Privacy Policy
Last updated: 5 August 2026
1. Introduction
kekkaFirst ("we", "us", "our") is a UK-based digital marketing agency operating from Unit A1850, Siu Offices, 4-6 Greatorex Street, London, E1 5NF, UK We are the "data controller" of the personal data we collect through this website (kekkafirst.com) and in the course of providing our services.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are & How to Contact Us
Data controller: kekkaFirst
Address: Unit A1850, Siu Offices, 4-6 Greatorex Street, London, E1 5NF, UK
Email: hello@kekkafirst.com
Phone: +44 788 2759 738
If you have any questions about this policy or how we handle your data, please contact us using the details above.
3. What Personal Data We Collect
We collect personal data in a few different ways:
3.1 Information you give us directly
- Contact form submissions: name, email address, and any other details you choose to include in your message;
- Newsletter sign-ups: your email address, along with the timestamp and IP address of the submission, which we use for spam prevention and record-keeping;
- Client engagements: where we're engaged to provide services, we may collect business contact details, billing information, and access credentials to platforms you ask us to work in (for example, an advertising or analytics account).
3.2 Information collected automatically
This website does not currently set cookies or use cookie-based analytics or advertising tracking. If we introduce any such tools in future (for example, website analytics), we will update this policy and, where required, ask for your consent via a cookie banner before any non-essential cookies are set.
The website does load fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Loading a webpage that references these third-party domains means your browser makes a request to Google's servers, which may process your IP address as part of delivering the font files. This is governed by Google's own privacy policy, not ours.
Our web host's server logs may automatically record standard technical information (such as IP address, browser type, and pages visited) for security and diagnostic purposes, in line with our hosting provider's own policies.
4. How We Use Your Data
We use the personal data we collect to:
- Respond to enquiries submitted through our contact form;
- Send newsletter emails to subscribers who have signed up, and manage that subscription (including unsubscribes);
- Deliver, manage, and invoice for digital marketing services we've been engaged to provide;
- Maintain the security and proper functioning of our website;
- Comply with our legal and regulatory obligations, such as tax and accounting record-keeping.
5. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
- Consent — for example, when you sign up to our newsletter. You can withdraw consent at any time by unsubscribing.
- Legitimate interests — for example, responding to a contact form enquiry you've initiated, or keeping basic records of website security logs.
- Contract — where processing is necessary to deliver services you've engaged us for, such as using account access or billing details you've provided.
- Legal obligation — for example, retaining invoices and financial records as required by UK tax law.
6. Cookies
As noted in Section 3.2, this website does not currently use cookies for analytics, advertising, or tracking purposes. If this changes, we will update this section and implement a cookie consent mechanism as required by UK law.
7. Sharing Your Data
We do not sell your personal data. We may share personal data with:
- Service providers who help us run our business and deliver services on our behalf — for example, our web hosting provider (Hostinger), or third-party advertising and analytics platforms (such as Google, Meta, TikTok, or LinkedIn) where we manage campaigns on a client's behalf, using the client's own accounts wherever possible;
- Professional advisers, such as our accountant, where necessary for our legal and financial obligations;
- Authorities, where required by law, regulation, or a valid legal request.
Where a third-party service we use is based outside the UK (for example, US-based platforms), any transfer of personal data is made subject to appropriate safeguards, such as the UK's International Data Transfer Agreement or an adequacy decision, as required under UK GDPR.
8. Data Retention
We keep personal data only for as long as necessary for the purposes it was collected for:
- Contact form enquiries are retained for as long as reasonably needed to respond to and follow up on your enquiry, then deleted or anonymised;
- Newsletter subscriber data is retained until you unsubscribe or request deletion;
- Client and financial records are retained for the period required by UK tax and accounting law (generally at least six years).
9. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse — for example, restricting direct access to newsletter subscriber data on our server and using secure, reputable hosting infrastructure. No method of transmission or storage is 100% secure, but we work to keep the risk as low as reasonably possible.
10. Your Rights
Under UK GDPR, you have the right to:
- Request access to the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data, where applicable;
- Request that we restrict or object to certain processing;
- Request a copy of your data in a portable format, where applicable;
- Withdraw consent at any time, where processing is based on consent (such as newsletter emails);
- Lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe we have not handled your data properly.
To exercise any of these rights, please contact us using the details in Section 2. We'll respond within the timeframes required by law.
11. Children's Privacy
Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:
- Email: hello@kekkafirst.com
- Phone: +44 788 2759 738
- Post: Unit A1850, Siu Offices, 4-6 Greatorex Street, London, E1 5NF, UK.