Last updated: July 2026. This notice applies to www.undinedigital.co.uk and to enquiries and resource downloads made through it.
1. Who we are
Undine Digital Ltd (“Undine Digital”, “we”, “us”) is the data controller for the personal data described in this notice. We are a digital health consultancy registered in England & Wales.
For any privacy matter you can contact us at enquiries@undinedigital.co.uk, marking your message “Data protection”.
Please confirm your registered company address and, if applicable, your ICO registration number so they can be shown here.
2. The personal data we collect
We only collect what you choose to give us. Depending on how you use the site, that is:
- Enquiry form — your name, job title, organisation, work email, telephone number (optional), the nature of your enquiry and your message.
- Resource / white‑paper downloads — your name, job title, organisation, work email and telephone number (optional), together with a record of which resource you requested.
- Technical data — standard web‑server logs (for example IP address, browser type and the pages requested) that our hosting provider records to keep the site secure and available.
We do not intentionally collect special category data (such as health data) about you through this website. Please don’t include such information in a free‑text message.
3. How and why we use it, and our lawful basis
Under the UK GDPR we must have a lawful basis for using your personal data. Ours are:
- To respond to your enquiry and provide the information or resource you asked for — lawful basis: consent (which you give by ticking the box and submitting the form) and our legitimate interests in responding to people who contact us.
- To send you occasional related insights where you have agreed to it — lawful basis: consent. You can withdraw this at any time (see section 6).
- To keep the website secure and working and to prevent misuse — lawful basis: legitimate interests in the security and integrity of our systems.
- To meet legal or regulatory obligations where they apply — lawful basis: legal obligation.
Where we rely on legitimate interests, we have considered your rights and freedoms and do not believe our use of your data is unexpected or intrusive.
4. Who we share it with
We do not sell your personal data and we do not share it for anyone else’s marketing. We share it only with service providers who help us run the business, acting on our instructions as processors — for example our website hosting and email providers. We may disclose data where we are legally required to do so.
5. Where your data is held and international transfers
We aim to keep personal data within the UK or the European Economic Area. If any provider we use processes data outside the UK, we ensure an appropriate safeguard is in place — such as an adequacy decision or the UK’s International Data Transfer Agreement/Addendum — so your data receives an equivalent level of protection.
Please confirm your hosting and email providers so their locations and safeguards can be stated precisely.
6. Marketing and withdrawing consent
If you agreed to receive related insights, you can opt out at any time — by using the unsubscribe link in any message, or by emailing us. Withdrawing consent does not affect anything we did lawfully before you withdrew it, and we will still respond to a live enquiry.
7. How long we keep it
We keep enquiry and download records only for as long as we need them for the purpose we collected them, and to meet any legal or accounting requirements, after which we securely delete them. As a general guide we review enquiry records periodically and remove those that are no longer active.
If you would like specific retention periods stated (for example, “enquiry data kept for 24 months”), tell us your preferred periods and we’ll set them out here.
8. Your rights
Under the UK GDPR you have the right to:
- be informed about how your data is used (this notice);
- request a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- ask us to delete your data (erasure), in certain circumstances;
- ask us to restrict or object to our use of your data;
- data portability, where applicable; and
- withdraw consent at any time where we rely on it.
To exercise any of these, email enquiries@undinedigital.co.uk. We will respond within one month. There is normally no charge.
9. Cookies
This site is designed to run without non‑essential tracking cookies. If we add analytics or similar technologies in future, we will update this notice and, where required, ask for your consent through a cookie banner before any non‑essential cookies are set — in line with the Privacy and Electronic Communications Regulations (PECR).
10. Keeping your data secure
We use appropriate technical and organisational measures to protect personal data — including access controls and secure transmission — and we require our providers to do the same. No transmission over the internet is ever completely secure, but we take reasonable steps to protect the information you give us.
11. Complaints
We’d always prefer the chance to put things right, so please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
12. Changes to this notice
We may update this notice from time to time. The “last updated” date at the top shows when it last changed. Where changes are significant, we’ll make that clear.
Questions about your data? Email enquiries@undinedigital.co.uk.