Privacy Policy
Last updated: 18 August 2026
Who we are
Top Spot Digital is a trading name of TSD Partners LTD, a company registered in England and Wales (company number 16819393). We are the data controller for the personal information described in this policy.
You can contact us about anything in this policy at hello@topspotdigital.co.uk.
What we collect
When you use our contact form or request a review, we collect your name, email address, company name (if you provide it), the service you're interested in, and the content of your message.
When you subscribe to our newsletter, we collect your email address.
When you visit the website, we and our analytics providers may collect your IP address, browser and device type, the pages you view, how you arrived at the site, and how you interact with it. Details are in our Cookie Policy.
When you become a client, we collect the business contact details and account access necessary to deliver the services agreed between us.
We do not knowingly collect special category data, and we ask that you don't include sensitive personal information in enquiry messages.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry | Legitimate interests — replying to someone who has contacted us |
| Sending our newsletter | Consent, which you can withdraw at any time |
| Delivering services to clients | Performance of a contract |
| Understanding site usage and improving the site | Consent, via our cookie banner |
| Meeting legal, tax and accounting obligations | Legal obligation |
| Protecting the site from abuse and fraud | Legitimate interests |
Where we rely on legitimate interests, we've considered whether our interest is outweighed by your rights, and concluded it isn't. You can object at any time — see "Your rights" below.
Who we share it with
We use third-party providers who process personal data on our behalf, under contract and only on our instructions. These include website hosting, email and CRM providers, email marketing platforms, analytics providers, and advertising platforms where you've consented to marketing cookies.
We don't sell your personal data, and we don't share it with third parties for their own marketing.
We may disclose information where we're legally required to, or to establish, exercise or defend legal claims.
International transfers
Some of our providers are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate.
How long we keep it
- Enquiries that don't become clients: 24 months from last contact.
- Newsletter subscribers: until you unsubscribe, then a suppression record so we don't email you again in error.
- Client records: for the duration of the engagement and 7 years afterwards, to meet accounting and legal requirements.
- Analytics data: as set out in our Cookie Policy.
Your rights
Under UK GDPR you have the right to: access your data; have inaccurate data corrected; have data erased; restrict how we process it; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time where we rely on it.
To exercise any of these, email hello@topspotdigital.co.uk. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and vetting of the providers we use. No system is completely secure, but we take this seriously and review it regularly.
Changes
We may update this policy. The "last updated" date at the top will tell you when we last did.