PEAK Digital Agency Ltd

peak-agency.co.uk

Effective Date: April 2026 | Last Reviewed: April 2026

Registered in England & Wales. Company No. 14710193

1. Introduction

PEAK Digital Agency Ltd (“PEAK”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of all individuals who interact with our business. This Privacy Policy explains how we collect, use, store, share and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable data protection legislation.

This policy applies to:

Visitors to our website at peak-agency.co.uk
Clients, prospective clients and their contacts
Suppliers, partners and third-party collaborators
Individuals whose data we process as part of delivering digital marketing services on behalf of our clients
Users of any proprietary tools, dashboards or platforms developed and operated by PEAK

We act as both a data controller (when we collect your data directly) and a data processor (when we handle personal data on behalf of our clients). Where we act as data processor, our processing is governed by a separate Data Processing Agreement with the relevant client.

2. Who We Are

PEAK Digital Agency Ltd is a performance marketing agency headquartered in the United Kingdom. We specialise in paid media, creative strategy and data insights, running advertising campaigns across Google, Meta, TikTok and LinkedIn on behalf of our clients.

Data Controller Contact:

Company: PEAK Digital Agency Ltd
Website: peak-agency.co.uk
Email: jack@peak-agency.co.uk
Address: 20-22 Wenlock Road, London, England, N1 7GU

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

3. What Personal Data We Collect

3.1 Data You Provide Directly

When you contact us, enquire about our services, or enter into a contract with us, we may collect:

Full name and job title
Business name and address
Email address and telephone number
Payment and invoicing information (processed securely via third-party providers)
Information provided in enquiry forms, emails or calls
Details of your marketing goals, budgets, and business performance shared during onboarding or service delivery

3.2 Data We Collect Automatically

When you visit our website, we may collect the following data automatically via cookies and similar tracking technologies:

IP address and approximate location
Browser type and version
Operating system
Pages visited, time on page and referral source
Device identifiers
Session duration and click behaviour

This data is collected via tools including Google Analytics, Google Tag Manager, and the Meta Pixel (Facebook Pixel — Pixel ID: 917450694046390). Please refer to Section 7 for further detail on our use of tracking technologies.

3.3 Client Campaign & Third-Party Data

In the course of managing paid media campaigns on behalf of clients, PEAK may access, process or analyse:

Customer lists and CRM data uploaded by clients for audience targeting (e.g., Custom Audiences on Meta, Customer Match on Google)
Conversion event data passed via pixels, tags or API integrations
Behavioural and demographic data provided by advertising platforms
First-party data collected by clients from their own customers

Where we process client customer data, we do so strictly under the instruction of the client and in accordance with our Data Processing Agreement. Clients are responsible for ensuring they have the lawful basis to share this data with us.

3.4 Data Processed Through Our Proprietary Tools

PEAK may develop, build or operate proprietary tools, dashboards, reporting platforms and automation workflows (“PEAK Tools”) to enhance service delivery. These tools may process:

Aggregated campaign performance data from advertising platforms
Client-specific metrics, KPIs and ROI calculations
Attribution data and conversion pathway analysis
Audience segmentation data
Creative performance data linked to specific ad assets
Data exported from or synced with platforms including Google Ads, Meta Ads Manager, TikTok for Business and LinkedIn Campaign Manager

Wherever possible, PEAK Tools are designed to work with aggregated or anonymised data. Where personal data is processed within these tools, it is protected by appropriate technical and organisational measures and is used solely for the purposes of providing services to the relevant client.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

4.1 Service Delivery

Managing and optimising paid media campaigns (Google Ads, Meta Ads, TikTok Ads, LinkedIn Ads)
Providing creative strategy and content recommendations
Conducting paid media audits and producing reports
Developing and delivering data insights and attribution analysis
Operating and maintaining proprietary tools used to support client campaigns
Communicating with clients about campaign performance, strategy and reporting

4.2 Business Operations

Processing payments and managing client accounts
Responding to enquiries and proposals
Entering into and fulfilling contracts
Maintaining accurate business records
Managing supplier and partner relationships

