Legal

Privacy & Cookie Policy

Last updated: October 2026

1.Who we are

Digitally Seen (“Digitally Seen”, “we”, “us”) is a UK digital studio based in West London. We design and build websites, custom software and automation, and we provide Seen CRM, our software for managing enquiries and sales pipelines.

Digitally Seen is a trading name of Noovra Ltd, which also provides Seen CRM. Registered in England and Wales, company number 17423091.

For the personal data described in this policy, we are the controller. That means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Questions about this policy or your data can be sent to hello@digitallyseen.com, or call us on +44 7521 983937.

2.What this policy covers

This policy explains how we handle personal data when you:

  • visit digitallyseen.com, including the Seen CRM pages;
  • contact us through our forms, by email, phone or WhatsApp;
  • become a client of ours, or a user of a Seen CRM account.

Data inside Seen CRM. When a business uses Seen CRM to manage its own leads and customers, that business is the controller of that data and we act as its processor, handling it only on its instructions and under our agreement with it. If you are one of their customers, please contact the business directly about your data; we will help them respond.

3.The personal data we collect

Information you give us:

  • Your first and last name, email address and phone number.
  • What your enquiry is about, your message, and any budget you choose to share.
  • Whether you have agreed to receive marketing communications.
  • If you become a client: your business details, project content, billing information and our correspondence.
  • If you use Seen CRM: your name, work email, role and password (we only ever store a secure hash of it, never the password itself).

Information collected automatically:

  • Technical data such as your IP address, browser and device type, and the pages you request, which our hosting provider records in server logs to keep the website running and secure.
  • Small items stored in your browser, described in our cookie section below.

We do not knowingly collect special category data (such as health, religious or political information). Please do not include it in messages to us.

4.How we use your data, and our lawful basis

We only use personal data where the law allows it. The table below sets out each purpose and the lawful basis we rely on.

PurposeData usedLawful basis
Replying to enquiries from our contact, homepage and support forms, email, phone or WhatsAppName, contact details, enquiry type, message, any budget you shareLegitimate interests (responding to people who contact us); taking steps at your request before entering a contract
Providing our services (websites, software, automation, Seen CRM) and managing our client relationshipContact and business details, project content, communications, billing detailsPerformance of a contract
Handling support requests from existing clientsContact details, support category and messagePerformance of a contract; legitimate interests
Sending marketing emails about our servicesName and email addressYour consent (the checkbox on our forms), or for existing clients, the "soft opt-in" under PECR. You can opt out at any time
Running, securing and protecting our website and systems (including spam and abuse prevention)IP address, device and browser data, server logsLegitimate interests (keeping our services secure and working)
Running Seen CRM accounts (signing in, keeping you signed in, account administration)Name, work email, role, password (stored only as a secure hash), session cookie, activity in the accountPerformance of a contract; legitimate interests (security)
Keeping business and accounting records, and meeting legal obligationsInvoices, contracts and related correspondenceLegal obligation
Measuring how our website is used, with Google Analytics (only if you accept analytics cookies)Pages visited, how you got to them, approximate location (country/city), device and browser type, collected by analytical cookiesYour consent, given in our cookie settings (the cookie button in the corner)

Where we rely on legitimate interests, we have considered your rights and expect the use to be one you would reasonably expect. You can object to it at any time (see section 9).

5.Marketing

We will only send you marketing emails if you tick the marketing box on one of our forms, or if you are an existing client and we are telling you about similar services (the “soft opt-in” allowed under PECR). Every marketing email includes a way to unsubscribe, and you can also email hello@digitallyseen.com at any time. We never sell your data or share it with other companies for their own marketing.

6.Cookies and similar technologies

Cookies and similar technologies (such as your browser’s local storage) let a website remember small pieces of information. Under PECR we may only use ones that are strictly necessary, or that you have asked for, without your consent. Anything else, such as analytics, needs your consent first.

