Privacy Policy

Who We Are We are a digital agency called It Just So Happens Ltd.

Registered office address: 71–75 Shelton Street, London, Greater London, United Kingdom, WC2H 9JQ
Company number: 13127686
Website: https://itjustsohappens.agency

What Personal Data We Collect and Why

Contact Forms If you use our contact forms, we will collect your name, email address, and any message you submit. This information is used solely to respond to your enquiry.

If you leave a comment, you may opt in to saving your name, email, and website in cookies for convenience. These last for one year.
Visiting our login page sets a temporary cookie to test your browser’s cookie support. It contains no personal data and is deleted when you close your browser.
Login cookies last for two days (or two weeks if “Remember Me” is selected), and screen options cookies last for a year. Logging out removes login cookies.
Editing or publishing an article sets a cookie with the post ID. This expires after one day and stores no personal data.

Embedded Content from Other Websites Articles may include embedded content (e.g. videos, images, or articles). These behave as if you visited the source website directly. Those sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction.

Who We Share Your Data With We do not sell or rent your personal data. Your data may be processed by our partners for purposes such as spam detection, analytics, and improving website performance.

Third-Party Services We Use We use a number of third-party tools and platforms to help us deliver our services, manage performance, and ensure security:

Google Analytics (analytics and user behaviour tracking)
Google Ads (advertising management)
Google Tag Manager (tracking and script management)
Google Search Console (site health and performance)
Meta Business Suite (social media management and advertising)
Microsoft Clarity (session replay and behavioural insights)
ManyChat (chatbot and automation platform)
SuiteDash (client portal and project management)

These services may collect personal data and use cookies. Each service operates under its own privacy policy. We only engage providers who are GDPR-compliant and provide sufficient guarantees of data protection.

Data Retention

Comments and metadata are stored indefinitely to recognise and approve future comments automatically.
Registered users (if applicable) can view, edit, or delete their personal information (excluding usernames). Admins can also access and update this information.

Hosting and Server Location Our website and client portal are hosted on secure servers located in the European Union. These servers are managed by GDPR-compliant hosting providers that follow industry best practices for data security and redundancy.

Your Rights Over Your Data You have the right to:

Request access to the personal data we hold about you
Request correction or deletion of your data
Withdraw consent at any time (where applicable)
Object to or restrict processing of your data
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, please email: alice@itjustsohappens.agency

Legal Basis for Processing We process personal data under the following legal bases:

Consent
Contract performance
Legal obligation
Legitimate interest

International Transfers Some of our third-party providers may process your data outside the UK or EU. We only work with providers that implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure data protection.

Children’s Data Our services are not directed at children under 16, and we do not knowingly collect personal data from minors.

Where We Send Your Data Comments may be checked through automated spam detection services.

Your Contact Information You may contact us at alice@itjustsohappens.agency with any questions regarding your data.

Data Protection Lead We do not have a formal Data Protection Officer. All data-related queries should be directed to: alice@itjustsohappens.agency

How We Protect Your Data We use industry-standard security practices and restrict access to your personal data to authorised personnel only. This includes encrypted data transmission, strong password enforcement, role-based access control, and regular security audits.

Data Breach Procedures We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach, affected users will be notified within 72 hours, where required by law.

Automated Decision-Making and Profiling We do not perform any fully automated decision-making or profiling that significantly affects individuals.

Regulatory Disclosures We comply with all relevant privacy regulations, including the UK GDPR, the Data Protection Act 2018, and applicable European data protection laws.