Privacy Policy

1. Who we are

Jupiter Digital Marketing ("Jupiter", "we", "us" or "our") is a B2B digital marketing agency providing SEO, generative engine optimisation, paid media, web design, PR, email marketing and related services.

For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for personal information we collect through this website and in the course of managing our own client relationships. When we handle personal information inside a client's own systems on their instructions — their analytics, CRM, ad accounts or mailing lists — we act as a data processor on that client's behalf, and their privacy policy governs how that data may be used.

2. Information we collect

Information you give us directly

• Contact and enquiry details — name, business email address, company name, job title, website URL and anything else you send us by email or LinkedIn message.
• Strategy call information — notes we take during discovery and strategy calls about your goals, current marketing performance, competitors and internal processes.
• Client onboarding information — billing contacts, purchase order references, and the names and email addresses of the people on your team we work with day to day.
• Live chat messages — anything you type into the chat widget on this site, together with your name and email address if you provide them, so we can reply.
• Correspondence — the content of emails, messages and support requests you send us, along with our replies.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, screen size, and the language and time-zone settings your browser reports.
• Usage data — the pages you visit on this site, the page that referred you, how long you spend on a page, and the links you click.

We use this information in aggregate to understand which of our articles and service pages are useful and to keep the site working correctly. Some of it is also shared with Meta through the Meta Pixel for advertising measurement and retargeting, as described in section 5. We do not sell it, and we do not build advertising profiles about individual visitors ourselves.

Information from other sources

• Publicly available business information — company websites, published press releases, LinkedIn company pages and similar public sources, used for research and to prepare proposals.
• Search and analytics platforms — anonymised and aggregated performance data from Google Search Console, Google Analytics, advertising platforms and SEO tools connected to accounts we have been given access to.
• Referrals — where an existing client or partner introduces you to us, we receive the contact details they choose to share.

3. How we use information

We do not sell personal information, and we do not share it with third parties for their own independent marketing purposes.

4. Legal bases for processing

Where the UK or EU GDPR applies, we rely on the following legal bases:

• Legitimate interests — responding to business enquiries, running and securing our website, contacting business contacts about services relevant to their role, and pursuing our ordinary commercial interests. We balance these against your rights and interests each time.
• Performance of a contract — everything necessary to deliver the services set out in a signed agreement or statement of work, and to bill for them.
• Consent — non-essential cookies and marketing emails to prospects who are not existing clients. You can withdraw consent at any time.
• Legal obligation — retaining financial records and responding to lawful requests from authorities.

5. Cookies and similar technologies

This website uses a small number of cookies and browser storage entries. Where non-essential cookies are in use, we ask for your consent before they are set.

• Strictly necessary — remembering your cookie choices and keeping the site secure and functional. These cannot be switched off.
• Analytics — measuring page views and traffic sources in aggregate so we can improve the site.
• Advertising and measurement — the Meta Pixel, described below, which supports advertising measurement and retargeting.
• Functional — the live chat widget, which stores an identifier so a conversation continues across pages and return visits.

Meta Pixel

This website uses the Meta Pixel, a tracking technology provided by Meta Platforms, Inc. (Facebook and Instagram). It sets cookies and sends information to Meta about your visit — the pages you view, your IP address, browser and device details, and a page-view event.

We use it to measure how many people reach our site from our Facebook and Instagram ads, to understand which pages those visitors read, and to show our ads to people who have already visited us (retargeting) and to audiences with similar characteristics. Meta may match this information to a Facebook or Instagram account if you have one, and may use it for its own purposes as an independent controller. You can read how Meta handles it in the Meta Privacy Policy.

Where consent is required, the pixel is set only after you agree to advertising cookies. You can also control this through your Meta ad preferences, by declining advertising cookies in your browser, or with a browser extension that blocks tracking scripts. Declining does not affect your ability to use this site.

Live chat

We use EasyChatDesk to run the chat widget on this site. When the widget loads it stores an identifier in your browser so a conversation can continue as you move between pages, and it receives your IP address, browser details and the page you are on. If you start a chat, the messages you send — and any name or email address you give us — are stored by EasyChatDesk on our behalf so that we can read and reply to them.

We use chat transcripts only to answer your question, follow up on it, and improve the answers we give. EasyChatDesk acts as our processor and may not use the content for its own purposes. Chat transcripts are kept for up to 24 months. If you would rather not use the widget, email us instead at hello@jupiterdigitalmarketing.com.

This site also loads resources from third-party content delivery networks — Bootstrap and Bootstrap Icons from jsDelivr, and web fonts from Google Fonts. Loading those files sends your IP address and browser details to those providers, which is a normal part of how the web works but worth stating plainly.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site from working as intended. We honour Global Privacy Control (GPC) signals where our systems receive them.

