Skip to content

Privacy Policy

Last updated: 7 May 2026 · Version 2.0

Weir Digital Media Limited (“Weir Digital Media”, “WDM”, “we”, “us”, “our”) takes your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, what we do with it, who we share it with, and what your rights are. It applies to weirdigital.media and to every productised marketing engagement we deliver.

1. Who we are

Data controller: Weir Digital Media Limited
Companies House registration: 14973060 (registered in England and Wales)
Registered office: 18 Beverley Gardens, Bournemouth, BH10 5EF, United Kingdom
Contact for privacy queries: [email protected]

We operate primarily from Bournemouth (UK) and Jávea (Costa Blanca, Spain). All personal data is stored on infrastructure located in the United Kingdom or the European Economic Area, except where this policy explicitly states otherwise.

2. Personal data we collect

2.1 When you visit our website

2.2 When you contact us or request a proposal

2.3 When you become a client

We never collect special-category personal data (health, ethnicity, political opinions, etc.) unless you proactively send it to us in a brief or message. If you do, we will treat it under the additional safeguards required by Article 9 UK GDPR and contact you to confirm lawful basis before processing.

3. Lawful basis for processing

We process personal data under one of the following lawful bases under Article 6 UK GDPR:

4. How we use your data

We do not sell your personal data. We do not use it for automated decision-making with legal effect. We do not run targeted advertising profiles based on your visits to our site.

5. Who we share your data with

We use the following data processors. Each is contractually bound by a Data Processing Agreement (DPA) and only processes data on our written instructions.

Where you grant us delegated access to your own marketing tools (Google Ads, Meta Ads, Search Console, your CRM, your hosting), we act as a processor under your control, not as a controller.

We may share data with our professional advisers (legal, accounting), with HMRC for tax purposes, and with law enforcement where legally compelled.

6. International data transfers

Some of our processors (Cloudflare, SendGrid, Stripe, Google) operate global infrastructure that may involve transferring personal data outside the UK and EEA. Where this happens, transfers are protected by one or more of:

7. How long we keep your data

8. Your rights under UK GDPR

You have the following rights, free of charge, in relation to your personal data:

To exercise any right, email [email protected]. We respond within one calendar month, often sooner.

9. Security

We use industry-standard technical and organisational measures appropriate to the risk: TLS 1.2+ for all data in transit; encrypted storage at rest on managed infrastructure; least-privilege access controls; audit logging; documented incident-response procedures. In the unlikely event of a personal-data breach that meets the notification threshold, we will report to the ICO within 72 hours and notify affected individuals without undue delay.

10. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it promptly.

11. Changes to this policy

We update this policy when our processing activities change, when our processors change, or when applicable law changes. The “Last updated” line at the top reflects the date of the most recent change. Material changes are notified to active clients by email.

12. Contact and complaints

For privacy questions, data-subject-rights requests, or complaints, contact us at [email protected] or by post at the registered office above. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office at ico.org.uk or +44 303 123 1113.

Operating across the Weir family network — Josh Weir·Mark Weir·Weir Digital Media·CMW Consultants