1. Who we are
DGL Media Agency Limited (“DGL”, “we”, “us”, “our”) provides website design, development, hosting and related digital services. For personal data collected through this website and our client relationship, DGL is the data controller unless another arrangement is stated.
2. Information we collect
We may collect information you choose to provide through enquiries, including your name, business name, email address, telephone number and project information. Client accounts may also contain service, website, billing-status and support information required to operate the service.
3. How we use information
We use personal data to respond to enquiries, provide and support client services, administer accounts, maintain hosting, manage billing, prevent misuse, keep appropriate business records and comply with legal obligations.
4. Contact forms and enquiries
The current public contact form prepares an email in your own email application rather than storing the message in the website itself. Once you send that email, it is processed through the normal email systems used by you and DGL.
5. Client accounts and authentication
Where the client portal is enabled, account information is stored in the website’s database. Passwords are stored as one-way salted hashes rather than readable passwords. Authentication sessions use secure cookies so clients can access only the account information associated with their login.
6. Payments and Stripe
Billing and subscription management may be provided by Stripe. DGL stores identifiers and subscription status required to associate a client account with the correct Stripe customer, but does not store full card numbers in the DGL portal. Payment details, invoices and subscription changes are handled through Stripe’s services and are also subject to Stripe’s privacy terms.
7. Hosting and service providers
We may use third-party infrastructure and service providers to host websites, databases, email, analytics and related systems. Providers are given access only where reasonably necessary to deliver the relevant service and remain subject to their own security and data-protection obligations.
8. Cookies and analytics
Necessary technologies may be used for security, client login and your cookie-preference choice. Non-essential analytics or marketing technologies are not loaded until the relevant consent is given. You can change your preference using “Cookie settings” in the consent panel.
9. Lawful bases
Depending on the context, we process information because it is necessary to take steps at your request or perform a contract, because we have a legitimate business interest that does not override your rights, because we must comply with a legal obligation, or because you have given consent.
10. Data retention
We keep personal data only for as long as reasonably necessary for the purpose it was collected, including providing services, maintaining business and tax records, resolving disputes and meeting legal requirements. Account and billing records may therefore be retained for a different period from a general enquiry.
11. Your rights
UK data-protection law may give you rights to access, correct, erase or restrict personal data, object to certain processing, request portability in some circumstances and withdraw consent where consent is the basis for processing. You may also complain to the UK Information Commissioner’s Office.
12. International processing
Some technology providers may process information outside the UK. Where this applies, we rely on the safeguards made available by the relevant provider and applicable data-protection law.
13. Security
We use reasonable technical and organisational measures appropriate to the service, including encrypted connections, restricted account access and separation between public website content and protected client information.
14. Contact
For privacy questions or rights requests, email hello@dglmediaagency.com. Our registered office is 4A Brecon Court, William Brown Close, Llantarnam Industrial Park, Cwmbran, Wales, NP44 3AB.