Legal
This Privacy Policy explains how IBIX ("we", "us", "our"), a digital marketing agency based in Grimsby, North East Lincolnshire, United Kingdom, collects, uses and protects your personal data when you visit ibixagency.com or submit an enquiry through our website.
IBIX is a digital marketing agency based in Grimsby, North East Lincolnshire, UK. We provide SEO, Google Ads management, Google Business Profile management, Amazon PPC, and performance marketing services to businesses across the UK and in Saudi Arabia and the Gulf.
For data protection purposes, IBIX is the data controller for personal information collected through this website.
To contact us about this policy or your data:
We only collect personal data that you voluntarily provide to us, plus limited technical data collected automatically as you browse.
a) When you submit the "Get my free audit" or contact form
b) When you submit a web design enquiry
Name, business name, preferred contact method, package tier, timescale and project description. When you submit a web design enquiry we also record the page you submitted from, the site that referred you, and any campaign tags in the link you arrived on.
c) When you start a project with us (client onboarding form)
Your team member's name, quote reference, contact details, and information about your business and the website decisions you approve.
d) Technical data collected automatically as you browse
What we don't collect: we do not collect payment or card details through this website, or any sensitive personal data (health, biometric, genetic, credit or detailed financial data, belief, or children's data). Please don't include sensitive details in a form message — our forms aren't designed for it, and our form handler is based outside the UK (see sections 9 and 10).
Our forms also contain hidden anti-spam fields that are never filled in by a real visitor and collect no data about you.
We use the personal data you provide solely for the following purposes:
We will never sell your personal data to third parties, share it without your consent, or use it for purposes unrelated to your enquiry.
Our legal basis for processing your data is legitimate interests (responding to your enquiry) and, where applicable, contractual necessity (delivering services you've commissioned).
Always on (necessary for the site to work):
Only with your consent:
To withdraw your consent: clear your browser's site data (local storage) for this site, or email us at info@ibixagency.com and we will reset your preference.
To operate this website and handle enquiries, we use the following third-party services. Each has its own privacy policy:
Important: the reviews widget and the website fonts run before the cookie banner appears, because neither sets an analytics cookie on your device — but both do expose your IP address to the provider named above, which is why we disclose them here explicitly. Google Analytics never runs before you have accepted.
We do not use advertising or retargeting pixels (such as Google Ads remarketing or Meta Pixel) on this website, and we do not use Google Tag Manager.
We do not sell or trade your personal data.
We retain your personal data only for as long as necessary:
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:
To exercise any of these rights, contact us via our website enquiry form. We will respond within 30 days in line with our legal obligations.
How to complain to us. If you have a complaint about how we have handled your personal data, contact us directly via our contact form or by emailing info@ibixagency.com. We will acknowledge your complaint within 30 days and let you know the outcome once we have looked into it.
If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator:
Information Commissioner's Office · ico.org.uk · Helpline: 0303 123 1113
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS (encrypted connection). Access to any data you submit is restricted to IBIX only.
However, no internet transmission is completely secure and we cannot guarantee absolute security of data sent to us electronically.
The providers named in section 5 are based, or process data, outside the UK and EEA. Specifically:
We rely on the appropriate safeguards available for each provider for these transfers.
For our Saudi Arabia and Gulf visitors specifically, see section 10 below.
If you are in the Kingdom of Saudi Arabia, our processing of your personal data is governed by the Personal Data Protection Law (Royal Decree M/19, as amended), its Implementing Regulations and the Data Transfer Regulation, enforced by the Saudi Data & AI Authority (SDAIA). The PDPL applies to us even though we are registered in the United Kingdom, because it reaches anyone processing the personal data of people inside the Kingdom.
An Arabic version of this policy is available at ibixagency.com/privacy-ar, and the Arabic text is the authoritative version for users in Saudi Arabia.
Who the controller is. Lyco Sphere Ltd, trading as IBIX Digital, registered in England and Wales, company number 17155358, operating from Grimsby, United Kingdom. We are a service-area business and do not publish a street address; our registered office address is on the public Companies House register under company number 17155358 and is available in writing on request.
Purpose, lawful basis, and which fields are mandatory. Set out in sections 2 and 3 above. In short: name, email address and "What's the main challenge?" are mandatory on our enquiry forms, because we cannot reply without them and the form will not submit without them. Website and monthly budget are optional — leaving them blank has no consequence beyond a less specific first reply. You are not obliged to use the form at all; you can email, call or message us on WhatsApp instead.
Does your data leave Saudi Arabia? Yes. Form submissions and technical data are processed by providers outside the Kingdom — in the United States, the United Kingdom and on global networks — as listed in sections 5 and 9.
To be precise about what that means: Saudi law does not impose blanket localisation on ordinary personal data. Transfer outside the Kingdom is permitted where there is a legitimate purpose, no prejudice to national security or the Kingdom's vital interests, an appropriate level of protection or an appropriate safeguard at the receiving end, and no more data than the purpose requires.
Sensitive data is different, and we do not collect it here. We do not ask for health, biometric, genetic, credit, detailed financial, belief or children's data through this website, and we do not route any such data to an overseas form handler. Please do not include sensitive details in a form message. Where a Saudi client's project genuinely requires sensitive data, we agree that separately and use infrastructure inside the Kingdom.
Marketing. This website has no newsletter signup, and we do not send marketing messages without your separate, specific opt-in. If we add one, it will be a separate, unticked box that is not bundled with the submit button, with an unsubscribe link in every message, in line with Article 25 of the PDPL.
Your rights under the PDPL. You have the right to be informed, to access your data, to obtain a copy of it in a readable format, to have it corrected, updated or completed, to have it destroyed when it is no longer needed, and to withdraw your consent at any time where consent is the basis we rely on. To exercise any of these, email info@ibixagency.com — we respond within 30 days, and aim to respond within 5 working days. We may ask you to verify your identity first.
Complaints. You can complain to SDAIA at sdaia.gov.sa if you are unhappy with how we handle your data.
Data breaches. If a breach affects the personal data of people in Saudi Arabia, we will notify SDAIA within 72 hours of becoming aware of it, and notify affected individuals without delay where the breach causes serious harm to their data or conflicts with their rights.
Our website and services are directed at businesses and adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or in UK or Saudi data protection law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website after any changes constitutes your acceptance of the updated policy. This Privacy Policy should be read alongside our Terms of Use, which govern use of this website more broadly.
If you have any questions, concerns, or requests relating to this Privacy Policy or how IBIX handles your data, please contact us:
Lyco Sphere Ltd (trading as IBIX Digital)
Registered in England & Wales. Company No. 17155358.
Grimsby, North East Lincolnshire, UK
info@ibixagency.com · +44 7979 451280 (UK) · +966 55 359 8218 (Gulf)
ibixagency.com
We aim to respond to all data-related enquiries within 5 working days, and within 30 days at the latest.