Tornado Digital

GDPR and privacy policy for Tornado Digital

Tornado Digital GDPR and privacy policy covering marketing enquiries, audit requests, agency partner discussions, cookies, analytics, retention, sharing and data rights.

GDPR policy

Tornado Digital privacy and data protection policy

This policy explains how Tornado Digital handles personal data collected through www.tornadodigital.co.uk, online forms, AI visibility audit requests, agency partner enquiries, email and phone calls.

Last updated: 19 May 2026.
This policy covers website visitors, enquiry contacts, agency partner contacts, supplier contacts and prospective clients.
Client, partner, referral or white-label contracts may include additional confidentiality and data handling terms.

1. Data we may collect

Name, role, company, email address, phone number and location.
Website, service interest, campaign context, audit request details, partner enquiry information and message content.
Technical information such as IP address, browser, device, pages visited, cookie choices and form security signals.
Correspondence, meeting notes and commercial context shared during proposal or partner discussions.

2. How we use data

Tornado Digital uses personal data to respond to enquiries, arrange calls, review audit requests, assess agency partner fit, prepare proposals, manage commercial discussions, improve the website, protect forms and meet legal or administrative obligations.

3. Lawful bases

Depending on context, Tornado Digital may rely on legitimate interests, contract steps, legal obligations or consent. Consent is normally used for optional marketing or non-essential cookies where required.

4. Sharing and processors

Data may be handled by hosting providers, email providers, analytics providers, form security tools, professional advisers, approved delivery partners and lead or referral partners where needed. Tornado Digital does not sell personal data.

5. Marketing and audit data

Do not send ad account exports, analytics access, customer lists, credentials or confidential client files through public forms. Where deeper audit or campaign access is needed, Tornado Digital will agree a suitable access and handling process first.

6. Retention

Enquiry and audit request records are kept only as long as needed for follow-up, relationship management, legal obligations and business records. Client or partner records may be retained for longer where required by contract, accounting, audit or dispute needs.

7. Your rights

You may have rights to access, correct, delete, restrict or object to processing of your personal data, and to complain to the UK Information Commissioner's Office. Some rights depend on the lawful basis and context.

8. Contact

For privacy questions or rights requests, use the contact form or call 0330 127 9688.

Next move

Turn scattered marketing activity into an AI-era visibility system.

Request an AI visibility audit