Privacy Policy

Last updated: 22 July 2025

1. Introduction

Mystic Escape Digital Marketing ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mystic-escape.com or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, postal address)
• Company information (business name, industry, website)
• Communication preferences
• Information provided through contact forms or email correspondence

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and location data
• Browser type and version
• Operating system
• Referring website
• Pages viewed and time spent on our website
• Device information

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services
• To respond to your enquiries and communicate with you
• To send you marketing communications (with your consent)
• To improve our website and services
• To analyse website usage and trends
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications
• Contract: To perform our contractual obligations when providing services
• Legitimate Interest: For business operations, website improvement, and fraud prevention
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist us in operating our business
• When required by law or to respond to legal process
• To protect our rights, property, or safety
• In connection with a business transfer or acquisition

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Generally, we retain:

• Contact information for active clients for the duration of our business relationship
• Marketing data until you unsubscribe or withdraw consent
• Website analytics data for up to 24 months

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Supervisory Authority

You have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113