MADX Privacy Policy

‍

MADX Digital Ltd (“MADX”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and safeguard your personal data when you visit our website(s) and sub-domains, interact with our content, or use our services, and informs you about your rights and how the law protects you.

‍

By using our website or services, you agree to this privacy policy and consent to the processing of your personal data as described here.

‍

Last updated: 20/10/2025

‍

Please see the Glossary for the meaning of terms used in this policy.

‍

1. Important information and who we are

‍

Purpose of this privacy policy

‍

This policy gives you information on how MADX collects and processes your personal data through your use of our website(s) [https://www.madx.digital] (including any landing pages and sub-domains) and when you engage our services (for example, when you request a proposal, subscribe to our newsletter, attend a webinar, download gated content, or become a customer).

‍

Our services and site are intended for business users. We do not knowingly collect data relating to children.

‍

This privacy policy supplements other notices (e.g., cookie banner, contract terms) and is not intended to override them.

‍

Controller

‍

MADX Ltd is the data controller for personal data described in this policy. In limited cases, we may act as a data processor for customers (e.g., when we manage analytics/SEO tools in a customer’s account and only process personal data on their instructions). Where we act as a processor, the customer’s privacy policy applies, and our processing is governed by a Data Processing Agreement (DPA) with that customer.

‍

Contact details

‍

• Legal entity: MADX Digital Ltd
  
• Email: [email protected]
• Postal address: Flat 2 1 Sigdon Passage, London, England, E8 1AN

Changes to the policy and your duty to inform us

‍

We keep this policy under regular review. Historic versions can be obtained by contacting us. Please keep us informed if your personal data changes during your relationship with us.

‍

Third-party links

‍

Our site may include links to third-party websites, plug-ins and applications. Clicking those may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

2. The data we collect about you

‍

“Personal data” means any information that identifies an individual. We may collect, use, store and transfer the following categories:

‍

• Identity Data: First name, last name, job title, company, country/region.
  
• Contact Data: Email address, phone number, business address, social/profile URLs you provide.
  
• Account & Profile Data: Your preferences, interests, content download history, and event/webinar registrations.
  
• Transactional/Billing Data (for customers): Invoices, payments, VAT/tax IDs, billing contacts.
  
• Technical Data: IP address, device identifiers, browser type/version, time zone, OS, referral source, session duration, page interactions, UTM parameters, cookie IDs, pixel IDs.
  
• Usage Data: Information about how you use our website, newsletters and services.
  
• Marketing & Communications Data: Your preferences in receiving marketing from us and your communication preferences.
  
• Support/Communications Data: Messages, meeting notes and feedback you provide.
  
• Recruitment Data (if you apply for a role): CV, cover letter, interview notes and outcomes.

We also process Aggregated Data (e.g., site usage statistics), which is not personal data unless it can identify you.

We do not intentionally collect Special Categories of Personal Data (e.g., health, religious beliefs). Please do not submit such data to us. If a specific engagement requires it, we will obtain explicit consent or rely on another lawful basis where permitted by law.

‍

If we need personal data by law or to perform a contract and you do not provide it when requested, we may be unable to provide the service.

‍

3. How your personal data is collected

‍

We use different methods:

‍

• Direct interactions: You submit forms (contact, newsletter, downloads), request a proposal, sign a contract, join a webinar, correspond by email or phone, or give feedback.
  
• Automated technologies: As you interact with our site, we collect Technical and Usage Data via cookies, pixels and similar technologies. See our Cookie Policy for details.
  
• Third parties and public sources:
  
  • Analytics providers and advertising networks (e.g., Google Analytics/GA4, Google Ads, LinkedIn Ads, Meta Ads) for Technical/Usage Data (subject to your consent where required).
  • CRM/marketing platforms (e.g., HubSpot/other CRM) when you interact with our assets.
  • Payment and invoicing providers for Transactional/Billing Data.
  • Public sources (e.g., Companies House, LinkedIn) for business contact verification.

4. How we use your personal data and legal bases

‍

We will only use your personal data when permitted by law. Most commonly:

‍

• Performance of a contract with you or your organisation.
  
• Legitimate interests (ours or a third party) where your interests and fundamental rights do not override those interests.
  
• Consent, which you can withdraw at any time (e.g., for non-essential cookies or email marketing where consent is the basis).
  
• Legal obligation.

Purposes and legal bases (examples)

‍

‍

AI & tooling we use for service delivery

‍

We may use AI-assisted tools (e.g., for research, QA and insights) to support our SEO delivery. We do not sell your data to AI providers. Where tools involve third-party AI vendors, we restrict inputs to only what is necessary. If a specific use requires your consent or special terms, we will obtain it in advance.

