Privacy & Cookie Policy
How we collect, use, and protect your data.
Last updated: 28 March 2026
1. Who we are
eHull Digital ("we", "us", "our") is a digital marketing agency based in Hull, United Kingdom. We operate the website at ehull.co.uk. For any privacy-related enquiries please contact us via the contact form.
2. What personal data we collect
We collect personal data only when you actively provide it:
- Contact form — name, email address, phone number (optional), and the message you send us.
- Newsletter sign-up — email address and the date you subscribed.
- Quick-contact widget — name, email address, and your message.
We do not collect any special-category (sensitive) personal data.
3. How we use your data
We use the data you submit solely to:
- Respond to your enquiry or support request.
- Send you the newsletter you opted into (you may unsubscribe at any time).
- Prevent spam and abuse (IP address used briefly for rate-limiting, not stored long-term).
Our lawful bases under UK GDPR are legitimate interests (responding to enquiries) and consent (newsletter subscriptions).
4. Data storage and retention
- Contact messages are stored in our secure database and reviewed by our team. We delete them when no longer needed and no later than 2 years after receipt.
- Newsletter subscriptions are retained until you unsubscribe.
- Server logs (including IP addresses) are retained for up to 30 days.
All data is stored on servers located within the United Kingdom / European Economic Area.
5. Third-party services
We may share data with the following processors under appropriate data-processing agreements:
- Google Fonts — if you consent to functional cookies, your browser fetches font files from Google's servers, which may log your IP address. Google's privacy policy applies.
- osTicket — enquiries submitted through our forms may be forwarded to our support ticketing system. Only the information you provide is sent.
- Email provider — used to deliver replies to your enquiries.
We do not sell your data to any third party.
6. Cookies
A cookie is a small text file stored on your device. We use the following cookies:
Essential cookies (always active)
These cookies are strictly necessary for the site to work and cannot be disabled.
| Name | Purpose | Expiry |
|---|---|---|
| ehull-session | Maintains your session across pages (e.g. form submission state) | 2 hours |
| XSRF-TOKEN | Protects forms against Cross-Site Request Forgery attacks | Session |
Functional cookies
Enabled only with your consent. They improve the visual experience but are not required for core functionality.
| Service | Purpose | Third party |
|---|---|---|
| Google Fonts | Loads custom typefaces (DM Sans, Syne) from Google's CDN | Google LLC |
Your cookie preferences are stored in your browser's localStorage under the key ehull_consent — this is not transmitted to our server.
Analytics cookies
When you consent to analytics cookies, we may use Google Analytics 4 to understand how visitors interact with our site. This helps us improve your experience.
| Service | Purpose | Third party |
|---|---|---|
| Google Analytics 4 | Anonymous usage statistics (page views, traffic sources, device types). IP addresses are anonymised. | Google LLC |
Analytics cookies are only loaded after you give explicit consent. You can withdraw consent at any time via Cookie Settings.
Marketing cookies
We do not currently use marketing or remarketing cookies. If we introduce them in the future, we will update this policy and request fresh consent before activating them.
7. Managing your cookie preferences
You can change your preferences at any time by clicking the button. You can also clear all cookies by deleting your browser data or using your browser's built-in cookie controls.
8. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your personal data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Children's privacy
Our website is not directed at children under 13. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this policy periodically. Material changes will be highlighted on this page with an updated "Last updated" date. Continued use of the site after changes constitutes acceptance of the revised policy.
11. Contact
For any questions about this policy or your personal data, please contact us and we will be happy to help.