Privacy Policy

Last updated: November, 2025

AdFrolic (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our website, contact us, or work with us.

‍

1. Who We Are

‍

AdFrolic Ltd is a creative advertising agency based in the United Kingdom. We provide in-person and digital marketing services to clients and partners.

For data protection purposes, we are the Data Controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any privacy-related questions, please contact us via our website’s contact form or by email (details available on our contact page).

‍

2. Data We Collect

‍

We may collect and process the following types of personal data:

Identity and Contact Data: name, company name, job title, email address, phone number, and postal address.
Business Information: company details, marketing objectives, and communication preferences.
Technical and Usage Data: IP address, browser type, operating system, time zone, and how you interact with our website.
Marketing and Communications Data: your preferences in receiving marketing from us, and records of communications.

We collect this data when you:

Fill out a contact form or make an enquiry;
Subscribe to our communications;
Interact with us on social media;
Visit our website, which uses cookies and analytics tools;
Enter into a contract with us for services.

‍

3. How We Use Your Data

‍

We use your personal data to:

Respond to enquiries and provide our services;
Communicate with clients and partners;
Send relevant marketing communications (where permitted by law);
Manage contracts, projects, and billing;
Improve our website, services, and marketing;
Comply with legal and regulatory obligations.

‍

We process your data on the following legal bases:

Performance of a contract (e.g., to provide services you’ve requested);
Legitimate interests (e.g., to communicate with you or improve our services);
Consent (e.g., for marketing emails and cookies);
Legal obligation (e.g., to retain records for tax purposes).

‍

4. Marketing Communications

‍

We may send you marketing or promotional communications if:

You have opted in to receive them, or
You are an existing client or contact and we believe the information is relevant to your business.

You can opt out of marketing at any time by following the unsubscribe link in any message or by contacting us directly.

‍

5. Cookies and Analytics

‍

Our website uses cookies and similar technologies to:

Analyse site traffic and user behaviour;
Improve site performance;
Support marketing and remarketing activities.

We use Google Analytics and other tools that may collect anonymised information about your device and browsing activity.
You can control or delete cookies through your browser settings or opt out of Google Analytics tracking by visiting https://tools.google.com/dlpage/gaoptout.

Our website displays a cookie notice where you can manage your consent preferences.

‍

6. Data Storage and Retention

‍

We store all digital data securely using Google Workspace and Google Drive, which are GDPR-compliant and based in the EU/EEA or other approved regions with adequate protection standards.

General data (emails, contact details, client correspondence) are retained for three years from the last interaction.
Contracts and financial records are retained for as long as necessary for legal, accounting, or operational reasons.
After retention periods expire, data is securely deleted or anonymised.

‍

7. Sharing Your Data

‍

We do not sell personal data.

We may share your information only with:

Trusted service providers and third-party platforms (e.g., Google, web hosting, analytics, communication tools, invoicing systems);
Legal, regulatory, or governmental bodies where required by law;
Professional advisors (e.g., accountants or insurers) where necessary.

All third parties are required to respect the security of your personal data and process it in accordance with UK GDPR.

‍

8. International Transfers

‍

Some third-party providers (such as Google) may process data outside the UK or EEA.
Where this occurs, we ensure that adequate safeguards are in place — such as Standard Contractual Clauses or other approved transfer mechanisms — to protect your information.

‍

9. Data Security

‍

We use secure systems and cloud platforms to store all personal data.
Access is restricted to authorised personnel only, and all accounts are protected by strong passwords and multi-factor authentication.

In the event of a data breach, we will follow all legal reporting requirements under UK GDPR and notify affected individuals where applicable.

‍

10. Your Rights

‍

Under UK GDPR, you have the right to:

Access a copy of your personal data;
Request correction or deletion;
Object to processing or withdraw consent;
Request restriction of processing;
Request data portability to another provider;
Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been infringed.

For more information, visit the ICO website: https://ico.org.uk.

‍

11. Changes to This Policy

‍

We may update this Privacy Policy from time to time. The latest version will always be available on this page and marked with the date of the most recent update.

‍