Legal

Privacy Policy

Privacy information for Dool Creative Agency Ltd, including how business enquiry and website usage data may be collected and used on dool.agency.

Privacy Policy

Privacy information for Dool Creative Agency Ltd, including how business enquiry and website usage data may be collected and used on dool.agency.

Introduction+

Last updated: 24 June 2026 This Privacy Policy explains how Dool Creative Agency Ltd ("Dool", "the Company", "we", "us") processes personal data through the website dool.agency, related enquiry and booking flows, business communications, client and prospect relationship management, service administration and email communications. Dool Creative Agency Ltd is registered in England and Wales under Company No. 12340031, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Through the Website and related communication channels, the Company provides information about its services and offers the possibility to request contact, book appointments, submit enquiries, communicate with Dool and access related content. For the purposes of Regulation (EU) 2016/679 (GDPR), the UK GDPR and applicable electronic communications and data protection law, the Company informs users, clients, prospects and business contacts that personal data will be processed with appropriate technical and organisational security measures.

Principles applicable to personal information+

In processing personal data, the following principles apply: • Lawfulness, fairness and transparency: users are informed clearly about why personal data is requested and consent is obtained where required. • Data minimisation: only data strictly necessary for the stated purpose is requested. • Storage limitation: data is kept only for as long as necessary for the purpose of processing. • Integrity and confidentiality: appropriate security measures are implemented to protect personal data against unauthorised access or misuse.

How personal data is obtained+

Personal data may be obtained through: • Contact and enquiry forms • Lead review and appointment booking flows • Email or direct communication initiated by the user, client, prospect or business contact • Business contact details obtained from publicly available sources, company websites, professional directories, business platforms, referrals or other legitimate B2B sources • Website analytics and attribution technologies, where enabled and consented to • Internal business systems used to manage enquiries, bookings, service delivery, communication records and client or prospect relationships Users, clients, prospects and business contacts who interact with the Website or communicate with Dool are informed of the terms set out in this Privacy Policy and the applicable Terms and Conditions.

User rights+

Any person has the right to obtain confirmation about whether the Company is processing their personal data. In particular, users have the right to: • Request access to personal data relating to them • Request rectification or erasure • Request restriction of processing • Object to processing • Request data portability To exercise these rights, contact the Company at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, or by email at [email protected] Individuals also have the right to object to processing based on legitimate interests, including direct marketing or outreach communications. Where an individual objects to direct marketing, Dool will stop using their personal data for that purpose and may retain limited suppression information to ensure the objection is respected.

Purpose of processing+

Personal data may be processed for the following purposes: • Responding to enquiries, contact requests and service information requests • Processing appointment bookings and lead review requests • Delivering services requested by business clients • Forwarding enquiries to the Company's internal business systems and relevant team members • Storing contact submissions in the Company's content management system where required for operational records • Improving Website performance, security and user experience • Conducting statistical analysis using anonymised or aggregated data where analytics tools are enabled • Complying with legal obligations • Sending and managing business communications, including client, prospect, support, billing and service-related emails • Recording email delivery and communication engagement events, such as whether an email was delivered, opened, clicked, bounced, delayed or marked as a complaint • Measuring the effectiveness of business communications and outbound campaigns • Maintaining suppression and do-not-contact records where a recipient objects or unsubscribes • Detecting email delivery issues, protecting communication reliability and improving service administration

Legal basis for processing+

The legal basis for processing personal data depends on the context and may include: • Consent, where the user submits a form or accepts this policy • Legitimate interests, where processing is necessary to respond to business enquiries, secure the Website or improve services • Contractual necessity, where processing is required to deliver services to business clients • Legal obligation, where processing is required by applicable law

Data processed+

Depending on the form or interaction, the Company may process: • Name and surname • Email address • Company name • Website URL • Country or market • Service interest • Budget range • Message content and enquiry details • Technical and usage data such as IP address, browser type, device information, pages visited and referral source • Business contact details, including role, company, work email address and publicly available professional information where relevant • Email communication metadata, including sender, recipient, subject line, delivery status, timestamps, bounce status, complaint status and delivery delay status • Email engagement data, including whether an email was opened, whether links were clicked and which URLs were clicked • Suppression or do-not-contact status where a recipient objects, unsubscribes or asks not to be contacted again The user is responsible for the accuracy of the data submitted. Incomplete data may limit the Company's ability to respond effectively.