What we use today:

NameTypePurposeCategoryHow long
ds-cookie-consentBrowser storage (localStorage)Remembers whether you accepted or declined analytical cookies, so we do not ask on every visit.Strictly necessaryUntil you clear it or change your choice
ds_sessionCookie (Seen CRM sign-in only)Keeps you securely signed in to your Seen CRM account. Only set when you log in.Strictly necessaryUp to 30 days, or until you log out
ds-themeBrowser storage (localStorage, Seen CRM pages)Remembers whether you chose light or dark mode.Functional (set at your request)Until you clear it
_gaCookie (Google Analytics 4, by Google)Tells visits apart so we can count visitors and see how the site is used, in aggregate. Only set if you accept analytics.Analytical (needs your consent)1 year
_ga_<ID>Cookie (Google Analytics 4, by Google)Keeps track of your current visit (session) for the same counts. Only set if you accept analytics.Analytical (needs your consent)1 year

Analytical cookies. We use Google Analytics 4, provided by Google, to count visits and see how our site is used. We only see aggregated reports, not who you are. It only loads after you choose “Accept” or switch analytical cookies on; until then nothing is sent to Google. Google Analytics 4 does not log or store IP addresses, and we have turned off Google signals and ad personalisation. Google may process this data outside the UK, under its own safeguards (see section 8). We do not use advertising or cross-site tracking cookies.

If you withdraw consent, Google Analytics stops straight away and we delete its cookies from your browser. We ask again after 12 months, or if the cookies we use change.

Third-party content. Our pages load fonts from Google Fonts and images from image-hosting services. These services do not set cookies through our site, but your browser shares your IP address with them so the content can be delivered.

Changing your choice. You can change or withdraw consent at any time using the cookie button in the bottom-left corner, the “Your privacy choices” link in our footer, or . You can also block or delete cookies in your browser settings, although parts of Seen CRM (such as staying signed in) will not work without the strictly necessary ones.

7.Who we share data with

We share personal data only where needed, and never sell it. The people and organisations we may share it with are:

  • Service providers (processors) who act on our instructions, under contracts that require them to keep it secure. These include our website and database hosting providers, our email delivery provider (Resend, used to send form submissions to our inbox), Google (Google Analytics, only if you accept analytics cookies), and the email, file-storage and accounting tools we use to run the business.
  • Professional advisers such as accountants, lawyers and insurers, where necessary.
  • Authorities and regulators where the law requires it, or to protect our rights, property or safety and that of others.
  • A buyer or successor if our business, or part of it, is sold or reorganised, under the same protections.

8.International transfers

Some of our service providers (for example, our email delivery provider, and Google for analytics if you accept it) are based in, or store data in, the United States or other countries outside the UK. When personal data is transferred outside the UK, we make sure it is protected by a UK adequacy regulation (including the UK-US “data bridge” for certified US organisations) or by the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.

9.Your rights

Under UK data protection law you have the right to:

  • Access a copy of the personal data we hold about you.
  • Rectification of data that is inaccurate or incomplete.
  • Erasure of your data in certain circumstances.
  • Restrict how we use your data in certain circumstances.
  • Object to us using your data on the basis of legitimate interests, and to direct marketing at any time.
  • Data portability: to receive data you gave us in a commonly used format, or have it sent to another organisation.
  • Withdraw consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it).

To use any of these rights, email hello@digitallyseen.com. We will respond within one month, and there is usually no charge. We may need to confirm your identity first. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

10.How long we keep your data

We keep personal data only for as long as we need it for the purposes above:

DataHow long we keep it
Enquiries that do not lead to workUp to 24 months after our last contact, then deleted
Client records, contracts and invoices6 years after the end of the financial year in which our relationship ends (UK tax and limitation rules)
Support requestsUp to 24 months after the request is closed
Seen CRM account dataFor the life of the account, then deleted or returned within 90 days of it closing, unless the law requires us to keep it
Marketing preferencesUntil you unsubscribe; we keep a minimal suppression record so we do not contact you again
Server and security logsTypically up to 30 days, as set by our hosting provider

11.How we keep your data secure

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access limited to people who need it, and rate limiting on our forms to prevent abuse. No method of transmission over the internet is completely secure, but if a breach happens that puts your rights at risk, we will tell you and the ICO where the law requires.

12.Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us their data, please contact us and we will delete it.

13.Complaints

If you are unhappy with how we have handled your data, please contact us first at hello@digitallyseen.com so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

14.Changes to this policy

We may update this policy from time to time, for example if we start using a new service. The latest version will always be on this page with the date it was last updated. If the changes are significant, we will make that clear on our website or contact you directly.

15.Contact us

Noovra Ltd

West London, United Kingdom

Email: hello@digitallyseen.com

Phone: +44 7521 983937

See also our Terms & Conditions.