This policy refers to the privacy policy of Overwrite Agency, a brand of Thalassa Digital Ltd, whose details are as follows:
Registered Address: Thalassa Digital Ltd, 1623 Warwick Road, Knowle, Solihull, West Midlands, B93 9LF. Company No: 12331184. VAT No: GB352966960.
Overwrite Agency (also referred to as ‘Overwrite’, ‘we’ or ‘us’) is committed to protecting your privacy. We will only use the information that we collect about you lawfully, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025 (DUAA), which amends and updates each of these.
Our Response to Recent Changes in the Law
The UK’s data protection framework changed significantly through the Data (Use and Access) Act 2025 (DUAA), with the main changes coming into force on 5 February 2026. This policy has been updated to reflect those changes, and we have made the following changes to how we operate as a result:
We now offer a formal complaints process for anyone unhappy with how we have handled their personal data, described below, in line with the new statutory requirement that came into effect on 19 June 2026.
Where we use cookies solely for statistical or analytics purposes, we no longer require your consent to do so, but we will always offer you a free and simple way to opt out, as required under the updated rules.
We keep this policy under regular review to reflect any future changes to the law.
Overview
This privacy policy statement applies to the following:
Personal information we collect through our website.
Personal information we collect about you in the course of doing business with you, such as when you engage with us as a customer, potential customer, supplier, service provider, professional adviser, consultant or other third party in relation to the provision of our services and the operation of our business generally.
Collection Of Data
Information You Voluntarily Provide To Us Through Our Website
This is information about you that you give us by filling in forms on https://overwrite.agency (our site). It includes information you provide when you register to our mailing list, register to use our site, search for a service, request information, participate in discussion boards or other social media functions on our site, and when you report a problem with our site. The information you give us may include your name, address, email address, phone number, details of your business activities and social media account handles.
You can choose not to provide this information by not entering it when prompted to do so. If you do not provide us with some or all of the requested information we may not be able to provide the requested information or service to you.
Anonymous Website Usage Data
When you access and use the website, our technology and tools may automatically collect and record certain data (which does not identify you as an individual) about your use of the website, such as your IP address, browser type, the make and model of the device used to view the website, unique device identifiers, the referring web page, pages visited, search terms and other information relating to your use of the website, browser or device. We also use various tracking technologies (such as cookies, clear GIFs, and/or pixel tags) to collect data about your use of and access to the website. Cookies are small bits of information that may be placed on your computer by websites you visit, applications you use, or advertisements you view. Cookies alone tell us nothing about who you are. Pixel tags generate a generic notice of a visit to the website. Pixel tags are used in conjunction with cookies to anonymously track the activity on the website by a particular browser on a particular site.
Third-Party Automatic Data Collection
Some embedded content on the website may be served by third-party content providers. Please note that these companies may also use cookies, pixels, tags or other similar technologies to collect data about you, both on the website and throughout the Internet. Data collection and use by those third parties is subject to the privacy policies of those third parties.
Information Customers And Potential Customers Provide To Us
You may choose to provide personal information when engaging in or conducting business with us. The types of information we may collect include names, email addresses, postal addresses, contact details, job titles, transactional information, financial/billing information, account information, correspondence and any other information you may choose to provide.
Other Information We Collect In The Course Of Operating Our Business
We also collect information from our suppliers, service providers, agents, consultants, business partners, professional advisors and other third parties for the purpose of managing and operating our business. For example, we will collect business contact information, financial information and other information necessary to engage third parties and to evaluate their performance.
Information We Receive From Other Sources
This is information we receive about you from third parties. We work closely with third parties (including, for example, business partners, advertising networks, analytics providers, search information providers, credit reference agencies). We will notify you if and when we receive information about you from them and the purposes for which we intend to use that information.
Our “Do Not Track” (DNT) Policy
Some web browsers have “do not track” features that allow you to tell websites not to track you. We do not currently respond to those signals or similar mechanisms transmitted by web browsers.
Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
What Is A Cookie?
A “cookie” is a piece of information that is stored on your computer’s hard drive and which records how you move your way around a website so that when you revisit that website, it can present tailored options based on the information stored about your last visit. Cookies are used by nearly all websites and do not harm your system.
