Privacy & Cookie Policy

1. Who we are

eHull Digital ("we", "us", "our") is a digital marketing agency based in Hull, United Kingdom. We operate the website at ehull.co.uk. For any privacy-related enquiries please contact us via the contact form.

2. What personal data we collect

We collect personal data only when you actively provide it:

• Contact form — name, email address, phone number (optional), and the message you send us.
• Newsletter sign-up — email address and the date you subscribed.
• Quick-contact widget — name, email address, and your message.
• Google connections — where an authorised user connects a Google Account, encrypted OAuth tokens, selected account and location identifiers and names, and the data needed to provide the agreed Google Business Profile or Google Ads feature. While an authorised user chooses a Business Profile location, this can include its displayed title and storefront or business address where Google supplies one.

We do not intentionally collect special-category personal data through our website forms or Google connections.

3. How we use your data

We use the data you submit solely to:

• Respond to your enquiry or support request.
• Send you the newsletter you opted into (you may unsubscribe at any time).
• Prevent spam and abuse (IP address used briefly for rate-limiting, not stored long-term).
• Connect, operate and support the Google Business Profile and Google Ads features that an authorised user has asked us to provide.

Our lawful bases under UK GDPR are legitimate interests (responding to enquiries) and consent (newsletter subscriptions and Google Account authorisation), together with the performance of an agreement where we provide services to a client.

4. Data storage and retention

• Contact messages are stored in our secure database and reviewed by our team. We delete them when no longer needed and no later than 2 years after receipt.
• Newsletter subscriptions are retained until you unsubscribe.
• Server logs (including IP addresses) are retained for up to 30 days.
• Google connection details are retained only while a connection is active or otherwise needed to provide the agreed service. Disconnecting a Google Business Profile clears the stored tokens and connection fields for that profile.

OAuth access and refresh tokens are encrypted at rest. All data is stored on servers located within the United Kingdom / European Economic Area.

5. Third-party services

We may share data with the following processors under appropriate data-processing agreements:

• Google Fonts — if you consent to functional cookies, your browser fetches font files from Google's servers, which may log your IP address. Google's privacy policy applies.
• Google APIs — used only where an authorised user has connected an account for a Google Business Profile or Google Ads feature. Google's own terms and privacy policy apply to its services.
• osTicket — enquiries submitted through our forms may be forwarded to our support ticketing system. Only the information you provide is sent.
• Email provider — used to deliver replies to your enquiries.

We do not sell your data to any third party.

6. Google Account data and Ehull-social

Ehull-social is an eHull tool used by authorised eHull staff and authorised client representatives. It can connect a Google Account to the Google Business Profile locations that account is allowed to manage and, where relevant, retrieve reporting for Google Ads accounts managed through eHull's agency account.

What we access

• Google Business Profile — account and location identifiers and names. When listing locations that an authorised account can manage, the integration also retrieves the location title and storefront or business address where Google supplies one. We store the identifiers and names needed for the connection; the address is not stored as part of that connection. The current OAuth permission is https://www.googleapis.com/auth/business.manage.
• Google Ads — aggregate account reporting such as spend, clicks and conversion totals where the Google Ads connection is enabled. The current OAuth permission is https://www.googleapis.com/auth/adwords.
• OAuth tokens — access and refresh tokens used to keep an approved connection working until it is disconnected or revoked.

We do not request access to Gmail, Google Drive, Google Contacts, Calendar or unrelated Google Account content through these integrations.

How we use Google data

We use Google data only to provide and support the user-facing features described above: selecting and managing an authorised Business Profile, preparing or publishing approved Business Profile content, and providing agreed Google Ads reporting. We do not sell Google data or use it for advertising, audience profiling, credit decisions or any unrelated purpose.

Access is limited to authorised eHull staff where needed to provide the service, support a connection or investigate a security issue. We share Google data only with Google to carry out the requested action, with systems that operate the agreed eHull service, where you have authorised it, or where required for security or by law.

Disconnecting and deletion

An authorised eHull administrator can disconnect a Google Business Profile in the eHull admin area. You can also revoke eHull's access through your Google Account's third-party access settings. Revoking or disconnecting access stops future actions but does not remove content already published on Google. For Google Ads disconnection or a request to delete retained Google connection data, please contact us.

Ehull-social's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Cookies

A cookie is a small text file stored on your device. We use the following cookies:

Essential cookies (always active)

These cookies are strictly necessary for the site to work and cannot be disabled.

Functional cookies

Enabled only with your consent. They improve the visual experience but are not required for core functionality.

Your cookie preferences are stored in your browser's localStorage under the key ehull_consent — this is not transmitted to our server.

Analytics cookies

When you consent to analytics cookies, we may use third-party or self-hosted analytics tools to collect anonymous usage data such as page views, traffic sources, and device types. IP addresses are anonymised where possible. These tools help us understand how visitors use our site so we can improve your experience.

Analytics scripts are only loaded after you give explicit consent. You can withdraw consent at any time via Cookie Settings.

Marketing cookies

We do not currently use marketing or remarketing cookies. If we introduce them in the future, we will update this policy and request fresh consent before activating them.

8. Managing your cookie preferences

You can change your preferences at any time by clicking the Cookie Settings button. You can also clear all cookies by deleting your browser data or using your browser's built-in cookie controls.

9. Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Children's privacy

Our website is not directed at children under 13. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy periodically. Material changes will be highlighted on this page with an updated "Last updated" date. Continued use of the site after changes constitutes acceptance of the revised policy.

12. Contact

For any questions about this policy or your personal data, please contact us. You can also read our Terms of Service.