Privacy and cookie policy

Last updated: 2 October 2026

Who we are

BAW Creative Ltd ('BAW', 'we', 'us', 'our') is an eCommerce growth agency. We are the controller of the personal information we collect through this website and when you contact us. This means we decide how and why it is used.

Company number: 14246226 (registered in England and Wales)
Registered address: Mitchell's Industrial Park, Bradberry Balk Ln, Pond Hill, Wombwell, Barnsley S73 8HR
Email: hello@bawcreative.co.uk
ICO registration number: ZB647699

The information we collect

Information you give us

• Contact form: your first name, last name, email address, phone number, the service you are interested in, your business type and your message.
• Booking a call: your name, email address and any notes you add when you book a call through our Google Calendar booking page.
• Email sign-ups: your email address and any other details you choose to share, such as your name, when you sign up to our emails.
• Emails and calls: anything you share with us by email, by phone or on a video call.

Information we collect automatically

When you visit our website, we and our partners collect information about your device and how you use the site. This includes your IP address, browser and device type, the pages you view, how long you stay, how you found us (for example a Google search or one of our ads) and actions such as submitting a form. Microsoft Clarity also records how you scroll, click and move around our pages, so we can see what works and what needs fixing. We collect most of this through cookies and similar technologies, and only with your consent where the law requires it. The cookies section below explains more.

Information from third parties

Advertising and analytics partners such as Google, Meta and LinkedIn send us reports on how our ads and website perform, for example how many people clicked an ad and then got in touch. These reports are usually grouped together and don't identify you. When you contact us about working together, we may also look at publicly available business information, such as your company website or LinkedIn profile.

How we use your information

UK data protection law says we must have a lawful basis for using your personal information. Here is what we use it for, and the lawful basis we rely on each time.

• Replying to your enquiry and talking to you about our services. Lawful basis: legitimate interests (responding to people who get in touch) or, if you ask us for a proposal, taking steps at your request before we agree a contract.
• Delivering our services if you become a client, and managing our relationship with you. Lawful basis: contract.
• Sending marketing emails, such as eCommerce tips, news and offers. Lawful basis: consent. If we have worked with you or spoken to you about our services, we may also send you relevant emails based on our legitimate interests, where the law allows. You can unsubscribe at any time using the link in every email.
• Understanding how people use our website so we can improve it, using Google Analytics and Microsoft Clarity. Lawful basis: consent, which you give through our cookie banner.
• Measuring and targeting our ads on Google, Facebook, Instagram and LinkedIn. Lawful basis: consent, which you give through our cookie banner.
• Keeping our website secure and stopping spam and misuse. Lawful basis: legitimate interests.
• Meeting our legal obligations, such as keeping financial records for HMRC. Lawful basis: legal obligation.

We do not sell your personal information. We do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

Who we share your information with

We use trusted third-party services to run our website and our business. Some process your information on our behalf. Others, such as Google, Meta and LinkedIn, also act as independent controllers and use the information under their own privacy policies.

• Webflow: hosts our website and processes contact form submissions.
• Google: Google Analytics, Google Ads and the Google tag for website analytics and ad measurement, plus Google Workspace for email and call bookings.
• Microsoft: Microsoft Clarity for heatmaps and session recordings that show how visitors use our website.
• Meta: the Meta Pixel for measuring and targeting our Facebook and Instagram ads.
• LinkedIn: the LinkedIn Insight Tag for measuring and targeting our LinkedIn ads.
• Klaviyo: email marketing and sign-up forms.
• CookieYes: our cookie consent tool, which shows the cookie banner and keeps a record of your cookie choices.
• Professional advisers such as our accountants, lawyers and insurers, where needed.
• Regulators, law enforcement and other authorities, where the law requires it.

If our business is sold or merges with another business, your information may pass to the new owner, who must use it in line with this policy.

International transfers

Some of these providers are based in, or store data in, the United States and other countries outside the UK. When your information is transferred outside the UK, we rely on a recognised safeguard, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep your information

• Enquiries that don't lead to work: up to 2 years after our last contact.
• Client records, contracts and invoices: 6 years after our work together ends, to meet legal and tax requirements.
• Marketing emails: until you unsubscribe. After that, we keep your email address on a suppression list so we don't email you again.
• Website analytics: up to 14 months in Google Analytics. Microsoft Clarity keeps session recordings for up to 30 days and other data for up to 13 months.
• Cookies: for the periods shown in the cookie lists below.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to limit how we use your information
• object to us using your information, including for direct marketing
• ask us to transfer your information to you or to another organisation
• withdraw your consent at any time, where we rely on consent. This won't affect anything we did before you withdrew it.

To use any of these rights, email hello@bawcreative.co.uk. We will reply within one month and won't usually charge a fee. We may ask you to confirm your identity first.

