Privacy policy

1. Who we are

We are Infinity Domain Solutions Ltd trading as Doman Digital ("we", "us"). This Privacy Policy explains how we collect, use, share and protect personal data when you use our website, contact us, or buy our services.

2. What this policy covers

• Visitors to our website.
• People who enquire via contact forms, email, phone or booking links.
• Clients (and their representatives) who buy our services.
• Suppliers and professional contacts.

3. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact details: name, business name, email address, telephone number, address.
• Enquiry and project information: messages you send, project requirements, documents you provide, meeting notes and agreed deliverables.
• Website usage data: pages viewed, approximate location (city-level), device and browser information, and interactions (only where permitted by cookie settings).
• Booking and communication metadata: appointment times, messages, and communication history.
• Payment and billing information: invoice details and transaction references (we do not store full card details).

4. How we use personal data (purposes)

We use personal data for the following purposes:

• To respond to enquiries and provide quotes.
• To deliver our services, manage projects, and provide support.
• To manage our relationship with clients, including onboarding, changes, and renewals.
• To improve our website and measure performance (only with consent where required).
• To keep our services secure, prevent abuse and investigate issues.
• To meet legal, tax and regulatory obligations and to establish, exercise or defend legal claims.

5. Lawful bases (UK GDPR)

Under UK GDPR, we rely on the following lawful bases depending on the situation:

• Contract: where processing is necessary to provide services you request or have purchased.
• Legitimate interests: to run and improve our business, respond to enquiries, maintain security and prevent fraud (balanced against your rights).
• Legal obligation: where we must keep records for legal, tax or regulatory reasons.
• Consent: for non-essential cookies/analytics and (where applicable) marketing communications.

Where we rely on consent, you can withdraw it at any time (see Cookies section and contact details).

6. Sharing and disclosures

We may share personal data with:

• Service providers that help us operate our website and deliver services (e.g., hosting, DNS, email, analytics, scheduling).
• Professional advisers (e.g., accountants, insurers, legal advisers) where necessary.
• Authorities where required by law or to protect rights, safety and security.
• Potential buyers of the business or business assets, subject to confidentiality.

We do not sell your personal data.

7. International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as UK Addendum/Standard Contractual Clauses or equivalent protections) where required.

8. How long we keep data (retention)

• Enquiries: typically up to 24 months after last contact, unless you become a client.
• Client records: typically 6 years after the end of the engagement to meet legal/tax obligations and manage claims.
• Support messages: retained as needed to provide support and maintain records.
• Analytics data: retained according to our analytics settings and only collected where permitted by cookie preferences.

9. Your rights

You may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to processing based on legitimate interests.
• Request restriction of processing in certain circumstances.
• Request portability of data (where applicable).
• Withdraw consent at any time (where processing is based on consent).

To exercise rights, contact us at legal@domandigital.co.uk.

10. Complaints

If you have concerns, contact us first at legal@domandigital.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO).

11. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, secure authentication, and least-privilege access. No method of transmission or storage is 100% secure, but we work to reduce risk and respond to incidents.

12. Subprocessors and tools

We maintain a list of key subprocessors and tools that may process personal data on our behalf. See the separate "Subprocessors & Tools" page/document (and we can provide details on request).

13. Changes to this policy

We may update this policy from time to time. We will publish the latest version on our website.

For additional policies, see /policies.