‍

Marketing

‍

You may receive marketing if you have requested information from us, downloaded content, attended our events, or purchased from us and not opted out. You can opt out at any time via the unsubscribe link or by contacting us.

‍

Cookies

‍

We use cookies/pixels to operate the site and understand performance. For details and to manage preferences, see our Cookie Policy.

‍

Change of purpose

‍

We will only use your data for the purposes for which we collected it, unless we reasonably consider we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis.

‍

5. Disclosures of your personal data

‍

We may share personal data with:

‍

• Service providers/Processors acting on our behalf, such as: hosting and cloud providers, analytics and advertising platforms, CRM and marketing automation, webinar/event platforms, payment and invoicing providers, project management and collaboration tools, IT/security providers, and professional advisers (legal, accounting).
  
• Customers (when we act as a processor on their instruction) or as necessary to deliver the engagement.
  
• Corporate transactions: third parties to whom we may sell, transfer or merge parts of our business or assets.
  
• Authorities: where required by law or to protect legal rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not permit our service providers to use your personal data for their own purposes and only allow them to process it for specified purposes and in accordance with our written instructions and confidentiality obligations. Where those providers act as our processors, we put appropriate data processing terms and safeguards in place (including international transfer mechanisms where relevant). You can contact us for information about our current categories of service providers.

We do not sell your personal data.

‍

6. Data security

‍

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or loss. Access is limited to personnel and processors who need it for business purposes and are subject to confidentiality obligations. We maintain incident response procedures and will notify you and regulators of a breach where legally required.

‍

7. Data retention

‍

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements.

‍

Indicative periods:

‍

• Website enquiry records: 24 months from last interaction.
• Marketing contacts: until you opt out, plus 6 months of inactivity (then minimised or deleted).
• Customer/project files: contract term + 6 years (statutory limitation).
• Billing records (invoices, payments): 6–7 years (tax/legal).
• Recruitment data: 12 months (unless you consent to a longer talent-pool retention).

We may anonymise data for research and statistics, in which case we may use it indefinitely without further notice.

‍

8. Your legal rights

‍

Under data protection laws, you have rights in relation to your personal data, including to:

‍

• Request access to your personal data.
  
• Request correction of your personal data.
  
• Request erasure of your personal data.
  
• Object to processing (including direct marketing) where we rely on legitimate interests.
  
• Request restriction of processing.
  
• Request data portability.
  
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact [email protected]. We may need to verify your identity. We aim to respond within one month, subject to complexity and volume. You will not usually have to pay a fee, but we may charge a reasonable fee or refuse a request if it is unfounded, repetitive or excessive.

‍

9. Push and email notifications

‍

We may send you service or transactional emails (e.g., onboarding, invoices, project updates). For marketing emails, you can unsubscribe at any time using the link in the email or by contacting us. If we offer app/browser notifications in the future, you will be able to control these via your device or browser settings.

‍

10. Third-party tools and connected accounts

‍

If you interact with MADX through third-party platforms (e.g., LinkedIn Lead Gen Forms, Google Ads, webinar platforms), those providers may share information with us according to their privacy policies and your settings. Please review their policies. If we ever offer account connections (e.g., connecting your analytics account to collaborate), we will request only the minimum scopes required and disconnect on request.

‍

11. Contact and complaints

‍

Questions, requests or concerns about this policy are welcome at [email protected] or by post to Flat 2 1 Sigdon Passage, London, England, E8 1AN. You have the right to complain to the ICO at any time (www.ico.org.uk).

‍

Glossary

‍

• Lawful basis:
  
  • Legitimate Interests: Our interest in conducting and managing our business to give you the best service and secure experience. We balance these interests against your rights.
    
  • Performance of Contract: Processing your data where necessary to deliver our services or take steps before entering into a contract.
    
  • Legal Obligation: Processing necessary to comply with law.
    
  • Consent: Freely given, specific, informed and unambiguous indication of your wishes, which you can withdraw at any time.‍‍
• ‍Third parties: Service providers acting as processors, including (by category) hosting/cloud, security and monitoring, CRM/marketing automation, analytics and advertising platforms, webinar/event tools, payment and invoicing, productivity and support tools, professional advisers, and insurers. 

Cookie Policy (summary)

‍

We use essential cookies to make our site work and (with your consent) analytics cookies to understand performance. You can manage your preferences at any time via the cookie banner or browser settings. See our full Cookie Policy for details.