Privacy Policy

Privacy Policy

Last updated: 16 October 2026

1. Who we are

Soofi Digital (“Soofi Digital“, “we“, “us“, “our“) is a digital agency providing website design and development, search engine optimisation (SEO), digital marketing and related software tools. For the personal information described in this policy, Soofi Digital is the data controller, except where we process data on behalf of our clients (see section 7).

You can reach us at admin@soofidigital.com.

2. What this policy covers

This policy applies to all Soofi Digital products and services that link to it, including:

• Our website, soofidigital.com, and any related landing pages;
• Our browser extensions, including Website Grader for Google Chrome;
• Our web and mobile apps and other software tools;
• Our services, including enquiries, consultations, proposals and client projects;
• Our communications with you by email, WhatsApp, phone, video call or social media.

A specific product may have additional details in section 6 or in its own notice. Where they differ, the product-specific information applies to that product.

This policy does not cover third-party websites or services we link to (for example Google, Calendly or WhatsApp). Their own privacy policies apply when you use them.

3. Information we collect

Information you give us

• Contact details: name, email address, phone or WhatsApp number, business name and job title, for example when you fill in a form, request help in one of our tools, book a meeting or email us.
• Project information: details about your business, website, goals and anything else you share with us when asking for a quote or working with us.
• Communications: the content of messages, emails, call notes and feedback you send us.
• Account and billing details: if you become a client or create an account in one of our products, the information needed to set it up and invoice you. Card payments are handled by our payment providers; we do not store full card numbers.

Information collected automatically

• Usage and device data: pages visited, links clicked, referring website, approximate location (from IP address), browser and device type, collected through cookies and similar technologies on our website (see section 8).
• Campaign data: if you arrive through one of our links, tags such as utm_source tell us which campaign or product sent you.
• Product data: technical information our extensions and apps need to work, described per product in section 6.

Information from other sources

• Scheduling tools: when you book a meeting through Calendly, we receive the details you enter there.
• Publicly available business information: for example your company website, Google Business Profile or professional social media profile, when relevant to a service you asked about.

4. How we use your information

• To reply to your enquiries and requests for help, and to arrange consultations and meetings.
• To provide, operate and support our services, extensions and apps.
• To prepare proposals, deliver client projects and manage invoicing.
• To improve our website and products, fix problems and understand how they are used.
• To send you information about our services where you have asked for it or where the law allows (see section 15).
• To keep our website and products secure and prevent fraud or abuse.
• To comply with legal, tax and accounting obligations and to enforce our agreements.

We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.

5. Legal bases for processing (UK and EEA)

If you are in the United Kingdom or the European Economic Area, we rely on the following legal bases:

6. Our browser extensions and apps

Our extensions and apps collect only what they need to do their job. For every product:

• We collect personal information only when you choose to give it to us, and we tell you at that moment what it’s for.
• We do not sell, rent or trade user data, and we do not use it for advertising profiles.
• We do not use or transfer user data for purposes unrelated to the product’s purpose, and we do not use it to determine creditworthiness or for lending.
• We do not read your browsing history, and we do not run code downloaded from remote servers.
• Where a product uses data from Google APIs, its use and transfer of that data complies with the Google API Services User Data Policy, including the Limited Use requirements, and the Chrome Web Store program policies.

7. Data we handle on behalf of clients

When we build or manage websites, marketing campaigns or software for our clients, we may have access to personal information about our clients’ own customers, for example form submissions, analytics data or customer lists. In those cases our client is the controller of that data and we act only on their instructions as a processor. Questions about that data should be sent to the relevant client. We keep it confidential, use it only to deliver the agreed work, and return or delete it when the project ends unless the law requires us to keep it.

8. Cookies and analytics

Our website uses cookies and similar technologies:

• Essential cookies that make the site work, for example remembering your cookie choices.
• Analytics cookies that help us understand how visitors use the site, using tools such as Google Analytics. These collect information like pages visited and approximate location, not your name or email.
• Marketing cookies that help us measure our advertising, for example tags from Google Ads or Meta. Where the law requires, we only set these with your consent.

You can block or delete cookies in your browser settings, and where we show a cookie banner you can change your choices at any time. You can also opt out of Google Analytics with the Google Analytics opt-out add-on. Our browser extensions do not set cookies on the websites you grade.

9. Who we share your information with

We share personal information only with service providers who help us run our business, under agreements that require them to protect it and use it only for our instructions. These include:

• Google (Google Workspace, including Gmail and Google Sheets; Google Analytics; PageSpeed Insights) for email, storing enquiries, analytics and product features;
• Calendly for booking meetings;
• WhatsApp (Meta) when you choose to message us or ask us to contact you there;
• Hosting, website and payment providers that host our sites and process payments, including Cloudflare, which runs our website and the Website Grader server;
• AI assistant providers (such as Anthropic and OpenAI) when you choose to use our tools inside their assistants; they process your conversation under their own privacy policies;
• Professional advisers such as accountants and lawyers, where needed.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of our business, in which case this policy will continue to apply.

We do not sell your personal information or share it for cross-context behavioural advertising.

10. International transfers

We and our service providers may store and process information in countries other than yours, including the United States. When we transfer personal information from the UK or EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

11. How long we keep your information

• Enquiries and help requests that don’t become projects: up to 2 years after our last contact, then deleted.
• Client records: for the length of our relationship and up to 6 years afterwards for legal, tax and accounting purposes.
• Analytics data: according to the retention settings of the analytics tool, normally no longer than 14 months.
• Data stored in your browser by our extensions: until you clear it or remove the extension.

You can ask us to delete your information sooner (see section 13).

12. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls and two-step verification on our accounts, and limiting access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and the relevant authorities of a breach where the law requires.

13. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy;
• correct information that is inaccurate or incomplete;
• delete your information;
• object to or restrict how we use it, including objecting to direct marketing at any time;
• receive your information in a portable format;
• withdraw consent where we rely on it, without affecting earlier processing.

To use any of these rights, email admin@soofidigital.com. We will reply within 30 days (or the period your local law requires) and may need to confirm your identity first. We won’t treat you differently for exercising your rights.

If you are in the UK or EEA, you can also complain to your data protection authority, for example the UK Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to resolve your concern first.

14. U.S. state privacy rights

Residents of California and other U.S. states with privacy laws have the rights described in section 13, including the right to know what personal information we collect, use and disclose, and to request its deletion or correction. In the last 12 months we have collected the categories of information described in section 3 (identifiers, commercial information, internet activity and professional information) for the purposes in section 4, and disclosed them only to the service providers in section 9.

We do not sell personal information or share it for cross-context behavioural advertising, and we do not knowingly collect information from anyone under 16. We do not use sensitive personal information to infer characteristics about you. You may use an authorised agent to make a request on your behalf.

15. Marketing messages

If you ask us for help, book a meeting or become a client, we may contact you by email, phone or WhatsApp about that request. We will only send you other marketing messages where you have agreed or where the law allows. Every marketing email includes a way to unsubscribe, and you can reply “unsubscribe” or “stop” to any message, or email admin@soofidigital.com.

16. Children

Our website, services, extensions and apps are intended for businesses and adults. They are not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

17. Changes to this policy

We may update this policy as our services and the law change. We will post the new version on this page with a new “Last updated” date, and for significant changes we will give more prominent notice, for example inside the affected product or by email.

18. Contact us