How Do We Use Cookies?
We use cookies to track your use of our website. This enables us to understand how you use the site and helps us to develop and improve our website as well as our products and services.
Cookies are either:
Session cookies: only stored on your computer during your web session and automatically deleted when you close your browser.
Persistent cookies: stored as a file on your computer and remain there when you close your web browser, read again by the website that created them when you visit again. We use persistent cookies for Google Analytics.
Cookie Categories and Consent
Under updated UK rules (following the Data (Use and Access) Act 2025), some categories of cookie no longer require your consent, provided they are used solely for that stated purpose. We still always give you a free and simple way to opt out of these, even where consent is not legally required.
Strictly necessary cookies: essential for the website to function, such as when buying a product or service. These cannot be turned off.
Statistical (analytics) cookies: used solely to understand how visitors use our site in aggregate, so we can improve it. Where used solely for this purpose, these do not require consent under current rules, but you can opt out at any time through our cookie settings or your browser.
Appearance/preference cookies: remember choices you make, such as language or display preferences, to improve your experience. These do not require consent where used solely for this purpose, but you can opt out at any time.
Functionality and marketing cookies: any cookies used for purposes beyond the above, including advertising or cross-site tracking, still require your consent, which you can give or withdraw through our cookie banner.
Note. Sharing tools such as Facebook, Twitter, Instagram, Pinterest, and other social networks feature on this site; these third-party websites may set a cookie if you are logged in to their service. Please refer to their own cookie policies.
Note. Should this website contain embedded YouTube content, a cookie may be set upon playing these videos. Google’s privacy policy can be found here: https://policies.google.com/privacy
How Can You Control Cookies?
You can accept, reject, or opt out of cookies at any time through our cookie settings tool, or by amending your web browser controls. Because they’re important, our websites and services might not work as intended, and in some cases might not work at all, if you decide to reject strictly necessary cookies.
List Of Cookies On This Site
Cookies Setting – Lets us know you’ve seen our cookie message and your preferences. Stored for 12 months.
WordPress – Tells us if you are logged in to our site, or if you have visited before. Stored for 12 months.
Google – Used to gather website statistics and support site functionality. Stored for 12 months.
Stripe – Used for credit card payments on our site, to remember who you are and enable payment processing without storing card details on our servers. Stored for 12 months.
Uses Made Of The Information
We use information held about you in the following ways:
to carry out our obligations arising from any contracts or agreements entered into between you and us and to provide you with the information and services you request;
to provide you with information about our own products, services, and updates relevant to services you already use;
to process and complete business transactions and send related information, including transaction confirmation and invoices;
to notify you about changes to our service;
to ensure that content from our site is presented in the most effective manner for you and your device.
If we are not able to process your personal data, whether because you do not consent, you withdraw or limit consent, or for any other reason, then we will not be able to achieve the purposes listed above.
Note. Regarding payments for our services, we use PayPal, Stripe, Wise, or direct bank transfer, and manage our accounting through QuickBooks. Overwrite Agency does not store any of your card or banking details on our own systems. Please refer to the relevant privacy policies of these providers: Stripe (https://stripe.com/gb/privacy), PayPal (https://www.paypal.com/uk/webapps/mpp/ua/privacy-full), Wise (https://wise.com/gb/legal/privacy-policy), and Intuit QuickBooks (https://www.intuit.com/privacy/statement/).
How We Communicate With You
We send two broad types of communication:
Operational communications, such as invoices, service updates, renewal notices, and security notices relating to your account. These are a necessary part of providing our services and cannot be opted out of while you remain an active client.
Service-related and informational communications, such as tips, general updates, or information about our own products and services that relate to services you already use with us. If you are an existing client, we may send you these on the basis that you had the opportunity to decline them when you engaged our services, and every such communication includes a simple way to opt out at any time. You can also let us know your preferences at any point by contacting [email protected].
From time to time, we may also include recommendations for third-party products or services that we believe may be relevant to you, including through referral partnerships. These will always be clearly identified as third-party recommendations, and the same opt-out applies.
