Privacy policy
Last updated: 12-08-2026
1. Who we are
Afundi Digital Marketing Limited ("Afundi", "we", "us") is a branding, web design and development company registered in the Isle of Man, company number 131857C, with its registered office at 3 Stable Cottages, The Nunnery, Old Castletown Road, Douglas, IM2 1QB, Isle of Man.
This policy explains what personal data we collect about you when you visit our website or get in touch, why we collect it, and what rights you have. It covers our own use of your data — where we handle personal data on behalf of a client, that client decides how it is used and their own privacy policy applies.
We are the data controller for the personal data described in this policy. We are registered with the Isle of Man Information Commissioner under registration number R505562.
Contact: hello@afundi.im, or write to us at the address above.
2. The law that applies
We are established in the Isle of Man and subject to the Data Protection Act 2018 (Isle of Man) and the applied GDPR. The Isle of Man is recognised by the European Commission as providing an adequate level of protection for personal data.
3. What we collect
When you contact us or submit a form: your name, email address, telephone number, company name, and whatever you tell us in your message.
When you become a client: contact details for you and your colleagues, correspondence, project information, contract and billing details.
When you visit our website: your IP address, browser and device type, pages viewed, how you arrived at the site, and how you interact with pages. Some of this is collected through cookies and similar technologies — see section 7.
You don't have to give us any of this information. There's no legal requirement to, but if you don't, we may not be able to answer your enquiry or deliver the services you've asked for. Where information is needed to perform a contract with you, we'll make that clear at the time.
We do not deliberately collect special category data (such as health or ethnicity), and we do not ask for it. We don't knowingly collect data from children.
4. Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry | To answer your question and discuss whether we can help | Legitimate interests — you contacted us and expect a reply |
| Provide our services | To deliver the work you've engaged us for | Performance of a contract |
| Invoicing, accounting and record-keeping | To get paid and meet our tax and company law obligations | Legal obligation; performance of a contract |
| Understand how the website is used | To fix problems and improve the site | Consent, given through the cookie banner |
| Measure how our advertising performs | To see which campaigns work and spend our budget sensibly | Consent, given through the cookie banner |
| Keep the website and our systems secure | To detect and prevent misuse, and to keep the site available | Legitimate interests — protecting our systems and our clients' |
Where we rely on legitimate interests, we've considered whether our interest is fair to you, and you can object at any time — see section 9.
Our analytics and advertising tools analyse how visitors behave on the site, which may amount to profiling under data protection law. We don't use it to make decisions about you that have legal or similarly significant effects, and we don't make decisions about you by automated means.
5. What we don't do
We don't sell your personal data, and we don't pass your contact details to anyone else so they can market to you. We don't use client data for anything other than delivering the work we've been engaged to do.
The one qualification: the analytics and advertising tools described in section 7 collect data through your browser, and those providers may use it for their own purposes as well as ours. That's why they're set only if you accept them.
6. Who else handles your data
We use a small number of service providers to run our business. Most of them process personal data on our behalf, under contract and only on our instructions.
The exception is the analytics and advertising providers in section 7. They act partly on our behalf and partly for their own purposes, and their own privacy statements explain what they do with the data.
| Category of provider | What they do |
|---|---|
| Website hosting | Hosts and serves our website |
| Email, document and file storage | Our day-to-day business systems |
| Online forms | Enquiry and support forms |
| Website analytics and advertising measurement | Understanding and improving how the site performs |
| Accounting and bookkeeping software | Invoicing and financial records |
| Cloud hosting infrastructure | Hosting for services we operate for clients |
| Project management | Managing project work |
| Our accountants | Accounting and payroll |
Some of these providers are outside the Isle of Man, including in the United States. Where that's the case, we rely on an adequacy decision covering that country or provider, or on standard contractual clauses approved for the purpose, so your data keeps an equivalent level of protection.
We'll tell you the specific providers we use, and give you a copy of the safeguards we rely on for any transfer, if you ask — email hello@afundi.im.
We may also disclose personal data where we're required to by law, a court order or a regulator, or where we need to in order to establish or defend a legal claim. If our business were reorganised, sold or acquired, personal data could transfer as part of that — we'd tell you if that affected you.
7. Cookies
Our website uses cookies and similar technologies. Cookies that are strictly necessary for the site to work are set automatically. Everything else is set only if you accept it through our cookie banner.
The non-essential cookies we use fall into two categories:
- Analytics — to understand how visitors use the site so we can improve it. This includes Google Analytics, and Microsoft Clarity, which records page interactions such as heat maps and session replay.
- Advertising measurement — to understand how effective our advertising is. This includes Microsoft Advertising.
Google's and Microsoft's own privacy statements explain how they use the data collected through these tools.
A full list of the cookies we use, including their names, purposes and how long each one lasts, is available in our cookie banner.
If you accept, your choice is remembered for six months, after which we'll ask again. You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page, or by blocking or deleting cookies in your browser settings. Parts of the site may not work properly if you block necessary cookies.
8. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't become work | Up to 6 years, in line with our business records |
| Client records, contracts and correspondence | 6 years after the end of the engagement |
| Accounting and tax records | As required by law |
| Website analytics and advertising data | Held by the providers named in section 7 for the periods set within their tools; we don't keep separate copies. Cookie lifetimes are listed in our cookie banner |
Where we no longer need personal data, we delete it or remove the details that identify you.
9. Your rights
You have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — ask us to delete your data, where we have no continuing reason to hold it.
- Restriction — ask us to limit how we use your data while a concern is resolved.
- Portability — receive data you gave us in a machine-readable format, or have it sent to another provider.
- Object — object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent, withdraw it at any time. This doesn't affect anything we did before you withdrew it.
To exercise any of these, email hello@afundi.im. There is no charge. We'll respond within one month. If your request is complex we may need up to two further months, and we'll tell you if so.
We may ask you to confirm your identity before we release personal data, to make sure we're not disclosing it to the wrong person.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Isle of Man Information Commissioner at inforights.im, or to the data protection authority in your own country if you're in the UK or the EEA.
10. Keeping your data secure
We restrict access to personal data to those who need it, protect our systems and accounts with multi-factor authentication, encrypt data in transit, and keep our software patched. No system is completely secure, but we take our obligations here seriously and review our measures regularly.
11. Links to other sites
Our site links to other websites, including our clients' sites and our social media profiles. We're not responsible for their content or their privacy practices — please read their own policies.
12. Changes to this policy
We'll update this policy when our practices change. The date at the top shows when it was last revised. If we make a significant change we'll make that clear on this page.