LEGAL / PRIVACY NOTICE
PRIVACY NOTICE
Last updated: 30 October 2026
WHO WE ARE
GXD is a trading name of Group X Digital Ltd, registered in England and Wales under company number 12130169.
Our registered office is Archer House, Britland Estate, Northbourne Road, Eastbourne, England, BN22 8PW.
Group X Digital Ltd is responsible for the personal information covered by this notice. You can contact us about privacy at sean@groupxdigital.com or write to our registered office.
WHAT THIS NOTICE COVERS
This notice explains how we handle personal information when you visit our website, contact us or discuss a potential engagement.
Personal information handled on behalf of a client during a separate engagement may be governed by that client’s instructions, privacy information and our contractual data-protection terms.
INFORMATION WE COLLECT
When you contact us, we collect the information you provide. This may include your name, work email, organisation, offer of interest, the outcome or question you describe, challenges, preferred timeline, optional availability and timezone, and subsequent correspondence.
The systems used to serve and protect this website also process technical information, such as IP addresses, browser information, request details and security events. Any additional analytics or device-storage technologies are explained in the cookies and website technologies section.
Where a colleague introduces you or contacts us on your behalf, we may receive your business contact details and information relevant to that introduction.
Please provide only information needed for your enquiry. Do not include passwords, payment-card details, sensitive personal information or confidential client data in an initial message.
WHY WE USE YOUR INFORMATION
We use enquiry information to understand your request, arrange a suitable conversation, respond, discuss relevant services and prepare or manage a proposal.
For contacts acting on behalf of an organisation, our usual lawful basis is our legitimate interest in responding to business enquiries and developing relevant business relationships. We consider whether that use is necessary and proportionate and whether your rights override those interests.
Where you are personally entering a contract with us, we may process information because it is necessary to take steps at your request before entering that contract or to perform it.
We use necessary technical and security information to operate the website, prevent abuse and investigate problems. Our lawful basis is our legitimate interest in maintaining secure, reliable services.
We may retain or disclose information where necessary to meet a legal obligation or establish, exercise or defend legal claims.
Where processing requires consent, we request it separately. Submitting an enquiry does not automatically subscribe you to marketing communications.
INFORMATION YOU CHOOSE NOT TO PROVIDE
You do not have a general obligation to submit an enquiry. However, without sufficient contact details and information about your request, we may be unable to respond meaningfully.
Fields marked optional are not required to submit the form.
WHO RECEIVES INFORMATION
Information is available to the people who need it to handle your enquiry, operate the website or meet the purposes described in this notice.
Framer B.V. provides website hosting and handles the enquiry form. Form submissions are configured for delivery to sean@groupxdigital.com, with no additional form recipients, webhook or Google Sheets destination configured. Business email and IT providers support our correspondence. Relevant professional advisers, insurers, authorities or courts may also receive information where necessary and lawful.
If you choose online booking, Cal.com handles your name, email address, organisation, selected service, preparation notes, chosen time and timezone to arrange the meeting. Bookings are added to our connected Google Calendar. The consultation page embeds the Cal.com scheduler, which connects to Cal.com when that page loads. A direct Cal.com booking link is also available. Cal.com’s own privacy information explains its processing and website technologies: Cal.com Privacy Policy
We use appropriate contractual arrangements where providers process personal information on our behalf. We do not give providers unrestricted permission to use enquiry information for unrelated purposes.
INTERNATIONAL PROCESSING
Our providers may process information outside the UK. Where a restricted international transfer takes place, an applicable lawful transfer arrangement is required. This may involve UK adequacy regulations or appropriate contractual safeguards, together with any required assessment.
Framer is based in the Netherlands and lists US subprocessors, including AWS for cloud hosting. Its Data Processing Addendum is incorporated into its service agreement and provides for the UK International Data Transfer Addendum to the EU standard contractual clauses where UK restricted-transfer rules apply. Framer publishes its current subprocessor information in its Trust Center. This does not mean that all processing takes place in the UK.
