Privacy Policy

Introduction & who we are

Forty-Two Digital Media is a creative and media agency based at 70 Gracechurch Street, Floor 5, London, EC3V 0HR. For the purposes of UK data protection law, we are the “data controller” responsible for the personal data described in this policy.

This policy applies to personal data we process about visitors to our website, prospective and current clients, suppliers and partners, and anyone who contacts us. It does not cover the personal data we may process on behalf of our clients in the course of providing services; where we act as a “data processor” for a client, that processing is governed by the relevant agreement with that client.

We may update this policy from time to time. When we do, we will revise the “last updated” date above and, where changes are significant, take reasonable steps to bring them to your attention.

Information we collect

We collect personal data in a few straightforward ways:

Information you give us

• Contact details — such as your name, email address, employer or job title when you email us, complete an enquiry, or correspond with us.
• Project information — details you share about your organisation, brief or requirements when discussing or delivering work.
• Business records — information needed to manage client and supplier relationships, including contractual and billing contact details.

Information we collect automatically

• Technical and usage data — such as your IP address, browser type, device information, referring pages, and how you interact with our website, collected through cookies and similar technologies (see Section 4).

We do not intentionally collect special category data (for example, information about health, race or political opinions) through our website, and we ask that you do not send us such information unless it is strictly necessary and we have agreed how it will be handled.

How we use your information

We use personal data only where we have a lawful basis to do so under UK GDPR. Our purposes and bases include:

• To respond to enquiries and provide our services — on the basis of taking steps at your request before entering a contract, or performing a contract with you or your organisation.
• To manage our client, supplier and partner relationships — on the basis of our legitimate interests in running and growing our business.
• To operate, secure and improve our website — on the basis of our legitimate interests in maintaining a safe and effective online presence.
• To send relevant business communications — where you have consented or where we have a legitimate interest and you have not opted out; you can unsubscribe at any time.
• To comply with legal and regulatory obligations — such as accounting, tax and record-keeping duties.

Where we rely on legitimate interests, we balance those interests against your rights and freedoms, and you may object to such processing as described in Section 7.

Cookies & similar technologies

Cookies are small text files placed on your device when you visit a website. We use a limited set of cookies and similar technologies to make our website function and to understand how it is used.

• Strictly necessary — these enable core functionality such as security and page navigation. The website cannot work properly without them, so they do not require consent.
• Analytics — these help us understand aggregate visitor behaviour so we can improve the site. They are only set where permitted under applicable law and, where required, with your consent.

Third-party services

We work with a small number of trusted service providers who process personal data on our behalf, strictly under our instructions and appropriate contractual safeguards. These may include:

• Website hosting and infrastructure providers who keep this website online and secure.
• Email and productivity providers we use to communicate and manage our work.
• Analytics providers who help us measure website performance.
• Professional advisers such as accountants and legal advisers, where necessary.

We do not sell your personal data. Where any provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement (or its addendum to the EU Standard Contractual Clauses), so that your data continues to receive an equivalent level of protection.

Data retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

• Enquiries that do not become projects are typically retained for up to 24 months, then deleted or anonymised.
• Client and supplier records are retained for the duration of our relationship and for a reasonable period afterwards to meet contractual and legal obligations.
• Financial records are kept for at least six years in line with UK tax and accounting requirements.

When personal data is no longer required, we securely delete or anonymise it.

Your rights under UK GDPR

Subject to certain conditions and exemptions, you have the following rights in relation to your personal data:

• The right to be informed about how your data is used — which this policy is designed to provide.
• The right of access to a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to data portability, allowing you to obtain and reuse your data.
• The right to object to processing based on our legitimate interests or to direct marketing.
• Rights related to automated decision-making and profiling — we do not make solely automated decisions that produce legal or similarly significant effects.

To exercise any of these rights, please contact us using the details below. We will respond within one month, as required by law. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, although we would welcome the chance to address your concerns first.

How to contact us

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please get in touch:

Forty-Two Digital Media
70 Gracechurch Street, Floor 5, London, EC3V 0HR
Email: marketing@fortytwodigitalmedia.com

We aim to acknowledge all data protection enquiries promptly and to resolve them in good time.