Privacy policy.

Black Line Agency is a web design, marketing and AI automation agency founded by Bradley Hoxha and Shaun Padley, operating in the United Kingdom. For the purposes of UK data protection law we are the data controller for the personal information described in this policy.

Black Line Agency is a trading name of Bradley Hoxha and Shaun Padley, who trade together as a general partnership established in the United Kingdom. We are not a limited company, so there is no company registration number to give you. Our address for correspondence and for the service of documents is 16 Fern Close, Humberston, Grimsby, DN36 4ZX.

You can reach us at contact@blacklineagency.co.uk or on 07414 793258. If you want anything in this policy explained, ask — a plain answer is quicker than a complaint.

Only what you type into the enquiry form or the newsletter sign-up. Nothing on this website collects personal information about you in the background; the anonymous visit and click counts described under Cookies and tracking do not identify you.

From the enquiry form:

We use your enquiry to reply to you, to prepare a quote, and to have the conversation you started. That is the whole of it.

Our lawful basis is Article 6(1)(b) of the UK GDPR — taking steps at your request before entering into a contract — and, where you are enquiring on behalf of an organisation, Article 6(1)(f), our legitimate interest in responding to business enquiries. We do not rely on consent for this, which is why there is no tick-box: consent you cannot meaningfully refuse and still get a reply would not be valid consent.

We will not add you to a mailing list off the back of an enquiry, and we will not send you marketing you did not ask for.

If you subscribe to our newsletter, we use your email address for one thing: sending you occasional notes from us. Our lawful basis is your consent (Article 6(1)(a) of the UK GDPR), which you give by ticking the box when you subscribe. You can withdraw it at any time — every email has an unsubscribe link, or you can simply ask us — and we will stop.

Your enquiry is delivered to our inbox by Resend, an email delivery provider, acting as our processor. It passes through their systems in order to reach us and is not used by them for anything else.

If you subscribe to the newsletter, Resend also stores your email address on our subscriber list and sends the newsletter on our behalf, again as our processor and for nothing else.

This website is hosted by Vercel. Like any web host, their infrastructure processes the request your browser makes in order to serve the page.

If you press "Talk to our AI receptionist" on our AI automation page, your voice and the conversation are processed by our voice AI provider, acting as our processor, to run that call. We set the demo to keep the recording and transcript for no more than 30 days, which we use only to check and improve the demo. Nothing is sent until you press the button and allow your microphone.

If you book a call on our booking page, the calendar on that page is provided by Cal.com, acting as our processor. What you enter there (your name, email and anything you add about the call) goes to Cal.com to make and confirm the booking, and to us so we can hold the call. Cal.com's own privacy policy is at cal.com/privacy.

We do not sell personal information, we do not share it with advertisers, and we do not trade it. Nobody else receives it unless the law requires us to hand it over.

The chat assistant on this website is an AI. When you send it a message, the conversation so far is sent to Anthropic, the provider of the AI model, acting as our processor, so it can write the reply. Nothing is sent until you send a message.

We don't keep a copy of the conversation and it isn't linked to you: it lives in your browser tab and is gone when you close it. Anthropic handles it under its commercial terms for businesses using its API; its privacy information is at anthropic.com/legal/privacy.

Our lawful basis is Article 6(1)(f) of the UK GDPR, our legitimate interest in answering questions about our services. Please don't type sensitive personal information into the chat.

If you press "Send this to Brad & Shaun", what you enter there (your name, email or mobile, and your message) and, if you leave the box ticked, the conversation are sent to our inbox as an enquiry, and handled exactly like one: see above for who sees it and how long we keep it.

The providers above may process data outside the United Kingdom, including in the United States. Where that happens, transfers are made under the safeguards those providers put in place — such as the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework.

Enquiries that do not lead to work are deleted within 12 months. Where we go on to work together, we keep the correspondence for as long as the relationship lasts and for six years afterwards, which is the period UK tax and contract law expects records to be available for.

Ask us to delete an enquiry sooner and we will, unless we are required to keep it.

Newsletter addresses are kept until you unsubscribe. After that we keep only a record that you unsubscribed, so we never email you again by mistake.

This website sets no cookies. It stores nothing in your browser's local storage or session storage. It carries no advertising pixels, no session recording, no heatmaps and, apart from the booking calendar described below, no embedded third-party content.

We do measure traffic, using Vercel Web Analytics. It records the page visited, the referring site, and general information about your device such as browser, operating system and country. It also counts a few actions, such as pressing Book a call, choosing a price, or sending the enquiry form (counted only, never what you wrote), so we can see which pages help people get in touch. It sets no cookie, stores nothing on your device, and does not follow you to other websites or build a profile of you. Because nothing is stored on or read from your device, this needs no consent banner — but you are entitled to know it is there, which is why it is written here rather than buried.

Every asset — including the typefaces — is served from this site's own domain, so loading a page (other than the booking page) does not tell any other company that you visited. That is a deliberate design decision, and it is the reason you were not shown a cookie banner: under the Privacy and Electronic Communications Regulations, consent is needed to store or read information on your device, and this site does neither.

There are two exceptions. The voice demo on our AI automation page connects to our voice AI provider, but only after you press the button and allow your microphone; until then nothing from that provider is loaded. And our booking page (/book) loads Cal.com's calendar only when you press “Show available times”; until then nothing from Cal.com is loaded. Once it loads, Cal.com and its security provider may set a cookie in that calendar, strictly to run it safely. No other page loads anything from Cal.com.

The website assistant works the same way: it stores nothing on your device, and nothing goes to Anthropic until you send a message.

If that ever changes, this section changes with it and you will be asked before anything non-essential loads.

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to our processing, or ask for it in a portable format. There is no charge and we will respond within one month.

Email contact@blacklineagency.co.uk and say what you want. We would rather sort it out directly, but if you are unhappy with how we have handled your information you have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

We are registered with the Information Commissioner's Office under reference ZC251044.

Enquiries reach us over an encrypted connection and are held in a mailbox protected by two-factor authentication. No transmission over the internet can be promised to be perfectly secure, and we will not pretend otherwise — but we do not keep personal information anywhere it does not need to be, which is the most effective protection there is.

This is a business-to-business website and is not directed at children. We do not knowingly collect information about anyone under 18.

We update this policy when what we do changes, not on a schedule. The date at the top of this page is the date of the current version.