Legal

Privacy Policy

Last updated: July 2026

Who We Are

Carpe DM Strategies Ltd is a digital marketing and web development agency registered in England and Wales (Company No. 14900297). Our registered address is 19 Ravenscroft Crescent, London, SE9 4LL. We build websites, automation systems and growth strategies for trades businesses and small companies across the UK.

Questions about this policy: [email protected] @CarpeDM_UK

What Data We Collect

When you use our website or contact us, we may collect:

How We Use Your Data

We use your data to respond to enquiries, deliver services, improve our website, and meet legal obligations. We do not sell or share your data with third parties for marketing purposes.

Legal Basis for Processing

We process your data under UK GDPR on the basis of contract (to deliver services you have engaged us for), legitimate interests (to respond to enquiries and improve our services), and consent where explicitly given.

Cookies

We use Google Analytics cookies to understand how visitors use our site. You can opt out via your browser settings or the Google Analytics opt-out tool.

Data Retention

Enquiry data is retained for 24 months. Client project data is retained for 6 years in line with HMRC requirements.

Your Rights

Under UK GDPR you have the right to access, correct or delete your personal data, and to lodge a complaint with the ICO at ico.org.uk. Contact us at [email protected] to exercise any right.

Third Party Services

We use Google Analytics and Google Ads for traffic analysis and advertising. Internal automation runs on self-hosted infrastructure.

Content Autopilot: Connected Social Accounts

Carpe DM Strategies also provides Content Autopilot, a service that publishes social media content on your behalf to the accounts you choose to connect. This section explains the additional data involved.

When you connect a social account (which may include Facebook Pages, Instagram professional accounts, LinkedIn Pages, Google Business Profile or X), we receive and securely store the access tokens and the account or page identifiers and names needed to publish content for you. We request only the permissions required to schedule and publish posts and to read basic page engagement. We do not sell this data, and we never use it for advertising or profiling.

Our use of information received from the Meta Platforms (Facebook and Instagram) and from LinkedIn complies with those platforms' developer terms and policies. You can revoke our access at any time from your Facebook, Instagram or LinkedIn settings, or by disconnecting the account in your Carpe DM dashboard.

Content generation may involve trusted AI processors acting under contract on our instructions. Payments are handled by Stripe; we do not store full card numbers.

Deleting your data: you can delete your account and all connected-account tokens at any time. See our Data Deletion page for how. When you delete your account or disconnect a platform, we delete the associated access tokens and personal data within 30 days.

Changes to This Policy

We may update this policy periodically. The current version will always be available at this URL.