are required to keep your data confidential and secure. We do not transfer your data outside of the UK/EEA unless adequate safeguards are in place.
6. Data Retention
We retain personal data only for as long as necessary:
• Enquiries & contact forms: Up to 2 years from the date of last contact
• Client records (active contracts): Duration of the contract plus 6 years (UK limitation period)
• Marketing preferences: Until you withdraw consent or 3 years of inactivity
• Website analytics: Aggregated data held for up to 26 months
After the relevant retention period, data is securely deleted or anonymised.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no compelling reason to continue processing it.
• Right to Restrict Processing: Ask us to pause processing your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Rights related to Automated Decision-Making: We do not use automated decision-making or profiling.
To exercise any of these rights, please contact us at info@creativedleading.co.uk. We will respond within 30 days. We may need to verify your identity before fulfilling the request.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:
• Encrypted connections (HTTPS/SSL) on all pages
• Access controls limiting who within our team can access data
• Regular review of our data practices and vendor agreements
While we take every reasonable precaution, no internet transmission is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.
10. Third-Party Links
Our website may contain links to third-party websites (e.g. our social media profiles, partner sites). We are not responsible for the privacy practices of those websites and recommend you review their privacy policies independently.
11. Right to Complain
If you believe we have not handled your personal data in compliance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at info@creativedleading.co.uk.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.
Data rights requests
To exercise any of your rights under UK GDPR, email us and we'll respond within 30 days.