Privacy policy
How we look after your personal information. Last updated 8 November 2026.
Who we are
This policy explains how Bubble Duck Marketing Ltd (“Bubble Duck”, “we”, “us”) collects and uses personal information when you visit bubbleduck.co.uk or get in touch with us. We are the data controller for this information and we are registered with the Information Commissioner’s Office.
What we collect
When you book a call or contact us. Through the form on our website we ask for your name, company, email address, phone number (optional), the services you’re interested in and any message you add. If you email or phone us, we keep a record of what you send us.
When you visit our website. We use Cloudflare Web Analytics to see how many people visit and which pages they read. It works without cookies and shows us totals, so we can’t use it to identify you. Our hosting provider, Cloudflare, also processes technical information such as your IP address to keep the site secure and running, and to check that messages sent through our form come from a real person rather than a spam bot (Cloudflare Turnstile).
When you’re a client. If you become a client, we hold the contact details of the people we work with at your company and the information needed to deliver our services. Your MyBubbleDuck client portal has its own sign-in, and how we handle that information is covered in our agreement with you.
How we use it
- To reply to your enquiry and arrange a call.
- To keep a record of our conversations, so anyone on our team can pick up where we left off.
- To provide our services if you become a client.
- To understand how our website is used and improve it.
- To send you news or marketing emails, only if you’ve asked us to. You can unsubscribe at any time.
Our lawful basis
We rely on our legitimate interests to reply to business enquiries, keep records of our conversations and run our website securely. Where you are a client, we process information to perform our contract with you. Where we ask for your consent, for example to send you marketing emails, you can withdraw it at any time.
Transfers outside the UK
Some of our providers store or process information outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place, such as the UK–US data bridge or the UK’s International Data Transfer Agreement.
How long we keep it
If you get in touch and we don’t end up working together, we keep your enquiry for up to two years and then delete it. For clients, we keep records for as long as we work together and for six years afterwards, which is how long we need to keep business and accounting records.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that’s wrong
- ask us to delete your information
- ask us to limit or stop using your information
- object to how we use it
- ask us to pass it to another organisation
- withdraw your consent where we rely on it
To use any of these rights, email info@bubbleduck.co.uk. We’ll reply within one month.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We’ll update this page if anything changes. The date at the top shows when it was last updated.