Privacy Notice

 

Last updated: September 2026

1. About this Privacy Notice

This Privacy Notice explains how CHI Agency collects, uses, stores and protects personal information when you visit our website, contact us, use our services or otherwise interact with us.

We aim to handle personal information responsibly and in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018.

2. Who we are

CHI Agency is a partnership providing creative, marketing, branding, digital, web and related consultancy services.

For the purposes of applicable data protection legislation, CHI Agency is the data controller responsible for personal information processed in connection with our website and business activities.

Our contact details are:

CHI Agency
124 City Road
London
EC1V 2NX
United Kingdom

Email: hello@chi.agency

3. Information we may collect

Depending on how you interact with us, we may collect:

Information you provide directly

For example:

  • your name;
  • email address;
  • telephone number;
  • company or organisation name;
  • information contained in your enquiry or correspondence;
  • information you provide when requesting a proposal, quotation or information about our services; and
  • information you provide during the course of a business relationship.

Information collected automatically

When you visit our website, we may collect technical information such as:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate location derived from technical information;
  • pages visited;
  • referring website;
  • information about how you interact with the website; and
  • other technical or diagnostic information.

Some of this information may be collected through cookies and similar technologies, subject to your cookie preferences.

4. How we use personal information

We may use personal information to:

  • respond to enquiries and requests;
  • communicate with you;
  • provide quotations, proposals and information about our services;
  • establish and manage client and supplier relationships;
  • provide and administer our services;
  • manage accounts, invoices and payments;
  • operate, maintain and improve our website;
  • understand how visitors use our website;
  • monitor website performance;
  • maintain website security and prevent fraud, spam and abuse;
  • manage and measure digital advertising campaigns;
  • comply with legal and regulatory obligations;
  • establish, exercise or defend legal rights; and
  • send relevant marketing communications where permitted by law and, where required, with your consent.

5. Lawful bases for processing

We process personal information only where we have a lawful basis to do so.

Depending on the circumstances, these may include:

Contract
Where processing is necessary to enter into or perform a contract with you.

Legitimate interests
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Examples may include responding to business enquiries, managing relationships, improving our services, maintaining website security and administering our business.

Consent
Where you have given us consent to process your information for a specific purpose, such as certain cookies, analytics or marketing activities.

You may withdraw consent at any time where processing is based on consent.

Legal obligation
Where processing is necessary for us to comply with a legal or regulatory obligation.

6. Enquiries and contact forms

If you contact us through our website, email or another communication channel, we will use the information you provide to respond to your enquiry and, where appropriate, discuss or provide our services.

Our website enquiry form may collect information including your name, email address and the content of your enquiry.

We may retain correspondence and enquiry information where reasonably necessary for managing our business relationships, maintaining appropriate records, dealing with disputes or complying with legal obligations.

7. Marketing communications

Where permitted by law, we may contact existing clients and business contacts about services or information that we believe may be relevant to them.

Where consent is required, we will obtain it before sending marketing communications.

You can ask us to stop sending marketing communications at any time by contacting us or using an unsubscribe mechanism included in the communication.

8. Cookies and similar technologies

Our website uses cookies and similar technologies.

We use the Complianz consent management system to manage visitors’ cookie preferences and record consent choices.

Our website categorises cookies and similar technologies into categories including:

  • Functional — necessary functionality;
  • Preferences;
  • Statistics; and
  • Marketing.

Non-essential cookies and similar technologies are intended to be used only where the relevant consent has been obtained.

Complianz consent-management cookies

The following Complianz cookies may be used:

Cookie Purpose
cmplz_all Records that the visitor has consented to the marketing level of cookies.
cmplz_event_* Records consent to a custom event defined by the website owner.
cmplz_id Provides a non-identifiable user identifier used for records of consent.
cmplz_choice Records whether the visitor has made a cookie choice.
cmplz_stats Records that the visitor has consented to the statistics level of cookies.

