Privacy Policy.Privacy Policy.

Raf Digital (“we”, “us”, “our”) provides lead generation and marketing services to local businesses in the United Kingdom. We are the data controller responsible for the personal information described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@rafdigital.co.uk.

We collect the following information:

• Information you give us — when you request a free audit or book a call, we collect your name, email address, phone number, website URL, business type, and any details you provide about your business or enquiry.
• Communications — records of emails, calls, and messages between you and us.
• Technical data — basic information your browser sends automatically, such as your IP address and device type, which our hosting and embedded tools use to serve and secure the site.

We use your information to:

• Prepare and deliver your free website audit;
• Respond to your enquiry and provide our services;
• Arrange and manage calls and appointments;
• Send you follow-up messages relating to your enquiry, and — where you have given consent — marketing messages about our services;
• Take payment for services you purchase;
• Meet our legal and accounting obligations.

Our lawful bases for processing are: performance of a contract (or steps you ask us to take before entering one), your consent (which you can withdraw at any time), and our legitimate interests in running and improving our business.

We do not sell your personal information. We share it only with trusted service providers who process data on our behalf, under appropriate agreements:

• GoHighLevel (HighLevel Inc.) — our CRM, forms, booking, email and SMS platform (which in turn uses providers such as Mailgun for email and Twilio for SMS);
• Google (Google Workspace) — our business email;
• Vercel — website hosting;
• Stripe — payment processing (Stripe collects payment details directly; we do not store your card information).

We may also disclose information where required by law.

Some of our service providers are based outside the UK, including in the United States. Where your information is transferred outside the UK, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) to protect it.

We keep your personal information only for as long as we need it — to provide our services, maintain our business records, and meet legal obligations. When we no longer need it, we securely delete or anonymise it. If you ask us to stop contacting you, we keep a minimal record of that request so we can honour it.

We only send marketing emails or texts where you have agreed to receive them. You can opt out at any time — reply STOP to a text, use the unsubscribe link in an email, or email us at info@rafdigital.co.uk. Opting out of marketing does not stop essential messages about a service you have requested.

Under UK data protection law you have the right to: access a copy of your data; correct inaccurate data; ask us to delete it; restrict or object to how we use it; request portability of the data you provided; and withdraw consent at any time.

To exercise any of these, email info@rafdigital.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve any concern first.

We may update this policy from time to time. When we do, we'll change the “last updated” date above. Please check back occasionally.