GDPR Notice

Our commitments

We apply the data protection principles to everything we do.

• We collect only the data we need for a clearly defined purpose.
• We process data lawfully, fairly and transparently.
• We keep data accurate and up to date where practical.
• We retain data no longer than necessary.
• We protect data with appropriate technical and organisational measures.

Controller and processor roles

We act as data controller for enquiries and our own business records. When we deliver campaigns using client systems and audiences, we generally act as a processor on the client's instructions under a written agreement.

Your rights

Individuals whose data we hold can exercise the following rights.

• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure where there is no continuing lawful basis to retain it.
• Right to restrict or object to processing, including direct marketing.
• Right to data portability where processing is based on consent or contract.

Making a request

Email us with the details of your request and we will respond within one month. We may ask for verification before disclosing personal data. There is normally no fee.

International transfers and sub-processors

Some tools we rely on, such as advertising and analytics platforms, may process data outside the UK. Where that happens, we use providers that offer appropriate safeguards recognised under UK data protection law.

Complaints

If you believe we have not handled your data correctly, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office.