Legal

    Privacy policy

    This policy explains how FK Digital Alliance handles personal data in accordance with UK GDPR, the Data Protection Act 2018, GDPR principles, and applicable privacy laws.

    Last updated: 24 April 2026

    Who we are

    FK Digital Alliance is the data controller for personal information collected through this website, client portal, contact forms, booking forms, project questionnaires, contracts, invoices, and related customer communications.

    Company number: 17105576. Contact: info@fkdigitalalliance.com. Registered operating address: Fort Dunlop, Fort Parkway, Birmingham B24 9FE.

    Personal data we collect

    Identity and contact details, including name, email address, phone number, company name, billing details, and project contact information.

    Project and service information, including questionnaire responses, booking details, messages, contracts, invoices, files, comments, briefs, and support requests.

    Technical information, including IP address, device/browser details, pages visited, approximate location, cookie identifiers, consent preferences, and security logs.

    Payment-related information needed to create secure payment sessions and record invoice status. Card details are processed by our payment provider and are not stored by us.

    How we use personal data

    To respond to enquiries, schedule consultations, prepare proposals, deliver projects, manage client accounts, send invoices and contracts, and provide support.

    To run, protect, troubleshoot, and improve the website, client portal, email delivery, booking flows, payment flows, and internal administration.

    To meet legal, accounting, tax, security, fraud prevention, dispute resolution, and regulatory obligations.

    To send service emails that you expect to receive, such as booking confirmations, project updates, contracts, invoices, payment receipts, account notifications, and security messages.

    Lawful bases under UK GDPR

    Contract: to provide services, manage client projects, issue contracts, send invoices, and process payments.

    Legitimate interests: to operate and secure our website and business, respond to enquiries, keep records, prevent fraud, improve services, and manage client relationships where those interests are not overridden by your rights.

    Consent: for optional analytics or marketing cookies and any optional communications that require consent. You can withdraw consent at any time.

    Legal obligation: to comply with tax, accounting, company, regulatory, and law-enforcement obligations.

    Cookies and similar technologies

    We use necessary cookies and local storage for core site functionality, security, session management, and remembering your cookie choices.

    Analytics and marketing cookies are only used where you have given permission through the cookie preferences dialog. You can change your browser settings to block cookies, but some features may not work correctly.

    See our Cookie Policy for a detailed list of cookie categories, purposes, and retention periods.

    Sharing personal data

    We only share personal data where necessary with trusted service providers who help us operate the website, client portal, email delivery, hosting, analytics, payments, project delivery, accounting, security, and legal compliance.

    We may share information with professional advisers, payment providers, fraud prevention services, regulators, courts, tax authorities, or law enforcement where required or permitted by law.

    We do not sell personal data.

    International transfers

    Some service providers may process data outside the UK. Where this happens, we rely on appropriate safeguards such as UK International Data Transfer Agreements, UK Addendum to EU Standard Contractual Clauses, adequacy regulations, or equivalent protections required by UK GDPR.

    Retention

    We keep personal data only for as long as needed for the purpose collected, including service delivery, client relationship management, legal obligations, dispute handling, accounting, tax, security, and audit requirements.

    Typical retention periods include: enquiry data for up to 24 months, client/project records for the life of the relationship plus up to 7 years, accounting and invoice records for at least 6 years, and technical security logs for the period reasonably needed to protect the service.

    Your rights

    Under UK GDPR, you may have rights to access, rectify, erase, restrict, object to processing, data portability, and withdraw consent. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects.

    To exercise your rights, contact info@fkdigitalalliance.com. We may need to verify your identity before acting on a request.

    You can complain to the UK Information Commissioner's Office at ico.org.uk if you are unhappy with how we handle your data. We ask that you contact us first so we can try to resolve the issue.

    Security

    We use technical and organisational measures designed to protect personal data, including access controls, encrypted connections, role-based access, audit records, secure hosting, and least-privilege administration.

    No online service can be guaranteed 100% secure, but we work to keep data protected and respond promptly to suspected incidents.

    Changes to this policy

    We may update this Privacy Policy to reflect legal, technical, or business changes. The latest version will always be published on this page with the updated date.