You can contact us for information about the safeguards relevant to your information and how to obtain a copy, subject to lawful redactions.
HOW LONG WE RETAIN INFORMATION
We keep information for as long as reasonably necessary for the purpose for which it was collected.
For enquiries, we consider whether discussions remain active, whether a proposal or engagement results, the need to maintain a reasonable record of correspondence, and any applicable legal, accounting or dispute requirements.
Security records are retained according to their purpose, the need to investigate incidents and the relevant provider settings.
We assess whether information is still needed using these criteria when deciding whether to delete or anonymise it, subject to justified retention requirements and provider backup cycles. Contact us about the retention or deletion of a particular record.
COOKIES AND WEBSITE TECHNOLOGIES
GOOGLE ANALYTICS — With your consent, Google Analytics 4 measures page visits and consultation-link clicks so we can understand how this website is used. Google receives technical information about your device and visit. We do not send enquiry text, names, email addresses or booking details through our analytics events. Analytics is optional and is not loaded until you select Accept analytics. Select Reject analytics to browse without it, or use Cookie settings at any time to change or withdraw your choice. Our analytics cookies (_ga and _ga_*) are configured to expire after 180 days; your choice is stored in your browser for 180 days. Advertising features and enhanced measurement are disabled. A consultation-link click is not evidence of a completed booking. Optional Framer visitor analytics remains disabled. Read Google’s privacy information for details of Google’s processing.
Conversation links temporarily store the referring offer in this browser tab’s session storage so it can be preselected on the enquiry form and passed to the Cal.com booking page. This contains an offer name, not contact details. It is replaced when you select another conversation or offer; the browser clears it when the tab session ends. Browser caching of website files is separate from tracking.
HOSTING AND WEBSITE FILES — Provider: Framer B.V. and its hosting/CDN subprocessors. Purpose: deliver pages, fonts, images and interactive controls. Category: necessary website operation. Duration: requests are processed when pages are accessed; browser-cache lifetimes follow the response headers and browser settings. No visitor identifier was stored in our public-page checks.
ENQUIRY FORM AND SPAM PROTECTION — Provider: Framer B.V. Purpose: transmit an enquiry to the configured business email address and apply basic spam checks. Category: necessary to provide and protect the requested enquiry service. Duration: form values remain in the page while it is open; submitted enquiries and relevant provider records follow the retention criteria above. No form cookie or persistent browser-storage value was observed.
DIAGRAM MOTION CONTROLS — Provider: GXD website code. Purpose: pause or resume the explanatory diagrams and respect the device’s reduced-motion preference. Category: accessibility and requested presentation. Duration: the choice is held in page memory; it is not saved as a cookie or in persistent browser storage.
SECURITY
We use appropriate organisational and technical measures to protect personal information. These measures must reflect the information involved and the risks of processing it.
No website or email system can guarantee absolute security. Please contact us promptly if you believe information sent to us has been compromised.
YOUR RIGHTS
Depending on the circumstances, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict processing and receive certain information in a portable format.
You also have the right to object to processing based on legitimate interests because of your particular circumstances. You can object to direct marketing at any time.
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect earlier lawful processing.
These rights are subject to applicable conditions and exceptions. We may need to verify your identity before acting on a request. Contact sean@groupxdigital.com to exercise your rights. We will respond within the time required by applicable data-protection law.
QUESTIONS AND COMPLAINTS
Please contact sean@groupxdigital.com with any privacy question or complaint. We will investigate and respond as required by law.
You can also complain to the Information Commissioner’s Office, the UK data-protection regulator, through ico.org.uk/make-a-complaint.
Nothing in this notice limits any right to complain to another competent supervisory authority where applicable.
CHANGES TO THIS NOTICE
We may update this notice when our practices or legal requirements change. The date at the top identifies the latest version.