Last updated: April 2026 | Thrivology Limited (trading as Thrivology Digital) | Company No. 13215559
This Privacy Policy explains how Thrivology Limited (Company No. 13215559), trading as Thrivology Digital (“we,” “us,” “our”), collects, uses, stores, and protects your personal data when you visit thrivology.digital (the “Website”) or engage with our services.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Thrivology Limited acts as the data controller in respect of the personal data described in this policy.
If you have any questions about this policy or how we handle your data, please contact us at hello@thrivology.digital.
1. What Personal Data We Collect
We collect personal data in the following ways:
Data you provide directly
- Enquiry and contact forms — name, email address, company name, job title, phone number, and any information you include in your message
- ROI Calculator — name, email address, company name, job title, phone number, LinkedIn profile URL, website URL, and business information you enter
- Newsletter sign-up (The Edge) — name and email address
- Discovery call booking — name, email address, and any information you provide during the booking process
- Client engagements — business information, operational data, and any personal data shared during the course of a paid engagement
Data collected automatically
- Website analytics — pages visited, time on site, referral source, device type, and approximate location (via IP address). This data is anonymised and aggregated. We use Google Analytics for this purpose.
- Cookies — see our Cookie Policy for full details
We do not collect any special category data (such as health information, religious or political beliefs, genetic data, or information about criminal offences).
2. How and Why We Use Your Personal Data
We only use your personal data where we have a lawful basis to do so under UK GDPR. The table below sets out the purposes for which we process your data and the legal basis for each:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries and contact form submissions | Legitimate interest (responding to a direct request) |
| Processing ROI Calculator submissions and sending results | Legitimate interest / Consent (via form submission) |
| Sending The Edge newsletter | Consent (explicit opt-in required) |
| Booking and managing discovery calls | Legitimate interest / Contract performance |
| Delivering paid service engagements | Contract performance |
| Follow-up marketing communications to existing contacts | Legitimate interest (soft opt-in under PECR, where applicable) |
| Improving our Website and services | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We will never sell your personal data to any third party.
3. Who We Share Your Data With
We share personal data only where necessary. The third-party processors we currently use include:
- Google Analytics (Google LLC) — anonymised website visitor behaviour data. Google may transfer data outside the UK; see Google’s Privacy Policy.
- Formspree — receives and forwards contact form and ROI Calculator submissions, including names, email addresses, and business information provided
- Make.com (Celonis SE) — workflow automation platform routing form submission and client data between connected systems
- n8n — workflow automation used in certain client implementation builds; may process client data as configured
- MailerLite — email marketing platform storing subscriber names and email addresses for The Edge newsletter and follow-up sequences
- TidyCal — discovery call scheduling tool collecting names, email addresses, and calendar availability
- Hostinger — website hosting provider processing all visitor traffic and data in transit
- Stripe — payment processing for paid engagements; handles billing and card details for clients
- Google Workspace (Google LLC) — business email, file storage, and document collaboration; client communications and engagement documents are stored here
- Agiled — CRM and client management platform storing client contact details, project data, and engagement records
- Otter.ai — AI transcription tool used to record and transcribe discovery calls and client interviews, where consent is obtained in advance
All third-party processors are required to process your data only for the purposes we specify, to maintain appropriate security standards, and to comply with applicable data protection law. We do not share your personal data with third parties for their own marketing purposes.
We may disclose personal data if required to do so by law, by court order, or by a regulatory body including the Information Commissioner’s Office (ICO).
4. International Data Transfers
Some of our third-party processors may transfer or store data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place — such as UK adequacy decisions or Standard Contractual Clauses — in accordance with UK GDPR requirements.
5. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
- Enquiry and contact form data — up to 2 years from last contact, unless a client relationship develops
- ROI Calculator submissions — up to 2 years from submission date
- Newsletter subscribers — until you unsubscribe or request deletion
- Client engagement records — up to 7 years from the end of the engagement, in line with standard UK business record-keeping requirements
- Website analytics data — as configured in Google Analytics (default: 26 months)
6. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your personal data where there is no legitimate reason for us to continue processing it
- Right to restriction — to request that we limit how we use your data in certain circumstances
- Right to data portability — to receive your personal data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interest, including direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at hello@thrivology.digital. We will respond within one month of receiving your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113 if you believe we have not handled your data correctly.
7. Unsubscribing from Marketing
You can unsubscribe from The Edge newsletter or any other marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us at hello@thrivology.digital. We will process your request promptly. Unsubscribing from marketing does not affect our ability to contact you in relation to an active service engagement.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our Website uses SSL encryption for data transmission. Access to personal data is restricted to those who need it to perform their role.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach, as required by UK GDPR. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay.
9. Cookies
We use cookies and similar technologies on our Website. For full details of the cookies we use, the purposes for which we use them, and how to manage your preferences, please see our Cookie Policy.
10. Third-Party Links
Our Website may contain links to third-party websites. This Privacy Policy applies only to thrivology.digital. We are not responsible for the privacy practices of any third-party website and recommend you review their privacy policies before providing any personal data.
11. Age Requirement
Our Website and services are intended for business owners and professionals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@thrivology.digital and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified on our Website. The “Last updated” date at the top of this page reflects the most recent revision. We recommend reviewing this page periodically. Your continued use of the Website after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please contact us:
- Email: hello@thrivology.digital
- Post: Thrivology Limited, 7 Heron Court, Bedford, Bedfordshire, MK40 4UQ
- Company No.: 13215559 (registered in England and Wales)
Our Cookie Policy, Terms and Conditions, and Disclaimer are published separately on this Website.