LEGAL

Privacy Policy

Last updated: 27 August 2026

This policy explains what personal data Ummah Design collects, why we collect it, how we look after it, and the rights you have over it. We keep it in plain English and only collect what we genuinely need.

Who we are

Ummah Design (“we”, “us”, “our”) is a digital agency based in Birmingham, United Kingdom, providing web design, SEO, social media management and AI business automation. For the purposes of UK data protection law, we are the data controller for the personal data described in this policy.

• Email: info@ummahdesign.com
• Phone / WhatsApp: +44 7798 628917

What we collect

We only collect personal data you choose to give us, or that is created automatically when you use our website:

• Information you submit through our forms — such as when you request a discovery call, download a guide, or send us a message. This typically includes your name, email address, company or store URL, the services you’re interested in, and anything you write in the message field.
• Communications — emails, WhatsApp messages, calls and meeting notes when you get in touch with us.
• Technical & usage data — standard information your browser sends (such as IP address, device and browser type), server logs, and analytics about how our pages are used. Our analytics are provided by Google Analytics 4, described under Cookies below.

We do not knowingly collect data from children, and we do not ask for special-category data (such as health or religious belief) through our forms.

How and why we use your data

We use your personal data to:

• respond to your enquiry, arrange a discovery call, or send a guide or resource you requested;
• provide and manage the services you engage us for;
• send occasional updates or marketing where you have agreed to receive them (you can opt out at any time);
• maintain, secure and improve our website; and
• meet our legal, accounting and record-keeping obligations.

Legal bases

Under UK GDPR we rely on the following legal bases:

• Consent — for sending you marketing emails and the guide you requested. You can withdraw consent at any time.
• Legitimate interests — for responding to enquiries, running our business, keeping our website secure, and understanding how our website is used so we can improve it, in a way that does not override your rights.
• Contract — where we need your data to deliver a service you have engaged us for.
• Legal obligation — where the law requires us to keep certain records.

Who we share it with

We never sell your personal data. We share it only with trusted service providers who process it on our behalf, under contract, to run our business. These include:

• HubSpot — our CRM and form handler, which stores the details you submit through our contact and guide forms.
• Resend — our transactional email provider.
• Google — we use Google Analytics 4 to measure how our website is used. Google processes this on our behalf as described below.
• Our website hosting provider — which stores the site and its server logs.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) to protect it. We may also disclose data where we are legally required to do so.

How long we keep it

We keep your personal data only as long as we need it: for the lifetime of our relationship with you, plus a reasonable period afterwards to meet our legal and accounting obligations. Marketing contacts are kept until you unsubscribe or ask us to remove you.

Cookies

Our website uses two kinds of cookie:

• Essential cookies — a small number needed for the site to function.
• Analytics cookies — we use Google Analytics 4 to understand how our pages are found and used, so we can improve them. It sets cookies named _ga and _ga_<property>, which distinguish one visitor from another and typically expire after two years. These are not essential to the running of the site.

Our analytics tag is configured with ad personalisation disabled, and our site’s security policy blocks Google’s advertising endpoints. We do not run advertising or remarketing trackers, and we do not use your browsing to target ads at you.

Google processes this data on our behalf and may transfer it outside the UK; where it does, we rely on the safeguards described above. You can block or delete cookies through your browser settings at any time, use your browser’s “do not track” or private browsing mode, or install Google’s opt-out browser add-on to stop Google Analytics collecting data about your visit. Blocking analytics cookies will not affect your use of the site.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• object to, or ask us to restrict, our processing;
• request a copy of your data in a portable format; and
• withdraw consent at any time where we rely on it.

To exercise any of these rights, email us at info@ummahdesign.com and we’ll respond within one month.

Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top of this page. Significant changes will be made clear on our website.

Questions about this policy? Email info@ummahdesign.com or get in touch.