Effective Date: January 2025
Last Updated: January 2025
This Privacy Policy explains how Decibel Peak (“we,” “us,” “our”) collects, uses, discloses, and protects personal data obtained through https://decibelpeak.com.
This Policy applies to individuals located in the United Kingdom and complies with:
- UK GDPR
- Privacy and Electronic Communications Regulations (PECR)
- Guidance issued by the Information Commissioner’s Office (ICO)
1. DATA CONTROLLER
The data controller responsible for your personal data is:
Decibel Peak
Montreal, Quebec, Canada
Email: info@decibelpeak.com
Website: https://decibelpeak.com
(We do not publish residential addresses for privacy and security.)
2. PERSONAL DATA WE COLLECT
We only collect personal data necessary for legitimate business purposes.
2.1 Identity & Contact Data
- First and last name
- Business name (if applicable)
- Email address
- Phone number
2.2 Billing & Transaction Data
- Billing name
- Email address
- Phone number
- Transaction records
⚠️ Payment data is processed securely by third-party processors (e.g., Stripe). We do not store full credit card numbers.
2.3 Client & Project Data
- Project communications
- Creative assets and files
- Strategy notes and deliverables
- Business and brand information
2.4 Marketing & Newsletter Data
- Name
- Email address
- Subscription status
2.5 Website & Technical Data
- IP address (anonymized where possible)
- Browser type
- Device type
- Pages visited
- Referrer URLs
3. PURPOSES & LEGAL BASES FOR PROCESSING
We process personal data only where a lawful basis exists under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries | Legitimate interest |
| Providing services & consulting | Contract |
| Payment processing | Contract / Legal obligation |
| Newsletter subscriptions | Consent |
| Website analytics | Consent |
| Marketing communications | Consent |
| Security & fraud prevention | Legitimate interest |
| Legal & accounting compliance | Legal obligation |
4. CONSENT
Where required, consent is obtained explicitly through:
- Website forms
- Cookie banners
- Newsletter sign-ups
- Purchase checkouts
You may withdraw your consent at any time.
5. DATA DISCLOSURE
We do not sell personal data.
We may share limited personal data only with:
- Payment processors (e.g., Stripe)
- Email marketing platforms
- Analytics providers
- Legal and accounting professionals
- Authorities where required by law
All third-party processors operate under UK-GDPR-compliant Data Processing Agreements (DPAs).
6. INTERNATIONAL DATA TRANSFERS
As Decibel Peak is based in Canada, personal data may be transferred outside the UK (including to Canada, the EU, and the United States). Safeguards include:
- UK International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs)
- Legal adequacy frameworks where applicable
7. COOKIES & TRACKING
We use cookies and similar technologies as described in our:
- Cookie Policy (United Kingdom)
- Related regional Cookie Policies
Analytics tools such as Google Analytics may be used with IP anonymization where possible.
8. DATA SECURITY
We apply appropriate technical and organisational measures to protect personal data against:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Disclosure
Access is restricted to authorised personnel only.
9. DATA RETENTION
We retain personal data only:
- As long as necessary for the stated purposes
- As required by contracts
- As required by legal or tax obligations
Data is securely deleted or anonymised when no longer required.
10. YOUR RIGHTS UNDER UK GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
11. AUTOMATED PROCESSING & AI TOOLS
Where AI-assisted tools are used:
- Outputs are provided for assistance only
- No fully automated decisions with legal or significant effects are made without human oversight
- You may request information about any automated processing involving your data
12. CHILDREN’S DATA
Our services are not directed at individuals under 18.
We do not knowingly collect personal data from minors.
13. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites. We are not responsible for their privacy practices.
14. POLICY UPDATES
We may update this Privacy Policy periodically. Updates take effect upon publication. Continued use of the website constitutes acceptance.
15. CONTACT FOR UK DATA SUBJECTS
For all privacy-related matters:
Decibel Peak – Data Controller
Montreal, Quebec, Canada
Email: info@decibelpeak.com
Website: https://decibelpeak.com