Privacy notice
Last updated 26 October 2026
This notice explains what personal information Soal Creative Limited collects through soalcreative.com and our work, why we collect it, who we share it with and what your rights are. We have written it to be read, not skimmed past.
1. Who we are
Soal Creative Limited (“Soal Creative”, “we”) is registered in Northern Ireland, company number NI697964, with its registered office at 2 Hayesbank Park, Derry BT47 2AZ. We decide how your information is used, which makes us the “controller” under UK data protection law.
Questions about your data go to Marc Soal: [email protected] or 07841 164449.
2. What we collect and why
| When | What we collect | Why we use it | Lawful basis |
|---|---|---|---|
| You send the enquiry form | Name, email, phone (optional), website, business name, what you are interested in, your message, and your consent tick | To reply, understand what you need and quote | Steps you ask us to take before a contract, and our legitimate interest in answering enquiries |
| You book a session or walkthrough | Name, email, phone, the time you chose and any notes | To run the booking and send reminders | Contract |
| You pay us online | Name, email, what you bought and the amount. Card details go straight to Stripe; we never see your full card number | To take payment and keep proper accounts | Contract, and legal obligation (tax records) |
| We work together | Contact details, project content, and any logins or account access you give us for the job | To do the work you have asked for | Contract |
| You email or phone us | Whatever you send us | To reply and keep a record of what was agreed | Legitimate interests |
| You browse the site and click “Accept” | Pages viewed, device and browser, rough location (town or country) and how you found us | To see which pages help people and improve the site | Consent, which you can withdraw at any time |
If you give us access to your own customers’ data as part of a job (for example a CRM or an email list), we handle it only on your instructions, as your “processor”, and only for that job.
3. Marketing emails
We only send marketing emails if you have asked for them, or if you are a client and we are telling you about services like the ones you already use. Every marketing email has an unsubscribe link, and you can also just reply and ask us to stop.
4. Who we share it with
We do not sell your information. We use a small number of trusted providers to run the business, and they may only use your data to provide their service to us:
- HighLevel (LeadConnector): our website, enquiry forms, booking calendar, customer records and email. Based in the USA.
- Stripe: card payments. Stripe is also a controller for some payment data, under its own privacy notice.
- Google: Google Analytics (only if you accept analytics cookies), Google Search Console, and Google Fonts. Our pages load their fonts from Google’s servers, so Google receives your IP address when a page loads.
- Microsoft: our email (Microsoft 365).
- Our accountant, HMRC and other authorities, where the law requires it.
5. Data sent outside the UK
Some of these providers store data in the USA or the EU. Where they do, the transfer is covered by UK adequacy regulations (including the UK–US data bridge for certified companies) or by the UK International Data Transfer Addendum to the EU standard contractual clauses.
6. How long we keep it
- Enquiries that do not turn into work: 2 years from our last contact.
- Clients, bookings and payments: 6 years after the end of the financial year the work was in, because tax law requires it.
- Google Analytics data: 14 months.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to us using it for our legitimate interests or for marketing, and withdraw consent at any time. Just email [email protected]. We will reply within one month and there is no charge.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113. If you are in the Republic of Ireland you can contact the Data Protection Commission: dataprotection.ie.
8. Keeping it safe
Access to our systems is limited to the people who need it and protected by strong passwords and two-step sign-in where it is available. Any logins you share for a job are used only for that job, and we ask you to change them when the work ends.
9. Changes
If we change this notice, we will update it here and change the date at the top.