Legal
Privacy policy
How we collect, use and protect your personal data, and the rights you have over it.
Who we are
Discover Digital is the trading name of Discover Digital Solutions Limited, registered in England and Wales, company number 03084977. Registered office: C/O Goringe Accountants Ltd, Waterside, 1650 Arlington Business Park, Theale, Reading, Berkshire, RG7 4SA. VAT number GB614856527.
We are the controller of the personal data collected through discoverdigital.com, discoverdigital.gr and our campaign pages on campaign.discoverdigital.com. We are registered with the Information Commissioner’s Office (ICO), registration number Z7579468.
Discover Digital Solutions Limited is owned by Discover Digital Group Limited (company number 14632096). Flowella, the WhatsApp app for HubSpot from our sister company Flowella Limited (company number 17255892), has its own privacy policy at flowella.io.
How to contact us
Email hello@discoverdigital.com, call +44 118 974 4736, or write to us at Waterside, 1650 Arlington Business Park, Theale, Reading, Berkshire, RG7 4SA.
What we collect and why
When you contact us or book a call
Our contact form asks for your first and last name and your work email address. You can also give us your organisation, your phone number, a message and an attached file, such as a brief. We use these details to reply to your enquiry and, if you ask, to arrange a call. Ticking the box for our emails is optional: we only send you marketing emails if you tick it, and you can unsubscribe at any time.
If you book a time in one of our calendars, we collect your name, email address and WhatsApp number, the time you choose, any message you add and the email addresses of any guests you invite. We use them to hold the call, which takes place on Microsoft Teams, and to contact you about it.
When you send a form, HubSpot also links the pages you have viewed on our websites to your record, if HubSpot’s cookies are on your device (see our cookie policy).
Lawful basis: our legitimate interests in answering enquiries and, if you go on to work with us, taking steps at your request before a contract.
When we have a call with you
We may record and transcribe a call with Fireflies.ai, an AI note taker, so that we have an accurate record of what was discussed and agreed. We use the recording, the transcript and a summary of them to follow up after the call and to deliver our work, and we keep them in our internal project notes. You can object to a call being recorded, before or during the call.
Lawful basis: our legitimate interests in keeping an accurate record of our conversations with clients and with organisations that are thinking of working with us.
When you message us on WhatsApp or use our chat
If you message us on WhatsApp, we receive your WhatsApp number, your profile name and your messages. If you use the chat window on our websites, we receive your messages and any details you share, such as your name and email address when the chat asks for them. We use them to reply to you. Lawful basis: our legitimate interests in answering your messages.
When you sign up for our emails
If you subscribe to new articles on our Insights pages, or tick the box on one of our forms to get our emails, we use your email address to send them. You can unsubscribe at any time: every email has a link to unsubscribe or change your preferences. HubSpot tells us whether our emails are opened and which links are clicked. Lawful basis: your consent, which you can withdraw at any time.
When you apply for a job
We collect your name, contact details, CV, any links you give us (such as your LinkedIn profile) and your note. We use them only to assess your application, and we do not add applicants to our marketing lists. Lawful basis: taking steps at your request before a contract of employment, and our legitimate interests in recruiting.
When you are a client
We hold the names and contact details of the people we work with, and the records needed to deliver and invoice our services. Lawful basis: performing our contract with you or your organisation, and our legal obligations, such as keeping accounting records.
When you visit our websites
We use cookies and similar technologies to see how our websites are used, to record visits so that we can improve our pages, and to measure and target our advertising on Google, Meta and LinkedIn. Visitors in the UK, the European Union and some nearby countries see a cookie banner first, and these cookies are only set if they accept. Elsewhere there is no banner, and most of them are set when a page loads. Our cookie policy lists the countries, each cookie and what each choice does.
Before you choose, and if you decline, HubSpot and Google Analytics still receive a basic record of each page you view, without cookies. When our analytics cookies are on, Hotjar records how you move, scroll and click on our pages and what you type into our forms, with email addresses and numbers hidden.
If our advertising cookies are on when you send one of our forms, Google Tag Manager sends Google a scrambled (hashed) copy of the email address and phone number you entered, and HubSpot tells Google Ads that a form was sent. This shows us which of our ads lead to enquiries (Google calls it enhanced conversions).
Lawful basis: your consent, where our cookie banner asks for it.
Who we share it with
We use these service providers. Most of them process data only on our behalf. Google, Meta and LinkedIn also use the data from their advertising tags for their own purposes, under their own privacy policies.
- HubSpot, which runs our websites, forms, chat, calendars, email and customer records. Our HubSpot account is hosted in HubSpot’s EU data centre.
- Google, for Google Analytics, Google Tag Manager, Google Ads, reCAPTCHA spam protection on our forms, and the typeface of our cookie banner (Google Fonts). Google explains how it uses information from sites that use its services.
- Meta, which runs WhatsApp and the Meta Pixel. The pixel measures and targets our ads on Facebook and Instagram when our advertising cookies are on. See Meta’s privacy policy.
- LinkedIn, whose Insight Tag measures and targets our ads on LinkedIn when our advertising cookies are on. See LinkedIn’s privacy policy.
- Hotjar, which records visits to our pages when our analytics cookies are on.
- Microsoft, for our email and our Microsoft Teams calls.
- Fireflies.ai, which records and transcribes some of our calls.
- Our professional advisers, such as our accountants, when they need it for their work.
Our Insights pages also load sharing scripts from Facebook, LinkedIn and X, and an older article includes a video from Vimeo, so those companies receive the address of the page you are reading. Our cookie policy has the details.
Data held outside the UK and the EU
Some of these providers may process data outside the UK and the European Economic Area, for example in the United States. Where they do, the transfer is protected in the ways UK and EU law require, such as adequacy regulations or decisions, the UK International Data Transfer Agreement or Addendum, or the EU standard contractual clauses.
How long we keep it
We keep personal data only for as long as we need it for the reason we collected it, and for as long as the law requires us to keep business and accounting records. Email subscribers stay on our list until they unsubscribe. Cookies last for the times listed in our cookie policy.
Your rights
Under UK and EU data protection law (the UK GDPR and the EU General Data Protection Regulation), you have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. You can object at any time to our use of your data for direct marketing. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us using the details above.
If you are unhappy with how we have used your data, please tell us first. You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office at ico.org.uk; in Greece, the Hellenic Data Protection Authority at dpa.gr; elsewhere in the European Union, the authority in the country where you live or work, or where you think the problem happened.
Changes to this policy
We will post any changes on this page. Last updated: 21 October 2026.