If you are not yet a client and sign up to our website mailing list, we will only send you marketing communications where you have given us your explicit consent to do so via the sign-up form.
You can unsubscribe from any marketing or informational communication at any time by clicking the link in the footer of the email, or by emailing [email protected].
Disclosure Of Your Information
We do not sell your personal information to any third parties. We may share your personal information with third parties as follows:
to carry out our obligations arising from any contracts or agreements entered into between you and us, and to provide you with the information and services you request;
with selected other parties, including business partners, suppliers and subcontractors, for the performance of any contract we enter into with them or you;
with analytics and search engine providers that assist us in improving and optimising our site;
with credit reference agencies, for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
We will also disclose your personal information to third parties:
in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
if Overwrite Agency (or Thalassa Digital Ltd) or substantially all of its assets are acquired by a third party, in which case personal data held about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data to comply with any legal obligation, to enforce our terms of use and other agreements, or to protect the rights, property, or safety of Overwrite Agency, our customers, or others.
International Data Transfers
Some of the third-party services we use to run our business are based outside the UK, including in the United States. This includes providers such as Stripe, PayPal, Wise, QuickBooks (Intuit), Postmark, and Klaviyo.
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as the provider’s participation in the UK Extension to the EU-US Data Privacy Framework, Standard Contractual Clauses approved for UK use (the UK International Data Transfer Agreement), or an equivalent recognised safeguard. Many of our providers also publish their own GDPR and UK data protection commitments; for example, Postmark’s approach is set out at https://postmarkapp.com/eu-privacy.
Personal data relating to UK and EU based clients and their customers is, where possible, stored and processed on servers based within the UK or EU. Where this is not possible due to the nature of a specific third-party service, the safeguards described above apply.
Retention Of Data
We only keep your data for as long as necessary for the purposes it was collected, and no longer. In practice, this means:
Financial and invoicing records, including transaction and billing history, are retained for 6 years, in line with UK tax and accounting record-keeping requirements (HMRC).
General client and business contact data is retained for the duration of our working relationship with you, plus 24 months afterwards, unless a longer period is required by law, or we reasonably need to retain it for the purpose of resolving a dispute.
Website mailing list data is retained until you unsubscribe, or automatically after 24 months of no engagement with our emails, whichever comes first.
Your Rights
We will only process your data for marketing purposes where you have given express consent, where the PECR “soft opt-in” applies to existing clients as described above, or where there is a legitimate interest for us to do so.
At any time, even if you have previously consented, you have the right to ask us not to process your personal data for marketing purposes, and/or not to disclose it to third parties for marketing purposes. You can do this by contacting [email protected], or by using the unsubscribe link in any marketing email.
The UK GDPR also gives you the right to:
access information held about you;
request the deletion or correction of information held about you;
object to or restrict the processing of information about you;
request that information about you be transferred to another person or organisation.
If you wish to exercise any of these rights, please email us at [email protected]. We will respond to any requests without undue delay and no later than one month after receipt of your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, if you believe we have not handled your personal data properly. Further information is available at https://ico.org.uk.
Complaints Procedure
If you have any complaints about how we have processed your data, or about how we have handled a request relating to your rights under this policy, you can raise this with us either by using our website contact form or by emailing [email protected].
You will receive an acknowledgement of your complaint, which may be automatic, within 30 days of us receiving it. We will then investigate without undue delay and keep you informed of progress, before confirming the outcome to you. If you remain unhappy with the outcome, you have the right to escalate your complaint to the Information Commissioner’s Office at https://ico.org.uk.
Third-Party Sites
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Children And Parents
We respect children’s privacy. We do not target or knowingly or intentionally collect personally identifiable information from children under the age of 13. By using the website, you have represented and warranted that you are either at least 18 years of age or using the website with the supervision of a parent or guardian. If you are under the age of 13, you may not use the website. If you become aware that your child has provided us with personal information without your consent, please email us at [email protected].
Changes To Our Privacy Policy
Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back periodically to see any updates or changes to our privacy policy.
Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to: [email protected].