Email communications and engagement records+

When Dool sends emails to clients, prospects or business contacts, it may process delivery and engagement data relating to those communications. This may include the sender and recipient email addresses, subject line, delivery status, timestamps, whether an email was opened, whether links were clicked, the URLs clicked, bounce or complaint status, delivery delay status and related communication event data. Dool uses this information to deliver and secure its communications, identify delivery issues, manage client and prospect relationships, follow up on relevant enquiries, maintain suppression records, assess the effectiveness of business communications and improve service reliability. Dool does not use its email communication records to store the recipient's IP address, city, country or precise location.

Business and direct communications+

Dool may contact business contacts, companies and professional recipients about relevant services where permitted by applicable law. Dool does not disguise or conceal its identity when sending business or marketing communications. Recipients can object to further marketing or outreach communications at any time by replying to the email received or by contacting [email protected]. Where a recipient objects or unsubscribes, Dool will add the relevant contact details to suppression records and will take reasonable steps to avoid further marketing contact.

Data retention+

Personal data is retained only for as long as necessary for the purposes for which it was collected, including to respond to enquiries, manage client and prospect relationships, deliver services, maintain business records, comply with legal obligations and resolve disputes. General enquiry and prospect records are normally retained for as long as there is an active business relationship, active opportunity or reasonable business need to maintain the record. Email delivery and engagement metadata is normally retained for up to 24 months, unless a longer period is required for legal, security, dispute resolution or client relationship purposes. Suppression and do-not-contact records may be retained for as long as necessary to honour opt-out requests and avoid further unwanted contact. Accounting, invoice, contractual and transactional records may be retained for the period required by applicable legal, tax and accounting obligations. When data is no longer required, it will be deleted or anonymised in accordance with the Company's retention practices and applicable law.

Transfers to third parties and processors+

The Company does not sell personal data. However, to operate the Website, manage enquiries, deliver services and maintain business communications, data may be shared with trusted processors and service providers under appropriate contractual safeguards. These providers may include, where applicable: • Content management and contact submission systems • Internal business systems used for enquiry handling, bookings, service administration, communication records and client or prospect relationship management • Hosting, cloud infrastructure, email delivery, monitoring and security providers • Analytics and tag management providers, where enabled • Advertising measurement providers, where enabled • Professional advisers, accounting, legal or compliance providers where required Where data is transferred outside the United Kingdom or European Economic Area, appropriate safeguards will be used as required by applicable law.

Security measures+

The Company implements appropriate technical and organisational measures designed to protect personal data, including access controls, secure transmission where appropriate, infrastructure protections and restricted access to systems containing personal data. No online transmission or storage system can be guaranteed to be completely secure. The Company cannot be held responsible for unauthorised access caused by factors outside its reasonable control.

Acceptance and consent+

Using the Website does not mean that the user consents to every type of processing described in this Privacy Policy. Where consent is required by applicable law, Dool will request it separately or provide the relevant choice mechanism. By submitting personal data through forms, booking flows or communications with Dool, the user acknowledges that their data will be processed as described in this Privacy Policy and in accordance with the applicable legal basis for each processing activity.

Changes to this policy+

The Company reserves the right to modify this Privacy Policy to adapt it to new legislation, regulatory guidance or changes in the Website's technology and service providers. Material changes will be published on this page.

Contact+

Dool Creative Agency Ltd 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom Company No. 12340031 ICO Registration No. ZB399107 Email: [email protected] Website: https://dool.agency Individuals also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted through https://ico.org.uk.