Legal
Last updated: 1 September 2026  ·  Effective upon use

Privacy Policy

This policy explains exactly what Moz Digitals collects when you use https://mozdigitals.com, why we collect it, how long we keep it, and the control you have over it.

We collect the minimum needed to answer your enquiry and deliver our services. We do not sell your personal information, and we never have. This policy should be read alongside our Terms of Service.

§ 1

Who We Are

Moz Digitals is a digital agency providing web design, development, e-commerce, mobile applications, branding, SEO, digital marketing and marketing-automation services.

For information you submit through this website, we are the data controller. Where we process data inside systems we build or manage for a client, we act as a data processor on that client's instructions — see Section 6.

Contact: [email protected]

§ 2

What We Collect

We only collect what our forms actually ask for, plus a small amount of technical data needed to run the site securely.

2.1 Contact form

Name, email address, phone number (optional), the service you selected, and your message.

2.2 Quote request

Name, email, phone, company name, service required, selected plan, budget range, desired timeline, your project description, and the page you came from.

2.3 Project brief (Start a Project)

The above, plus project name, brand and colour preferences, target platforms, project goals, deadline, and the option selections you make in the multi-step form.

2.4 Technical data collected automatically
  • Your IP address, stored with each form submission as a fraud and abuse control;
  • A session cookie (MOZSESS) that keeps your form secure against cross-site request forgery;
  • A short-lived, hashed record of your IP used solely to rate-limit repeated submissions; and
  • Standard server logs (request time, page requested, browser user-agent) generated by our hosting.
What we do not collect on this website: we do not take card or bank details through this site — invoices are issued and paid through third-party processors. We do not request government identification, and we do not knowingly collect special-category data such as health, biometric, political or religious information. Please do not include such information in a form message.
§ 3

Why We Collect It

Each purpose has a lawful basis:

  • To respond to your enquiry and prepare a proposal — necessary to take steps at your request before entering a contract.
  • To deliver services you have engaged us for — performance of a contract.
  • To protect the site from spam, abuse and fraudulent submissions — our legitimate interest in operating a secure service. This is why the IP address is recorded.
  • To keep business and accounting records — compliance with a legal obligation.
  • To send occasional marketing — only with your consent, which you may withdraw at any time.

Every public form on this site carries an unticked checkbox linking to this policy. Ticking it records your agreement to us storing and using the details you submit for the purposes above. We do not pre-tick it and we do not accept submissions without it.

We do not sell, rent or trade personal information, and we do not use it for automated decision-making or profiling.

§ 4

Cookies and Analytics

This site uses a single strictly-necessary cookie, MOZSESS. It holds no personal information, exists only to protect form submissions from cross-site request forgery, and expires when you close your browser. It cannot be disabled without breaking the forms.

Where analytics or advertising tools are in use, they are listed in Section 5 and are loaded only in line with your cookie choices where local law requires consent. You can block or delete cookies in your browser settings; doing so may prevent forms from submitting.

§ 5

Who We Share It With

We share personal information only with providers who help us run the business, and only to the extent they need it:

  • Hosting and infrastructure — to store the site and its database;
  • Email delivery (SMTP) — to send you a confirmation and to notify our team of your enquiry;
  • Analytics providers — to understand aggregate site usage;
  • CRM and project tools — to manage your enquiry through to delivery; and
  • Accountants and payment processors — to invoice and record payment.

Providers act on our instructions under contract and may not use your data for their own purposes. We may also disclose information where required by law, to enforce our Terms, to establish or defend a legal claim, or to respond to a payment dispute or chargeback. If our business is sold or reorganised, records may transfer to the acquirer under the same protections.

§ 6

Data Inside Systems We Build for Clients

When we build a website, store or CRM for a client, that system may collect personal data from the client's own customers. In that situation the client is the data controller and we act as a processor on their documented instructions.

Clients are responsible for their own privacy notice, their lawful basis for processing, their cookie banner, and for responding to requests from their customers. During a project we may access client data only as needed to build, test, migrate or support the system, and we delete or return working copies at the end of the engagement.

If you are a customer of one of our clients and want your data removed, please contact that business directly — we cannot action requests on their behalf without their instruction.

§ 7

How We Protect It

Safeguards in place on this website include encrypted connections (HTTPS), CSRF protection on every form, submission rate limiting, bot filtering, parameterised database queries to prevent injection, restricted administrative access behind authentication, and application directories that are not publicly served.

No system can be guaranteed absolutely secure. You submit information at your own risk, and you should avoid sending confidential material through a web form. If a breach affects your personal data and poses a risk to you, we will notify you and any relevant regulator as required by law.

§ 8

How Long We Keep It

  • Enquiries that do not become projects — up to 24 months, then deleted.
  • Client project records — for the engagement plus 7 years, to meet accounting, tax and legal-claim requirements.
  • Rate-limiting records — automatically purged within 24 hours.
  • Server logs — typically 30 to 90 days.
  • Marketing consent records — until you unsubscribe, plus proof of the opt-out.
§ 9

Your Rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and — under UK/EU GDPR — complain to your data protection authority.

If you are a California resident, you may request disclosure of the categories of personal information collected and request deletion. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of. We will not discriminate against you for exercising any right.

To make a request, email [email protected]. We respond within 30 days and may ask you to verify your identity first. Note that deleting enquiry data does not cancel a contract or extinguish an unpaid invoice, and we may retain what we are legally required to keep.

§ 10

International Transfers

We work with clients and providers in more than twenty countries, so your information may be processed outside your own. Where data leaves the UK or EEA, we rely on an adequacy decision or on Standard Contractual Clauses with the provider concerned.

§ 11

Marketing Communications

Submitting a form gets you a reply about your enquiry — that is a service message, not marketing. We will only add you to a mailing list with your consent, and every marketing email carries a one-click unsubscribe. Unsubscribing does not stop essential messages about a live project.

§ 12

Children's Privacy

Our services are intended for businesses. This site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has submitted information, contact us and we will delete it.

§ 13

External Links

Our site and blog link to third-party websites and platforms. We do not control them and are not responsible for their privacy practices. Read their policies before submitting anything.

§ 14

Changes to This Policy

We may update this policy as our services or the law change. The revision date at the top always reflects the current version, and material changes will be highlighted on this page. Continuing to use the site after an update means you accept it.

§ 15

Contact Us

For any question about this policy or your personal information:

Email: [email protected]

Website: https://mozdigitals.com

Contact form: https://mozdigitals.com/contact

Our Commitment

We collect the minimum we need, we tell you plainly what it is for, and we never sell it.

If anything here is unclear, ask us before you submit a form — we would rather answer the question than hold data you did not mean to give us.

↑ Back to top