Privacy Policy
Last updated: 26/5/26
This privacy policy explains how Pagekit Ltd (“PageKit”, “we”, “us”, “our”) collects, uses, and protects personal data. We are committed to handling your information responsibly and in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
Pagekit Ltd is the data controller for the personal data described in this policy.
- Company name: Pagekit Ltd
- Registered in: England and Wales
- Company number: 17193122
- Registered office: 167-169 Great Portland Street London W1W 5PF
- Contact email: sales@pagekit.co.uk
If you have any questions about this policy or how we handle your data, email us at the address above.
2. What data we collect
We collect the following categories of personal data:
From website visitors:
- Technical data such as IP address, browser type, device information, and pages visited (via Google Analytics and Google Tag Manager)
- Cookie data (see our Cookie Policy for details)
From people who contact us or fill in a form on our site:
- Name
- Email address
- Phone number
- Company name
- Any information you choose to include in your enquiry
From customers:
- All of the above, plus billing information, account details, and content you provide for inclusion in your PageKit hub
- Communication history with our support team
From prospects we contact for marketing purposes:
- Name (where available)
- Work email address
- Job title
- Employer name
- Source of the contact information (e.g. company website, Companies House, LinkedIn)
3. How we collect data
We collect personal data in the following ways:
- Directly from you when you fill in a form on our website, email us, or become a customer
- Automatically when you browse our website (via cookies and analytics tools)
- From publicly available sources such as company websites, Companies House, the Care Quality Commission (CQC) register, and professional networking sites — used solely for B2B prospecting in line with this policy
4. Why we use your data and our lawful basis
Under UK GDPR we must have a lawful basis for processing your personal data. Our bases are:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry or contact form submission | Legitimate interest / steps prior to entering a contract |
| Providing and managing your PageKit hub service | Performance of a contract |
| Billing and processing payments | Performance of a contract / legal obligation |
| Sending service-related communications to customers | Performance of a contract |
| Sending B2B marketing emails to prospects in their professional capacity | Legitimate interest (UK GDPR Article 6(1)(f)) |
| Improving our website and services through analytics | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
For our B2B cold email outreach we rely on legitimate interest. We have carried out a Legitimate Interests Assessment which concluded that our interest in promoting PageKit to relevant hospitality and care businesses is not overridden by the rights of recipients, provided we contact them in their professional capacity, give clear information about who we are and how we got their details, and offer an easy way to opt out.
5. Who we share your data with
We do not sell your personal data. We share it only with trusted third parties that help us run our business, including:
- Hosting and infrastructure providers (for our website and your hub)
- Email and communication tools (e.g. our email service provider)
- Analytics providers (Google Analytics, Google Tag Manager)
- Payment processors (for customers — your card details are handled directly by the processor and never stored by us)
- Professional advisers (such as accountants or legal advisers, where required)
- Regulators or law enforcement, where we are legally required to disclose data
All processors we use are bound by contract to handle your data securely and in line with UK GDPR.
6. International transfers
Some of the tools we use may store data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep your data
- Website analytics data: up to 26 months
- Enquiry data (non-converted): up to 24 months from last contact, then deleted
- Customer data: for the duration of the contract plus 6 years (for tax, accounting, and legal purposes)
- Marketing prospect data: until you opt out, your details become outdated, or 24 months have passed without engagement — whichever comes first
- Suppression list (unsubscribed contacts): retained indefinitely so that we never contact you again
8. Your rights
Under UK GDPR you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) — ask us to delete your personal data
- Right to restrict processing — ask us to pause processing in certain circumstances
- Right to object — object to processing based on legitimate interest, including all direct marketing
- Right to data portability — receive your data in a portable format
- Right to withdraw consent — where we rely on consent, you can withdraw it at any time
To exercise any of these rights, email us at sales@pagekit.co.uk. We will respond within one month.
9. Opting out of marketing
You can opt out of our marketing emails at any time by:
- Clicking the “unsubscribe” link in any marketing email we send you, or
- Replying to the email with the word “unsubscribe”, or
- Emailing sales@pagekit.co.uk with your request
Once you opt out, we will remove your details from our marketing list immediately and add you to our suppression list so we do not contact you again.
10. Cookies
Our website uses cookies for analytics and site functionality. See our Cookie Policy for full details and to manage your preferences.
11. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure hosting, encrypted connections (HTTPS), access controls, and regular reviews of our systems.
No method of transmission over the internet is 100% secure, so while we do our best, we cannot guarantee absolute security.
12. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at sales@pagekit.co.uk so we can try to resolve the issue.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Website: ico.org.uk Helpline: 0303 123 1113
13. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent change. Significant changes will be communicated to customers by email.