Privacy Policy

Who Is the Controller

[COMPANY LEGAL NAME] is the controller for personal data described in this policy, unless a specific engagement agreement names a different controller or processor arrangement for client project data.

If you are an agency client’s end customer, your agency may be the controller for data it collects about you. This policy covers data we control through this website and our direct enquiries.

Personal Data We Collect

We may collect identity and contact details you submit (such as name, email address, job title, company name, and message content), technical data from your browser or device (such as IP address, browser type, and approximate location derived from IP), usage data about pages viewed, and correspondence records when you email us.

We do not ask for special category data through the ordinary contact path. Please do not send health, religious, or similar sensitive details in enquiry forms or emails unless we have expressly asked for them as part of a documented process.

• Contact and enquiry data you choose to send
• Business context you include in briefs (domains, URLs, constraints)
• Technical and usage data from site visits
• Communication records related to scoping and delivery

How We Collect Data

You may give us data directly by email, forms, or calls. We may receive data automatically through cookies and similar technologies as described in our Cookie Policy. We may also receive business contact details from your colleagues when an organisation invites us into a shared brief.

We do not buy consumer marketing lists for cold spam. Outreach to publishers and creators for client fulfilment is a separate operational activity governed by those campaigns’ briefs and applicable law.

Purposes and Lawful Bases

We process personal data to respond to enquiries, scope and deliver services, manage supplier and publisher communications where needed, improve the website, keep records required for accounting and legal claims, and meet compliance duties.

Depending on the context, lawful bases may include: steps prior to a contract or performance of a contract; legitimate interests in operating and securing our business (balanced against your rights); consent where we rely on it for non-essential cookies or optional marketing; and legal obligation where the law requires retention or disclosure.

Legitimate Interests

Our legitimate interests include running a commercial website, answering business enquiries, defending legal claims, securing systems, and understanding aggregate traffic patterns. When we rely on legitimate interests, we consider whether the processing is proportionate and whether you would reasonably expect it.

You may object to processing based on legitimate interests. See “Your Rights” below.

Cookies and Similar Technologies

We use cookies and similar technologies as explained in our Cookie Policy. Essential cookies support basic site operation. Non-essential cookies are used only where allowed, with consent tools where required.

Sharing Personal Data

We may share personal data with service providers that host our site, email, analytics, or operations tools, with professional advisers, and with authorities when the law requires. For client delivery, limited contact details may be shared with publishers or creators only as needed to fulfil an agreed brief.

We do not sell personal data. Providers who process data for us are expected to do so under written terms that meet UK GDPR standards.

International Transfers

Some providers may process data outside the United Kingdom. Where that happens, we take steps designed to protect the data, such as using providers that offer an appropriate transfer mechanism recognised under UK law (for example, the UK International Data Transfer Agreement or adequacy regulations where available).

You can contact [CONTACT EMAIL] for more detail about transfers relevant to your enquiry.

Retention

Enquiry data is kept for as long as needed to handle your request and for a reasonable period afterward in case of follow-up or disputes. Contract and billing records are kept for periods required by law and sensible business practice. Analytics data is kept according to tool settings and our need for aggregate reporting.

When data is no longer needed, we delete or anonymise it where feasible.

Security

We apply technical and organisational measures appropriate to the risk, including access controls and careful handling of enquiry content. No online transmission is perfectly secure. Please avoid sending passwords or unnecessary personal data in ordinary emails.

Your Rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing.

To exercise rights, email [CONTACT EMAIL]. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Children

Our website and services are aimed at businesses and adult professionals. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Significant changes that affect how we handle existing enquirers will be communicated where practical.

Contact

Privacy enquiries: [CONTACT EMAIL]. Postal contact: [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. Governing privacy framework: United Kingdom law, with complaints capable of being raised with the ICO.