This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit or interact with our websites and services related to local UK PR services. It applies to all visitors, users, clients, partners, and other individuals whose personal data we process. We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable laws.
If you have any questions about this policy or wish to exercise your rights, please contact us at aamritri@gmail.com.
1. What information we collect
We collect personal data that you provide directly to us and data that is collected automatically when you use our websites and services.
Information you give us
- Contact details (name, email address, phone number, postal address).
- Business details (company name, job title, industry).
- Account or registration details when you sign up for newsletters, resources, or client portals.
- Communication content (messages, enquiries, feedback, proposals).
- Payment and invoicing information when you purchase services (we do not store full payment card details on our systems; payment is handled by third-party processors).
Information collected automatically
- Technical data such as IP address, browser type, device identifiers, operating system, pages viewed and referring/exit pages.
- Usage data including session duration, clicks, and interaction with content.
- Cookies and similar tracking technologies (see our separate Cookies Policy for full details).
Third-party sources
- Information from third-party services you use to interact with us (e.g., social media profiles if you connect via an integrated service).
- Publicly available sources and business directories for lead generation or verification.
2. How we use your information
We use personal data for the following lawful purposes and bases:
- To provide services and manage client relationships (contract performance). This includes delivering PR services, proposals, reporting, invoices, and customer support.
- To respond to enquiries and communicate with you (legal obligation/legitimate interest).
- To send marketing communications where permitted (consent or legitimate interest depending on context). You can opt out at any time.
- To improve our website and services using analytics and performance data (legitimate interest).
- For administrative, legal, tax and security purposes including record-keeping, fraud prevention and legal compliance (legal obligation/legitimate interest).
- To personalise content and advertising where you have consented or where it is otherwise lawful to do so.
We will only process your personal data for the purposes stated in this policy unless we reasonably consider that we need to process it for another compatible purpose.
3. Lawful bases for processing
Depending on the processing activity, our lawful bases include:
- Performance of a contract with you.
- Consent where you have given clear permission (you may withdraw consent at any time).
- Compliance with legal obligations.
- Legitimate interests of our business (for example, to operate and improve our services, protect our systems, and engage in direct marketing), provided such interests are not overridden by your rights.
4. Data sharing and disclosure
We may share personal data with:
- Service providers and subprocessors (e.g., hosting providers, analytics, email and payment processors) who act on our instructions and are contractually bound to protect your data.
- Professional advisers (lawyers, accountants) and other third parties where required for legal or regulatory purposes.
- Third-party platforms when you choose to interact with them (e.g., social media) — their use of your data will be subject to their own privacy policies.
- Regulators or law enforcement where required by law, or to protect the rights, property, or safety of our organisation, users, or others.
We do not sell your personal data.
5. International transfers
Some of our third-party service providers may be located outside the UK. Where personal data is transferred abroad, we will ensure appropriate safeguards are in place (for example, standard contractual clauses or transfers to countries with an adequacy decision) to protect your information in accordance with applicable law.
6. Data retention
We retain personal data only as long as necessary for the purposes we collected it for, including to meet legal, accounting, or reporting requirements. Retention periods vary by data type and purpose; for example:
- Enquiry and contact details: typically retained for up to 3 years after last contact unless required longer.
- Client records, contracts and financial information: retained in accordance with tax and audit obligations (commonly 6–7 years).
- Marketing consents and preferences: retained until withdrawn or as required by law.
If you wish to know the specific retention period for a given type of data, contact us at aamritri@gmail.com.
7. Your rights
Under data protection laws you may have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data (where we have no overriding legal basis to retain it).
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests or direct marketing.
- Request portability of your data in a structured, commonly used format.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at aamritri@gmail.com. We may need to verify your identity before responding. We aim to respond within statutory timescales (usually one month).
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and accidental loss, destruction, or damage. Measures include access controls, encryption where appropriate, and security assessments of third-party providers. However, no system is completely secure; if a data security incident affects you, we will take steps to contain the incident and notify you and regulators where required.
9. Children
Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at aamritri@gmail.com and we will take steps to delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you of material changes. Please review this policy periodically.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us at aamritri@gmail.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) – see ico.org.uk for details.
12. Contact us
For questions, rights requests, or any concerns relating to this Privacy Policy or our data handling practices, please contact:
Email: aamritri@gmail.com
We aim to respond to enquiries promptly and in accordance with applicable data protection laws.