Last updated: 12 April 2026
1. Who We Are
Bambino Agency Ltd (“Bambino”, “we”, “us”, or “our”) is a digital marketing agency registered in England and Wales. Our registered office is at 1 Piccadilly Gardens, Manchester M1 1RG. We provide SEO, paid media, web design, social media management, content marketing, and AI automation services to businesses throughout the United Kingdom and internationally.
This Privacy Policy explains how we collect and process personal data when you visit bambinoagency.com (our “Website”), enquire about our services, become a client, or otherwise interact with us. It applies to personal data we hold about website visitors, prospective clients, current clients, suppliers, and job applicants.
We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). We are registered with the Information Commissioner’s Office (ICO).
2. Data We Collect
2.1 Data You Provide to Us Directly
When you contact us, request a free audit, fill in our contact form, or engage our services, we may collect:
- Your name and job title
- Your business name and website URL
- Your email address and telephone number
- Billing address and payment information (processed securely via our payment provider)
- Details of the services you are enquiring about or purchasing
- Any other information you choose to provide in correspondence with us
2.2 Data We Collect Automatically
When you visit our Website, we automatically collect certain technical and usage data, including:
- IP address (anonymised where possible)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or search query
- Geographic location (at country/city level)
- Cookie identifiers (see Section 9)
This data is collected using cookies and similar technologies as described in our Cookie Policy.
2.3 Data From Third Parties
We may receive personal data about you from third parties in the following circumstances:
- When you contact us via a social media platform (e.g. LinkedIn or Instagram), that platform may share your profile information with us
- When you have been referred to us by an existing client or partner
- From publicly available sources such as Companies House or LinkedIn, where we are researching businesses we believe may benefit from our services
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- Service delivery: To provide the digital marketing services you have engaged us for, including campaign management, reporting, and account management
- Enquiry handling: To respond to your enquiries, provide quotes, and carry out free website audits you have requested
- Contract administration: To manage our contract with you, process invoices, and handle payments
- Marketing communications: To send you case studies, industry updates, and promotional content about our services, where you have given consent or we have a legitimate interest in doing so
- Website improvement: To analyse how visitors use our Website so that we can improve its content, performance, and user experience
- Legal compliance: To comply with applicable laws, regulations, court orders, or requests from regulatory authorities
- Business administration: For internal record-keeping, financial reporting, and business development purposes
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases for processing your personal data:
- Contract (Article 6(1)(b)): Processing is necessary to perform the contract we have with you as a client, or to take steps at your request before entering into a contract
- Legitimate interests (Article 6(1)(f)): Processing is necessary for our legitimate business interests, such as improving our Website, following up with prospective clients, preventing fraud, and sending marketing to existing clients about similar services — provided these interests are not overridden by your rights
- Consent (Article 6(1)(a)): Where you have given us clear, specific consent to process your data, for example when subscribing to our newsletter or accepting non-essential cookies
- Legal obligation (Article 6(1)(c)): Where processing is required to comply with a legal obligation, such as keeping financial records for HMRC or responding to a lawful request from the ICO
Where we rely on legitimate interests, you may object to that processing at any time (see Section 8).
5. Sharing Your Data
We do not sell your personal data. We may share your data in the following limited circumstances:
- Service providers: We work with trusted third-party suppliers who process data on our behalf under written data processing agreements. These include cloud hosting providers, project management tools, email delivery services, accounting software, and analytics platforms (e.g. Google Analytics).
- Advertising platforms: If you engage our paid media services, limited data may be shared with advertising platforms (Google, Meta, etc.) for the purposes of running and optimising your campaigns.
- Professional advisers: Our lawyers, accountants, and insurers may access data where necessary for the provision of their professional services.
- Legal requirements: We may disclose personal data where required to do so by law, or in connection with legal proceedings, to protect our rights or property, or to protect the safety of our clients or others.
- Business transfers: If Bambino Agency Ltd is acquired, merged with, or sells assets to another company, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website before your data becomes subject to a different privacy policy.
6. International Transfers
Some of our third-party service providers are based outside the United Kingdom. Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR. These safeguards typically include:
- Transfers to countries the UK government has recognised as providing an adequate level of protection
- Standard contractual clauses approved by the ICO (International Data Transfer Agreements)
- Binding corporate rules or other legally approved mechanisms
You may request details of any such safeguards by contacting us at hello@bambinoagency.com.
7. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, taking into account legal and regulatory obligations. Our general retention periods are:
- Client records: Six years following the end of the contract (in line with the Limitation Act 1980)
- Financial and invoicing records: Six years (as required by HMRC)
- Enquiry and prospect data: Two years from the date of last contact, unless a contract is entered into
- Marketing opt-ins: Until you withdraw consent or object to processing
- Website analytics data: Up to 26 months (Google Analytics default)
- Job application data: Six months from the date of application, unless you are appointed or we seek your consent to retain it longer
When personal data is no longer required, we securely delete or anonymise it.
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You can request a copy of the personal data we hold about you (a Subject Access Request)
- Right to rectification: You can ask us to correct inaccurate or incomplete data
- Right to erasure: You can ask us to delete your personal data in certain circumstances (“the right to be forgotten”)
- Right to restrict processing: You can ask us to pause or limit how we process your data in certain circumstances
- Right to data portability: You can request that we transfer your data to you or to another service provider, where technically feasible and where processing is based on consent or contract
- Right to object: You can object to processing based on legitimate interests or for direct marketing purposes. We will comply unless we can demonstrate compelling legitimate grounds that override your interests
- Rights related to automated decision-making: You have the right not to be subject to a decision made solely by automated means that significantly affects you, unless you have given explicit consent or it is necessary for a contract
- Right to withdraw consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of any prior processing
To exercise any of these rights, please contact us at hello@bambinoagency.com or write to us at 1 Piccadilly Gardens, Manchester M1 1RG. We will respond within one month of receiving your request, free of charge. We may need to verify your identity before processing your request.
9. Cookies
Our Website uses cookies and similar tracking technologies to improve your experience, analyse usage, and deliver relevant advertising. For full details of the cookies we use, what they do, and how to manage your preferences, please read our Cookie Policy.
You can manage your cookie preferences at any time using our cookie consent banner or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.
10. Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data in transit
- Access controls and role-based permissions for our systems
- Regular security assessments and staff data protection training
- Secure, encrypted storage for sensitive data
Although we do our utmost to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the ICO in accordance with UK GDPR requirements.
11. Children
Our Website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate parental consent, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or by a notice on our Website. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
If you are unhappy with how we have handled your personal data and do not feel that we have adequately addressed your concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would, however, always appreciate the opportunity to address your concerns before you contact the ICO, so please do reach out to us first.