How to complain

If you're unhappy with how we've handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information, such as encrypted (HTTPS) connections and access controls on the tools we use. Only people who need your information to do their job can see it. No website or online service is completely secure, but we work hard to keep your information safe.

Children

Our website and services are for businesses and are not aimed at anyone under 18. We do not knowingly collect personal information from children.

Links to other websites

Our website links to other websites, such as our social media pages. We are not responsible for how those websites handle your information, so please read their privacy policies.

Cookies

Cookies are small text files that a website saves on your device when you visit. They help the site work, remember your choices and show how people use it. We also use similar technologies, such as tracking pixels and tags, which work in the same way. In this policy we call them all cookies.

Some cookies are set by us (first-party cookies). Others are set by our partners, such as Google, Microsoft, Meta, LinkedIn and Klaviyo (third-party cookies). We use the Google tag and Google Tag Manager to load Google Analytics and Google Ads on our website. The cookies these tools set are listed below.

Your cookie choices

When you first visit our website, a banner asks whether you accept analytics and marketing cookies. We only set these cookies if you say yes. Strictly necessary cookies don't need your consent, because the website can't work properly without them.

You can change your mind at any time by reopening your cookie settings from the Privacy & Cookies Settings link in the footer of any page. You can also block or delete cookies in your browser settings, opt out of Google Analytics on all websites with the Google Analytics opt-out add-on, and manage your ad preferences in your Google, Facebook, Instagram and LinkedIn account settings. Blocking all cookies may stop parts of our website working.

Strictly necessary cookies

These keep the website working and remember your cookie choices. They can't be switched off.

• cookieyes-consent: set by CookieYes, our cookie consent tool, to remember your cookie choices. Expires after 1 year.

Analytics cookies

These help us understand how visitors use our website, such as which pages are popular and where people leave. We only set them with your consent.

Google Analytics

• _ga: tells visitors apart so we can count them. Expires after 2 years.
• _ga_ (plus our measurement ID): stores the state of your visit. Expires after 2 years.

Microsoft Clarity

• _clck: keeps the same Clarity ID for you across visits to our website. Expires after 1 year.
• _clsk: links the pages you view into a single session recording. Expires after 1 day.
• CLID: records the first time Clarity saw your browser on any website that uses Clarity. Expires after 1 year.
• MUID: identifies your browser across Microsoft websites. Microsoft also uses it for advertising and site analytics. Expires after 1 year.
• ANONCHK, MR and SM: Microsoft cookies that manage and sync the MUID cookie across Microsoft domains. Expire after up to 1 year.

Marketing cookies

These measure how well our ads work and let us show relevant ads on Google, Facebook, Instagram and LinkedIn to people who have visited our website. The companies that set them may also use them to build a profile of your interests. We only set them with your consent.

Google Ads and the Google tag

• _gcl_au: stores ad click information so Google Ads can measure conversions. Expires after 90 days.
• _gcl_aw: stores the click ID when you arrive from one of our Google ads. Expires after 90 days.
• IDE: set by Google on doubleclick.net to show and measure ads across the web. Expires after 13 months.
• test_cookie: set by Google on doubleclick.net to check whether your browser accepts cookies. Expires after 15 minutes.

Meta Pixel (Facebook and Instagram)

• _fbp: identifies your browser so Meta can measure and target our ads. Expires after 90 days.
• _fbc: stores the click ID when you arrive from one of our Facebook or Instagram ads. Expires after 90 days.
• fr: set by Meta on facebook.com to deliver ads, measure them and make them more relevant. Expires after 90 days.

LinkedIn Insight Tag

• li_sugr: a browser identifier used to match visitors who aren't logged in to LinkedIn. Expires after 90 days.
• bcookie: a LinkedIn browser ID. Expires after 1 year.
• lidc: helps LinkedIn route traffic to the right data centre. Expires after 24 hours.
• UserMatchHistory: syncs IDs so LinkedIn can show our ads to the right people. Expires after 30 days.
• AnalyticsSyncHistory: records when your browser last synced with LinkedIn for analytics. Expires after 30 days.
• li_fat_id: tracks clicks on our LinkedIn ads so we can measure conversions. Expires after 30 days.

Klaviyo

• __kla_id: recognises you if you've signed up to our emails or clicked a link in one, so we can connect your website activity to your email profile and send you more relevant emails. Expires after up to 2 years, depending on your browser.

Cookie names and expiry times are set by each provider and can change. To find out more, read the privacy information from Google, Microsoft, Meta, LinkedIn, Klaviyo and Webflow.

Changes to this policy

We may update this policy from time to time, for example when we start using a new tool. We will post any changes on this page and update the date at the top. If we make significant changes, we will let you know.

Contact us

If you have any questions about this policy or your information, email hello@bawcreative.co.uk or write to BAW Creative Ltd, Mitchell's Industrial Park, Bradberry Balk Ln, Pond Hill, Wombwell, Barnsley S73 8HR.