Legal

Privacy Policy

Last updated 1 January 2026

Sonos Digital is committed to protecting the personal information we handle. This policy explains what we collect, why we collect it, who we share it with and the choices you have.

1. Who we are

Sonos Digital is a performance marketing studio providing lead generation services to the insurance industry. We act as a controller for the information we collect through this website and our own business operations, and as a processor for personal data we handle on behalf of client campaigns.

For any privacy question, write to maria@sonos.digital.

2. Information we collect

  • Information you give us. Your name, email address and the content of the message you send through our contact form or by email, plus anything you share with us during an engagement.
  • Campaign and performance data. Aggregated advertising metrics, lead delivery records, verification outcomes and billing history.
  • Technical data. IP address, browser and device type, referring page and general usage information collected automatically when you visit the site.

We do not knowingly collect information from children, and we do not ask for sensitive categories of personal data through this website.

3. How we use your information

  • To respond to your enquiry and to communicate with you about our services.
  • To deliver, verify, optimise and report on lead generation campaigns.
  • To administer accounts, issue invoices and resolve billing disputes.
  • To keep the website secure, prevent fraud and diagnose technical problems.
  • To meet our legal, regulatory and record-keeping obligations.

We do not sell personal data, and we do not share it for unrelated marketing.

4. Legal bases for processing

Where data protection law requires a legal basis, we rely on the performance of a contract with you, our legitimate interest in operating and improving our services and communicating with prospective clients, compliance with legal obligations, and your consent where consent is the appropriate basis. Where we rely on consent, you can withdraw it at any time.

5. Who we share information with

We share personal data with service providers who help us run the business — hosting and database infrastructure, email delivery, analytics and telephony — each under contractual terms that limit their use of the data to providing the service to us.

We may also disclose information where required by law, regulation or valid legal process, or to protect our rights, property or safety and those of others. If our business is reorganised or transferred, information may pass to the successor entity under the same protections.

6. International transfers

Our providers may process data in countries other than your own. Where personal data leaves its country of origin, we rely on recognised safeguards such as standard contractual clauses or an adequacy decision to keep the level of protection consistent.

7. Cookies and analytics

This website uses only the cookies and similar technologies needed to make pages work correctly and to understand aggregate traffic patterns. We do not use advertising cookies on this site. You can block or delete cookies in your browser settings, although some parts of the site may then behave differently.

8. Retention

We keep personal data only as long as needed for the purpose it was collected for. Contact-form messages are retained for up to 24 months from the last exchange unless they become part of a client relationship. Records tied to invoicing, tax or regulatory obligations are retained for the period the law requires.

9. Security

Personal data is stored on managed infrastructure with encryption in transit and at rest, role-based access controls and restricted administrative access. No system can be guaranteed completely secure, but we review our controls regularly and will notify you and any relevant regulator of a qualifying breach without undue delay.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to request its deletion, to restrict or object to certain processing, to receive a portable copy, and to withdraw consent. You also have the right to complain to your local data protection authority.

To exercise any of these rights, email maria@sonos.digital. We respond to verified requests within 30 days and will tell you if we need more time.

11. Changes to this policy

We may update this policy as our services or legal obligations change. The current version is always published here with its effective date, and significant changes will be highlighted on this page.