4.3 Marketing and Business Development

Sending relevant updates, case studies or marketing communications (where you have opted in or we have a legitimate interest)
Conducting analysis to improve our services and understand our market

4.4 Legal and Compliance

Complying with our legal and regulatory obligations
Preventing fraud and maintaining security
Establishing, exercising or defending legal claims

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal data:

Contract: Processing is necessary to perform our contract with you or to take steps prior to entering into a contract.
Legitimate Interests: We have a legitimate interest in running our business, developing our services, marketing to prospective clients, and improving our tools — provided this does not override your rights and interests.
Legal Obligation: Processing is required to comply with applicable law.
Consent: Where we rely on consent (e.g., for certain cookies or direct marketing), you have the right to withdraw consent at any time.

When processing client customer data on behalf of a client (as a data processor), the client’s own lawful basis applies.

6. Advertising Platforms & Third-Party Data Processors

As a performance marketing agency, we work extensively with third-party advertising platforms. By using our services, you acknowledge that campaign data may be processed by:

6.1 Paid Search

Google LLC — Google Ads, Google Analytics, Google Tag Manager, Google Merchant Centre, Google Search Console. Google’s privacy policy applies: policies.google.com/privacy

6.2 Paid Social

Meta Platforms Inc. — Meta Ads Manager, Meta Business Suite, Meta Pixel, Conversions API. Meta’s data policy applies: facebook.com/policy.php
TikTok Technology Ltd — TikTok for Business, TikTok Ads Manager, TikTok Pixel. TikTok’s privacy policy applies: tiktok.com/legal/privacy-policy
LinkedIn Corporation — LinkedIn Campaign Manager, LinkedIn Insight Tag. LinkedIn’s privacy policy applies: linkedin.com/legal/privacy-policy

6.3 Analytics & Tag Management

Google Analytics (including GA4) for website performance tracking
Google Tag Manager for managing tracking scripts
Meta Pixel for conversion tracking and audience building

Each of these platforms operates under its own terms of service and privacy policy. PEAK does not control how these platforms process data once it has been shared with them. We recommend reviewing their respective policies for full information.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve user experience, track website performance and support advertising activity. The following categories of cookies may be set:

7.1 Strictly Necessary Cookies

Essential for the website to function. These cannot be disabled.

7.2 Analytics Cookies

Used to understand how visitors interact with our website, including pages visited, session duration and traffic sources. We use Google Analytics (including GA4) for this purpose.

7.3 Advertising & Targeting Cookies

Set by advertising platforms to build audience profiles, measure conversions and deliver relevant advertising. This includes the Meta Pixel (ID: 917450694046390), which tracks page views and conversion events to support our own marketing activity and may be used to create Custom Audiences on Meta platforms.

7.4 Functional Cookies

Enable enhanced functionality such as remembering user preferences.

You can manage your cookie preferences at any time via your browser settings or our cookie consent tool (if available on our website). Please note that disabling certain cookies may affect the functionality of our site.

For clients: PEAK may deploy tracking pixels and tags on client websites as part of campaign management. Clients are responsible for obtaining valid consent from their own website visitors for such tracking, and for maintaining an up-to-date cookie policy on their own websites.

8. Data Sharing and Disclosure

We do not sell your personal data. We may share personal data in the following circumstances:

8.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our business, including cloud hosting providers, CRM systems, project management tools, accounting software and communication platforms. All such providers are subject to appropriate data processing agreements.

8.2 Advertising Platforms

As outlined in Section 6, we share relevant data (including audience lists provided by clients) with advertising platforms to manage campaigns. This is done under instruction from the client.

8.3 Professional Advisers

We may share data with legal advisers, accountants, auditors or insurers where necessary.

8.4 Legal Requirements

We may disclose personal data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property or safety of PEAK, our clients or others.

8.5 Business Transfers

In the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction. We will notify affected individuals in advance where required.

