How Creative Marketing Group Limited collects, uses and protects personal data submitted through this website.
This Privacy Policy explains how CREATIVE MARKETING GROUP LIMITED (“the Company”, “we”, “us”, “our”) processes personal data collected through this website. We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Data controller
The controller responsible for the personal data described in this policy is CREATIVE MARKETING GROUP LIMITED, registered in England and Wales under company number 15329031, registered office Moss Bridge House, Moss Bridge Road, Rochdale, OL16 5EA, United Kingdom.
We have not appointed a Data Protection Officer, as we are not required to do so. Data protection enquiries are handled by the Company at the registered office above, by email to [email protected], or through the enquiry form in our contact section.
Personal data we collect
We only collect personal data that you provide yourself through this website.
Enquiry form
When you send an enquiry you provide your name, your email address, and any information you choose to include in the message field. You may also indicate, through a separate and unticked checkbox, that you wish to receive our marketing newsletter. That choice is optional and is not required in order to send an enquiry.
Newsletter subscription
When you subscribe to the newsletter you provide your name, your email address, and optionally an indication of which subject area interests you. Subscription requires your explicit consent, given by ticking the consent checkbox, which is never pre-selected.
Unsubscribe requests
When you use the unsubscribe page or the quick unsubscribe form you provide the email address you wish to have removed from the newsletter list.
Server logs
Our hosting provider’s web server may record standard technical information as part of its normal operation, such as IP address, browser type and the time of a request. This is a function of the hosting infrastructure rather than something this website collects for its own purposes.
Cookies and analytics
This website does not set cookies of its own, and it does not use analytics, advertising or tracking technologies. Pages of this website load web fonts from Google Fonts; when your browser requests those files, the provider of that service necessarily receives your IP address and standard request information. No other third-party services are embedded in these pages.
We do not knowingly collect personal data from children, and this website is not directed at them.
Purposes and lawful basis
- Responding to enquiries — to receive, assess and reply to a request about our services. Lawful basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business correspondence (Articles 6(1)(b) and 6(1)(f) UK GDPR).
- Sending the newsletter — to send the marketing newsletter you subscribed to. Lawful basis: your consent (Article 6(1)(a) UK GDPR), and, for electronic marketing, the Privacy and Electronic Communications Regulations 2003.
- Handling unsubscribe requests — to remove an address from the list and record that the request was made. Lawful basis: legal obligation and our legitimate interest in demonstrating that consent was withdrawn (Articles 6(1)(c) and 6(1)(f) UK GDPR).
- Operating and securing the website — to keep the website available and protect it from misuse. Lawful basis: our legitimate interest in the secure operation of our own systems (Article 6(1)(f) UK GDPR).
Providing your data is voluntary. If you do not provide the information requested in a form, we may be unable to respond to your enquiry or to send you the newsletter. Marketing consent is never a condition of receiving a reply to a service enquiry.
Recipients and processors
We do not sell, rent or trade personal data, and we do not use it for automated decision-making or profiling.
Personal data may be accessible to our hosting provider and, where applicable, to an email service provider used to deliver the newsletter, each acting as a processor on our instructions under a written data processing agreement. Personal data may also be disclosed to professional advisers, or to competent authorities and courts, where we are legally required to do so.
International transfers
We aim to process personal data within the United Kingdom or the European Economic Area. Where a service provider processes data outside those areas, we rely on UK adequacy regulations or on appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses. You may request information about the safeguards applied by contacting us.
Retention
- Enquiry correspondence is retained for as long as needed to deal with the enquiry and any resulting business relationship, and thereafter for the period required by applicable limitation and record-keeping rules.
- Newsletter subscriber data is retained until you withdraw your consent, after which the address is removed from the mailing list.
- Records evidencing consent and its withdrawal are retained for as long as necessary to demonstrate compliance.
Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure and loss, including transport encryption for this website and restricting access to those who need it. No method of transmission over the internet can be guaranteed to be completely secure.
Your rights
Subject to the conditions set out in the UK GDPR, you have the right to:
- request access to the personal data we hold about you;
- request rectification of inaccurate or incomplete data;
- request erasure of your data;
- request restriction of processing;
- object to processing carried out on the basis of legitimate interests, and to object at any time to direct marketing;
- receive your data in a structured, commonly used and machine-readable format; and
- withdraw your consent at any time, where processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw newsletter consent at any time on our unsubscribe page or by using the unsubscribe link included in each newsletter email.
To exercise any of these rights, contact us by email at [email protected], through the enquiry form in our contact section, or in writing at our registered office. We respond without undue delay and in any event within one month, which may be extended where the law permits.
Complaints
If you consider that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection. We would ask that you raise the matter with us first so that we have the opportunity to resolve it.
Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect changes in our processing or in applicable law. The date shown above indicates when it was last revised.
Contact
Questions about this Privacy Policy or about how we process personal data can be sent to [email protected], through the enquiry form in our contact section, or in writing to CREATIVE MARKETING GROUP LIMITED, Moss Bridge House, Moss Bridge Road, Rochdale, OL16 5EA, United Kingdom.