Privacy Policy & UK GDPR Notice

At InLoop ("we", "us", "our"), registered in England & Wales as a brand of Click Design (Suite 9.25, Spaces Peter House, Oxford Street, Manchester, M1 5AN, UK), we are committed to respecting and protecting your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect personal information when you interact with our website, request a proposal, book a consultation, or engage our services. This includes:

• Identity Data: Full name, job title, company name.
• Contact Data: Email address, phone number, physical address, business location.
• Technical & Usage Data: IP address, browser type, device identifiers, time spent on pages, referrer URLs (collected via consent-based analytics cookies).
• Marketing Data: Communication preferences and form submission inquiries.

2. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• Consent: When you opt-in to marketing communications or accept non-essential cookies.
• Contractual Necessity: To fulfill quotes, proposals, Statements of Work (SOW), or deliver web development, SEO, and social media services.
• Legitimate Interests: To improve our website user experience, safeguard our digital infrastructure, and maintain normal business operations.
• Legal Obligation: To comply with UK tax (HMRC) and corporate record-keeping requirements.

3. How We Use Your Personal Data

We process your data exclusively to:

• Respond to your service enquiries and provide tailored digital growth quotes.
• Deliver contracted services including web design, SEO, performance ads, and content management.
• Send relevant UK business updates or case studies where consent has been granted.
• Detect and prevent fraud or security breaches.

4. Data Sharing & International Transfers

We do not sell, rent, or trade your personal data. We may share data with vetted third-party service providers (such as hosting platforms, analytics tool providers, and CRM tools) strictly operating under UK-standard Data Processing Agreements (DPAs). If data is transferred outside the UK/EEA, appropriate safeguards (such as UK International Data Transfer Agreements - IDTA) are enforced.

5. Retention Period

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or HMRC reporting requirements (typically 6 years for financial transactions).

6. Your UK Data Rights

Under the UK GDPR, you have statutory rights regarding your personal information, including:

• Right of Access: Request a copy of the personal data we hold about you (Subject Access Request - SAR).
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data where processing is no longer required.
• Right to Restrict or Object: Restrict processing or object to direct marketing.
• Right to Data Portability: Obtain your data in a structured, standard machine-readable format.

To exercise any of these rights, please contact our Data Lead at inloopmcr@gmail.com or call +44 7940 586927.

7. Complaints to Information Commissioner’s Office (ICO)

You have the right to lodge a complaint at any time with the UK regulatory authority for data protection issues: