We build with tomorrow in mind

Privacy & Data Security Policy

Effective Date: March, 2026

At our agency, we operate under a north star of Radical Clarity and Privacy & IP Respect. We believe that security and compliance should be integrated by design, not treated as an afterthought. This policy outlines how we handle data to protect our clients, our team, and the integrity of our professional partnerships.


1. Information Collection & Lead Handling

We collect information only to the extent necessary to fulfill our role as a growth partner.

  • Lead Qualification: Information provided during initial contact is used to filter leads against our budget and timeline criteria.
  • Discovery Sprints: During our paid discovery phase, we map specific goals, constraints, and KPIs, which requires the collection of project-specific business data.
  • Third-Party Context: We do not use personal emails or instant messaging apps like WhatsApp for handling client information; all data must flow through official agency channels.

2. Data Protection & Security Protocols

We implement a “need-to-know” access model to ensure the highest level of confidentiality.

  • Access Control: Only cleared internal team members or pre-vetted contractors who have signed a strict NDA are granted access to specific project data.
  • Storage & Transmission: Client data is shared exclusively via approved, encrypted channels, including G-Suite, Slack, and MFA-enabled project management tools.
  • Anti-Bypass Measures: To protect the business relationship, all communication must flow through the designated account manager. Direct engagement between clients and contractors is strictly prohibited to prevent unauthorized data exposure.

3. Data Retention & Permanent Deletion

We maintain a lean data footprint to minimize risk.

  • Retention Period: Client data is archived securely for a period of 12 months following the completion of a project.
  • Deletion: After the 12-month period, all project data is permanently deleted unless a legal requirement or active maintenance retainer necessitates further storage.

4. Intellectual Property & Deliverables

Our commitment to Radical Clarity extends to the ownership of the work we produce.

  • Ownership Transfer: All source code, design files, and documentation remain the property of the agency until the final payment is cleared.
  • Clean Handover: Upon project conclusion and final payment, we provide a clean IP handover, delivering all relevant files and documented assets to the client.

5. Compliance & Legal Governance

This policy is designed to comply with global standards, including GDPR, and the terms of major search engines.

  • Governing Law: All engagements and data handling practices are governed by the laws of the United Kingdom.
  • Dispute Resolution: Any disputes regarding data or services are subject to the London Court of International Arbitration (LCIA) or the Singapore International Arbitration Centre (SIAC).
  • Limitation of Liability: While we prioritize ROI and measurable outcomes, we do not promise rankings or results for external variables beyond our direct control.

6. Search Engine & Technical Transparency

To ensure transparency for Google, Bing, and other platforms, we confirm:

  • Cookies: We use standard cookies to improve user experience and analyze site performance.
  • Automation: We may use AI-assisted workflows to optimize data analysis, but we never share PII (Personally Identifiable Information) with third-party AI tools prematurely.

Our Brand Promise: Measured growth, delivered simply.