Legal
Privacy notice
How Savvy Digital Group Ltd uses personal data on this website and when you get in touch with us.
Who we are
Savvy Digital Group Ltd is the controller of the personal data described in this notice.
This notice covers savvydigitalgroup.co.uk and our dealings with advertisers, partners, journalists and job applicants. Each of our consumer brands has its own privacy notice on its own site: Pennypea and Cracking Deals.
Questions or requests: privacy@savvydigitalgroup.co.uk.
What we collect and why
| What | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Technical data when you visit this site: IP address, browser, pages requested and time | To deliver the site, keep it secure and fix problems | Legitimate interests | Up to 30 days in server and security logs |
| Your name, email address and message when you email us | To reply and keep a record of the conversation | Legitimate interests | Up to 2 years after our last contact |
| Business contact details of advertisers, agencies and partners | To discuss, agree and run campaigns, and to invoice | Contract, or steps before a contract | 6 years after the end of the contract, for tax and accounting |
| Journalists' contact details and requests | To respond to press enquiries and send relevant news | Legitimate interests | Until you ask us to stop, or 2 years without contact |
| CVs, applications and interview notes | To consider you for a role | Steps before a contract; legitimate interests | 6 months after the role is filled, unless you agree to longer |
We don't use this site to collect special category data, and we don't make decisions about you based solely on automated processing.
Who we share it with
We never sell personal data. We share it only with service providers who help us run the business, under contracts that require them to protect it:
- Cloudflare, Inc., which hosts and secures this website
- Our email and office software provider
- Our accountants, lawyers and insurers, where needed
We may also disclose data where the law requires it, or to protect our rights or the safety of others.
International transfers
Some of our providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the ICO's International Data Transfer Agreement or Addendum to protect it.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data
- correct data that's wrong or incomplete
- delete your data
- restrict or object to how we use it, including for direct marketing
- move data you gave us to another organisation
Email privacy@savvydigitalgroup.co.uk. We'll respond within one month, and it's free in most cases.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We'll update this page when the way we use data changes, and change the date below.
Last updated 25 October 2026.