6. Client accounts and client data

Delivering our services usually means we are granted access to systems that belong to our clients — Google Analytics, Google Search Console, Google Ads, Meta Business Manager, LinkedIn Campaign Manager, CMS admin accounts, email marketing platforms and, in some engagements, a CRM.

• We request the minimum level of access needed to do the work, and read-only access wherever that is sufficient.
• We use that access only to deliver the agreed services and to report on them.
• We do not export, copy or reuse a client's customer lists, contact databases or lead data for any purpose other than that client's own campaigns.
• Access is revoked, and any credentials we hold are removed, when an engagement ends. Clients may also revoke access themselves at any time.

Where we process personal data on a client's behalf we will, on request, enter into a data processing agreement setting out the terms in more detail.

7. When we share information

We share personal information only in the following circumstances:

• Service providers who work on our behalf — email and calendar hosting, website hosting and CDN providers, analytics tools, our live chat provider EasyChatDesk, SEO and advertising platforms, invoicing and accounting software, and project management tools. They may only use the information to provide their service to us.
• Advertising and search platforms — including Meta, Google and LinkedIn. This covers the Meta Pixel on our own site, and cases where running a client's campaign requires uploading or configuring data in that platform, always on that client's instructions.
• Professional advisers — accountants, auditors, insurers and lawyers, where they need the information to advise us.
• Authorities, where we are required to disclose information by law, court order or a valid regulatory request.
• A successor, if our business or part of it is sold, merged or reorganised. We will tell affected clients before their information transfers.

We do not sell personal information, and we have not sold or shared personal information for cross-context behavioural advertising in the past twelve months.

8. How long we keep information

• Enquiries that do not become clients — up to 24 months from your last contact with us, then deleted.
• Client records and correspondence — for the duration of the engagement and for 6 years afterwards, so we can deal with questions or claims that arise later.
• Invoices and financial records — as long as tax and company law requires, typically 6 to 7 years.
• Website analytics — in aggregate form, or deleted according to the retention settings of the analytics tool in use, whichever is shorter.
• Live chat transcripts — up to 24 months from the date of the conversation.
• Marketing email lists — until you unsubscribe, plus a suppression record so we do not email you again by mistake.

9. How we protect information

We use encryption in transit (HTTPS), access controls limited to the people who need them, multi-factor authentication on the accounts that support it, and a password manager for shared credentials. We review who has access to client accounts when team members or engagements change.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information and creates a risk to your rights, we will notify you and the relevant supervisory authority within the timeframes the law requires.

10. International transfers

We are based in the United States and work with clients and suppliers in other countries. Personal information may therefore be transferred to, stored in, or accessed from countries outside your own, including countries that have not been formally recognised as providing an equivalent level of data protection.

Where we transfer personal information out of the UK or European Economic Area, we rely on an appropriate safeguard — normally the European Commission's Standard Contractual Clauses, together with the UK Addendum where relevant, and supplementary measures where they are needed.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — ask for a copy of the personal information we hold about you.
• Correction — ask us to fix information that is inaccurate or incomplete.
• Deletion — ask us to delete information we no longer have a valid reason to keep.
• Restriction — ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.
• Objection — object to processing based on legitimate interests, and object to direct marketing at any time with no reason needed.
• Portability — receive information you gave us in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting processing already carried out.

To exercise any of these, email hello@jupiterdigitalmarketing.com. We will respond within 30 days, or tell you if we need longer. We may need to verify your identity first. Using these rights is free, and we will not treat you differently for doing so.

If the request concerns data we process on a client's behalf, we will forward it to that client and support them in responding.

If you are in the UK or EEA and are unhappy with our response, you may complain to your national data protection authority — in the UK, the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concern first.

12. US state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you may request to know the categories and specific pieces of personal information we have collected, request deletion or correction, and opt out of sale, sharing or targeted advertising. As stated above, we do not sell or share personal information for cross-context behavioural advertising.

You may use an authorised agent to submit a request on your behalf, with written proof of their authority. We will not deny service, charge a different price, or provide a lesser quality of service because you exercised a privacy right.

13. Children's privacy

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

14. Third-party websites

Our website and blog link to third-party sites, tools and resources. We do not control those sites and are not responsible for their content or privacy practices. Read their privacy policies before providing personal information to them.

15. Changes to this policy

We update this policy as our services, tools and legal obligations change. The effective date at the top of the page shows the current version. If a change materially affects how we handle your personal information, we will give notice by email or by a prominent notice on the site before it takes effect.

16. Contact us

Questions, requests or complaints about this policy or about how we handle personal information:

• Email: hello@jupiterdigitalmarketing.com
• Post: [registered business address]
• Or the contact details on our contact page.

See also our Terms and Conditions.