These cookies are used for consent management and the recording of cookie choices. They are not themselves Google Analytics or Google advertising cookies.

You can change your cookie preferences using the cookie controls available on our website.

The cookies and similar technologies used by the website may change as website functionality, analytics, advertising and security services are updated. We may therefore update our cookie information from time to time.

9. Google services

We use a number of Google services in connection with the operation, analysis, security and marketing of our website.

These include:

Google Analytics

We use Google Analytics to understand how visitors use our website and to assess website usage and performance.

Depending on the configuration of the service, Google Analytics may use cookies and similar technologies to collect information about website usage.

Where non-essential analytics cookies or similar technologies require consent, they are subject to our cookie consent controls.

Google Search Console

We use Google Search Console to monitor the performance of our website in Google Search, including search visibility, indexing and technical issues.

It is primarily used by us as a website management and diagnostic service rather than as a visitor-tracking service.

Google Ads

We use Google Ads to manage and measure online advertising campaigns.

Depending on the campaigns and features enabled, Google Ads may use cookies, advertising identifiers and similar technologies to measure advertising effectiveness and support advertising or remarketing activities.

Non-essential advertising technologies are subject to our cookie consent controls where consent is required.

Google reCAPTCHA

We use Google reCAPTCHA to help protect website forms and other functionality from spam, fraud and automated abuse.

reCAPTCHA may collect technical and usage information from visitors for security and abuse-prevention purposes. Depending on how reCAPTCHA is configured, this may involve information being processed by Google even where advertising or analytics cookies have not been accepted.

Google may process information in accordance with its own privacy policies and terms.

10. WordPress and website technology

Our website is built using WordPress.

WordPress and the hosting, security, maintenance and other technical services supporting the website may process technical information necessary to operate, secure and maintain the website.

We use appropriate third-party providers where necessary to operate our website and business systems.

11. Who we may share information with

We may share personal information with trusted third parties where necessary for the purposes described in this Privacy Notice.

These may include:

  • website hosting and technical service providers;
  • WordPress-related service providers;
  • Google services, including Google Analytics, Google Search Console, Google Ads and Google reCAPTCHA;
  • email and communications providers;
  • analytics and marketing service providers;
  • IT, security and support providers;
  • professional advisers such as accountants, lawyers and other consultants;
  • payment and financial service providers;
  • insurers;
  • regulators, government bodies or law enforcement agencies where required; and
  • other parties where necessary to establish, exercise or defend our legal rights.

We do not sell personal information to third parties.

12. International transfers

Some of the third-party providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, as required by applicable data protection law.

These safeguards may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other lawful transfer mechanisms where applicable.

13. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:

  • provide services;
  • maintain appropriate business and financial records;
  • manage ongoing relationships;
  • comply with legal or regulatory obligations;
  • resolve disputes; or
  • establish, exercise or defend legal claims.

Retention periods will vary depending on the type of information and the purpose for which it is held.

14. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Your rights

Depending on the circumstances and applicable legal requirements, you may have rights including:

  • the right to be informed about how your personal information is used;
  • the right to access personal information we hold about you;
  • the right to request correction of inaccurate or incomplete information;
  • the right to request deletion of personal information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing, including direct marketing;
  • the right to data portability in certain circumstances; and
  • the right to withdraw consent where processing is based on consent.

You can exercise your rights by contacting us using the details below.

We may need to verify your identity before responding to certain requests.

16. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

17. Third-party websites

Our website may contain links to third-party websites and services.

We are not responsible for the privacy practices, security or content of third-party websites. You should review the privacy notices of those websites before providing them with personal information.

18. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our business, website, technology, legal requirements or the services we use.

The latest version will always be published on our website and will show the date on which it was last updated.

19. Contact us

If you have any questions about this Privacy Notice or wish to exercise your data protection rights, please contact:

CHI Agency
124 City Road
London
EC1V 2NX
United Kingdom

Email: hello@chi.agency

Back To Top