Privacy Policy
Last Updated: 20 April 2026
1. Who We Are
Peat & Curtis (“we,” “us,” or “our”) is a digital marketing agency operating the website: https://peatandcurtis.com. We are committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Client Data & Security (Agency Services)
- Access Management: We use secure password management tools and follow the principle of least-privilege access. We will never ask for your primary “Owner” passwords if “Manager” or “Editor” access is sufficient.
- Data Ownership: You remain the Data Controller for your business accounts. Peat & Curtis acts as a Data Processor.
- Confidentiality: All client credentials, strategy documents, and internal business data are treated as strictly confidential and are never shared with third parties or other clients.
3. Information We Collect and Why
- Contact Information: When you fill out a form or book a consultation, we collect your name, email address, phone number, and business details.
- Technical Data: We automatically collect your IP address, browser type, and how you interact with our site to ensure security and site stability.
4. Tracking Technologies & Cookies
- Google Analytics & Search Console: To understand how visitors engage with our site and monitor search performance.
- HighLevel (GoHighLevel): Our primary CRM and marketing automation platform. Any data submitted through our website forms is processed and stored within our HighLevel sub-account for lead management and communication.
- Cookies: We use cookies for analytical purposes and to remember your preferences. You can choose to disable cookies through your browser settings.
5. How We Use Your Data
- Respond to your service enquiries and manage bookings via our website.
- Optimise our website content and marketing strategies.
- Deliver digital marketing services as outlined in our service agreements.
6. Data Sharing and Disclosure
We do not sell your personal data. We only share data with trusted third-party service providers (such as Hostinger, Google, and HighLevel) that are essential to our business operations and are compliant with UK data protection laws.
7. International Data Transfers
Some of our partners (such as Google or HighLevel) may store data on servers outside the UK (e.g., in the USA). We ensure that these transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure your data remains protected.
8. Your Legal Rights
- Access the personal data we hold about you.
- Correct any inaccurate information.
- Erase your data from our systems (the “right to be forgotten”).
- Object to or restrict certain processing activities.