9. International Data Transfers

Some of the third-party platforms and services we use may transfer and process data outside the United Kingdom or European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR, including:

Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO)
Adequacy decisions made by the UK Government
Other appropriate transfer mechanisms recognised under UK law

Key platforms including Google and Meta operate global infrastructure and their data transfer mechanisms are detailed in their respective privacy policies.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with legal, regulatory or contractual requirements. Our general retention periods are:

Client and contract data: 7 years from the end of the contract (in line with HMRC requirements)
Enquiry and prospect data: 2 years from the date of last contact, unless a contract is entered into
Campaign and performance data: Duration of the client relationship plus 3 years, or as agreed in the client contract
Website analytics data: Up to 26 months (in line with Google Analytics default settings)
Employee and contractor data: Duration of the engagement plus 7 years

Data processed through PEAK proprietary tools is retained in line with the above or as specified in the relevant client Data Processing Agreement. At the end of the retention period, data is securely deleted or anonymised.

11. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct inaccurate or incomplete data.
Right to erasure: You may request that we delete your personal data where there is no legitimate reason to continue processing it.
Right to restriction: You may request that we restrict processing of your data in certain circumstances.
Right to data portability: You may request your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object: You may object to processing based on legitimate interests, including direct marketing.
Rights related to automated decision-making: You have the right not to be subject to solely automated decisions that have a significant effect on you.

To exercise any of these rights, please contact us at jack@peak-agency.co.uk We will respond within one month of receiving your request. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Data Security

We take the security of personal data seriously and implement appropriate technical and organisational measures to protect against unauthorised access, disclosure, alteration or destruction. Our measures include:

Encrypted storage and transmission of data
Access controls and role-based permissions for all internal systems
Regular review and monitoring of access to advertising platform accounts
Password management policies and multi-factor authentication
Secure development practices for any proprietary tools we build
Staff training on data protection and information security
Incident response procedures in the event of a data breach

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.

13. Proprietary Tools and Technology

PEAK may design, build and operate bespoke tools, dashboards, automation workflows and reporting platforms (“PEAK Tools”) as part of our service offering or for internal operational purposes. This section sets out how we handle data within these tools.

13.1 Scope of PEAK Tools

PEAK Tools may include, but are not limited to:

Performance reporting dashboards integrating data from multiple advertising platforms
Attribution and ROI modelling tools
Automated campaign monitoring and alerting systems
Creative performance analysis platforms
Audience segmentation and targeting tools
Data connectors and API integrations linking advertising platforms to client reporting environments

13.2 Data Processed Within PEAK Tools

PEAK Tools may process:

Aggregated advertising performance metrics (impressions, clicks, spend, conversions)
Anonymised audience data from advertising platforms
Client-specific business metrics shared for reporting purposes
Platform API data accessed under the relevant platform’s terms of service

Where PEAK Tools process personal data, this is done in accordance with the data processing principles set out in this policy. Where tools are made available to clients or third parties, separate terms of use and privacy notices may apply.

13.3 Intellectual Property

All proprietary tools, methodologies, frameworks and technology developed by PEAK remain the intellectual property of PEAK Digital Agency Ltd. Access to PEAK Tools is provided to clients on a licensed basis as part of the service relationship and does not confer ownership.

13.4 Third-Party Integrations

PEAK Tools may integrate with third-party APIs and services. Any such integrations are subject to the terms and privacy policies of the relevant third parties, including but not limited to Google, Meta, TikTok and LinkedIn platform APIs.

14. Children’s Privacy

Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

Where clients operate in sectors that may target or engage with younger audiences, clients are responsible for ensuring compliance with COPPA, the ICO’s Age Appropriate Design Code (Children’s Code), and any other applicable legislation.

15. Third-Party Websites and Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies. This Privacy Policy applies only to peak-agency.co.uk and our direct business operations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services or legal obligations. The most current version will always be available on our website at peak-agency.co.uk. Where changes are material, we will take reasonable steps to notify relevant individuals.

The date at the top of this policy indicates when it was last reviewed. Continued use of our website or services following any update constitutes acceptance of the revised policy.

17. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

Email: jack@peak-agency.co.uk
Post: PEAK Digital Agency Ltd, 20-22 Wenlock Road, London, England, N1 7GU
Website: peak-agency.co.uk/contact

You have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you are not satisfied with how we have handled your data.

Privacy Policy