Last updated: 2 June 2026
1. Who we are
Arddun Agency (“we”, “us”, “our”) is a UK-registered company with its registered address at:
Arddun Agency
15/29 Windsor Street
London
N1 8QG
We are registered with the Information Commissioner’s Office (ICO) as a data controller. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
We may collect and process the following personal data about you:
- Contact form submissions: your name, email address, phone number (if provided), and the content of your message.
- Newsletter signups: your name and email address.
- Analytics data: information about how you use our website, including pages visited, time spent, device type, browser, and approximate location derived from your IP address.
- Session recording and heatmap data: anonymised recordings of your interactions with our website, including mouse movements, clicks, and scrolling behaviour.
3. How we use your data
We use your personal data for the following purposes:
- To respond to enquiries you submit through our contact form.
- To send you our newsletter and relevant updates, where you have subscribed and given consent.
- To analyse how visitors use our website so we can improve it.
- To identify usability issues and improve the user experience through heatmap and session recording analysis.
4. Legal basis for processing
We process your data on the following legal bases:
- Consent (Article 6(1)(a) UK GDPR): for newsletter subscriptions, analytics cookies, and session recording. You may withdraw consent at any time.
- Legitimate interests (Article 6(1)(f) UK GDPR): for responding to contact form enquiries and understanding how our website is used.
5. Third-party services
We use the following third-party services which may process your data:
Google Analytics 4
We use Google Analytics 4 to understand how visitors use our site. Google Analytics collects anonymised usage data. Google may transfer data outside the UK; this is governed by Google’s standard contractual clauses. You can opt out using the Google Analytics opt-out browser add-on or by declining cookies when prompted. For more information, see Google’s Privacy Policy at google.com/policies/privacy.
Microsoft Clarity
We use Microsoft Clarity to capture anonymised session recordings and heatmaps. Clarity does not capture passwords, payment details, or other sensitive information. Data may be processed in the United States under Microsoft’s standard contractual clauses. For more information, see Microsoft’s Privacy Statement at privacy.microsoft.com.
Mailchimp (Intuit)
We use Mailchimp to manage our newsletter list and send marketing emails to subscribers who have opted in. Mailchimp stores your name and email address on servers in the United States, covered by standard contractual clauses. You can unsubscribe at any time using the link in any email we send, or by contacting us directly. For more information, see Mailchimp’s Privacy Policy at mailchimp.com/legal/privacy.
6. Cookies
Our website uses cookies. Cookies are small text files stored on your device that help us provide and improve our service. We use:
- Essential cookies: required for the website to function. These cannot be disabled.
- Analytics cookies: set by Google Analytics to help us understand website usage. Only placed with your consent.
- Session recording cookies: set by Microsoft Clarity. Only placed with your consent.
We use Ketch to manage cookie consent on our website. You can review and update your cookie preferences at any time by clicking the cookie settings link on our website, or by adjusting your browser settings. For more information about how Ketch handles data, see Ketch’s Privacy Policy at ketch.com.
7. How long we keep your data
- Contact form enquiries: retained for up to 2 years from the date of submission.
- Newsletter subscribers: retained until you unsubscribe or withdraw consent.
- Analytics and session recording data: retained in accordance with the respective platform’s default retention settings (typically 14 months for GA4; 30 days for Clarity recordings).
8. Your rights
Under UK GDPR, you have the following rights:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request that we correct any inaccurate data.
- Right to erasure: request that we delete your data in certain circumstances.
- Right to restrict processing: request that we limit how we use your data.
- Right to data portability: request a copy of your data in a machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our data protection contact (see Section 10).
9. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL encryption (HTTPS) for all data transmitted between your browser and our server.
While we take appropriate precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.
10. Contact and complaints
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your data, please contact our data protection lead:
Ian Shoobridge
Arddun Agency
15/29 Windsor Street, London, N1 8QG
Email: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
ICO Helpline: 0303 123 1113
Website: ico.org.uk
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically. This policy was last updated on 2 June 2026.