The short version
- We only collect what we need to reply to you, deliver your project and run this website.
- We never sell your data, and we don’t send unsolicited marketing.
- Analytics cookies are only used if you say yes, and you can change your mind at any time.
- You can ask to see, correct or delete your data whenever you like. Just email hello@critical.media.
01Who we are
This website is run by Critical Media Ltd, a company registered in England & Wales (company number 06582022). Our registered office address is shown in our Terms of Service.
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the controller of the personal data described in this policy. If you have any questions about it, email us at hello@critical.media.
02What we collect
When you get in touch
Your name, email address, phone number, organisation and anything you tell us in your message, whether that’s through our contact form, by email or by phone.
When we work together
Contact and billing details for you and your colleagues, plus the project information, files and content you share with us.
When you use this website
If you accept analytics cookies, information about how you use the site, such as the pages you visit, your device and browser type, and your approximate location.
To keep things secure
Technical information such as your IP address, which our security and spam-protection tools use to block malicious traffic.
03How and why we use it
We only use your personal data where the law allows us to. Here’s what we use it for, and the legal basis we rely on.
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and preparing a proposal or quote | Taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries |
| Delivering your project, managing our relationship and invoicing | Performance of our contract with you |
| Keeping business and accounting records | Legal obligation |
| Understanding how our website is used, so we can improve it | Your consent (analytics cookies) |
| Protecting our website and forms from spam and attacks | Our legitimate interest in keeping our website secure |
We don’t send unsolicited marketing, and we never sell your personal data.
06International transfers
Some of our service providers, including Google, may process data outside the UK, for example in the United States. Where this happens, we rely on the protections required by UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK’s approved contract clauses.
07How long we keep it
- Enquiries that don’t lead to a project are kept for up to two years, then deleted.
- Client and project records are kept for as long as we work together, and then for six years to meet our accounting and legal obligations.
- Analytics data is kept in line with our Google Analytics retention settings.
- Website backups are taken daily and kept for one month before being deleted.
We’ll delete your data sooner if you ask us to, unless we’re required to keep it by law.
08Keeping it secure
Our website is hosted in a secure UK data centre, protected by firewalls and anti-malware tools, and everything you send us through it is encrypted with SSL. Access to personal data is limited to the people who need it. No method of sending or storing data online is completely secure, but we take sensible steps to protect it, and if a breach ever affects you, we’ll let you and the Information Commissioner’s Office know as the law requires.
09Your rights
You have the right to:
To use any of these rights, email hello@critical.media. It’s free, and we’ll respond within one month.
10Children
Our website and services are aimed at businesses and organisations, not children, and we don’t knowingly collect personal data from anyone under 16.
11Complaints
If you’re unhappy with how we’ve handled your data, please talk to us first at hello@critical.media and we’ll do our best to put it right. You also have the right to complain to the UK’s data protection regulator:
12Changes to this policy
We may update this policy from time to time, for example if the law changes or we start using a new service. The latest version will always be on this page, with the date it was last updated at the top.