Privacy Policy
1. Who we are
This website is operated by JMBS MARKETING LTD, a full-service advertising agency trading as JMBS Marketing.
- Legal entity: JMBS MARKETING LTD
- Registered in England and Wales, Company No. 17418236
- Registered address: The Cream Cottage New Road, Woodwalton, Huntingdon, England, PE28 5YT
- E-mail: ceo@jmbsmarketing.co.uk
- Telephone: +44 7207 088914
- Website: jmbsmarketing.co.uk
We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have not appointed a statutory Data Protection Officer; data protection questions are handled by our director at the e-mail address above.
2. When we are a controller and when we are a processor
Our role depends on whose data it is and who decided to collect it. The distinction matters because it determines who you should contact and who is accountable.
Controller. For this website, our own marketing, our sales conversations, contracts, invoicing, supplier relationships and recruitment, JMBS MARKETING LTD is the controller. We decide what is collected and why, and this policy describes that processing.
Processor. For personal data we handle inside advertising campaigns on a client's instructions — customer lists uploaded for audience targeting, CRM and email data, campaign and website analytics on the client's own properties, and enquiry data generated by campaigns we run — the client is the controller and we act as processor under a written data processing agreement.
Where we act as processor, we only process that data on the client's documented instructions, and the client is responsible for the lawfulness of its collection: for having a valid legal basis, for giving people the required privacy information, and for holding any consent that the data relies on. If you are a customer of one of our clients and want to exercise your rights over that data, please contact that client — we will pass on any request we receive and support them in answering it.
3. The data we collect
Clients and prospective clients
- Name and job title of the contact person
- Business e-mail address and telephone number
- Company name, registered details, VAT number and billing address
- The content of your brief, and our correspondence and meeting notes
- Contract, order, invoice and payment records
- Recordings of calls and meetings, only where the participants have agreed to the recording
Website visitors
- IP address, approximate location, device, browser and referring page
- Pages viewed and interactions with the site, where you have accepted analytics cookies
- Advertising identifiers set by advertising pixels, where you have accepted advertising cookies
Suppliers, freelancers and production partners
- Contact and company details, portfolio or showreel material, rates, contracts and payment details
Candidates
- CV, portfolio, contact details, right-to-work confirmation and interview notes, where you apply to us for work
We do not ask for special category data. Please do not include health, political, religious or similar information in a brief or an application.
4. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering an enquiry, scoping work and preparing a quote | Steps at your request prior to entering a contract (Article 6(1)(b)) |
| Delivering agreed services, managing the project and supporting the account | Performance of a contract (Article 6(1)(b)) |
| Invoicing, credit control and keeping accounting records | Legal obligation (Article 6(1)(c)) and legitimate interests |
| Recording calls and meetings for accurate notes | Consent given at the start of the call (Article 6(1)(a)) |
| B2B marketing e-mails to business contacts about our services | Consent, or legitimate interests with soft opt-in — see section 5 |
| Analytics and advertising cookies and pixels on this website | Consent (Article 6(1)(a) and PECR) |
| Site security, error logging and preventing abuse | Legitimate interests in keeping the service available and secure |
| Working with suppliers, freelancers and production partners | Performance of a contract and legitimate interests |
| Assessing job applications | Steps prior to an employment contract and legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests and legal obligation |
Where we rely on legitimate interests, we have considered the impact on you and limited what we collect. You can object at any time — see section 11.
5. Marketing and B2B e-mail
We send marketing e-mails to business contacts only where we have your consent, or where the soft opt-in applies — that is, we obtained your details in the course of discussing or providing a similar service, and we gave you the chance to opt out at that point.
- Every marketing e-mail carries a one-click unsubscribe, and we act on it promptly.
- We identify ourselves as JMBS MARKETING LTD in every message and give a reply address that reaches a person.
- We keep a suppression list of addresses that have unsubscribed, so that we do not contact them again. This is the one case where we retain your address specifically in order not to use it.
- We do not sell, rent or share your contact details with third parties for their own marketing.
You can opt out at any time by using the unsubscribe link or by e-mailing ceo@jmbsmarketing.co.uk.
6. Who we share data with
We share personal data only where it is needed to run the business or deliver the work, and we put a written contract in place with each supplier that processes data on our behalf. The categories are:
- Advertising and analytics platforms, including search, social and display networks
- CRM systems and e-mail marketing services
- Hosting, cloud storage and IT support providers
- Our payment provider, for processing invoices and payments
- Our accountants and, where necessary, our legal advisers
- Freelancers and production partners working on a specific project under confidentiality terms
We may also disclose data where we are required to do so by law, by a regulator or by a court, or in connection with the sale or reorganisation of the business.
7. International transfers
Some of the platforms and tools we use are operated outside the United Kingdom, including in the United States and the European Economic Area. Where personal data is transferred outside the UK, we rely on one of the following safeguards:
- UK adequacy regulations covering the receiving country, including the EEA
- The International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses
- The UK Extension to the EU–US Data Privacy Framework, where the recipient is certified under it
You can ask us for details of the safeguard applied to a particular transfer by e-mailing ceo@jmbsmarketing.co.uk.
8. How long we keep data
| Data | Retention period |
|---|---|
| Enquiries and briefs that do not become projects | 12 months from the last contact |
| Client project files and correspondence | 3 years after the end of the engagement |
| Contracts, invoices and accounting records | 7 years, as required by UK tax law |
| Call and meeting recordings | 6 months, unless the project requires them for longer |
| Marketing contact records | Until you unsubscribe, or 24 months without engagement |
| Unsuccessful job applications | 6 months, or 12 months with your consent |
| Cookie and analytics data | Up to 14 months, depending on the platform |
Personal data we hold as a processor on a client's behalf is deleted or returned at the end of the contract, as set out in the data processing agreement with that client.
9. Security
We take appropriate technical and organisational measures to protect personal data, including encryption in transit, access control on a need-to-know basis, multi-factor authentication on business accounts, managed devices, and confidentiality terms with every freelancer and partner. Access to client data is limited to the people working on that account.
No transmission over the internet is completely secure. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours, and we will tell you directly where the risk is high.
10. Cookies and tracking
This website uses cookies and similar technologies, including advertising pixels. We are honest about what that means: analytics tell us which pages are read and where visitors arrive from, and advertising pixels let us measure and target campaigns for our own agency marketing.
- Strictly necessary. Needed for the site to load and stay secure. These do not require consent and cannot be switched off.
- Analytics. Aggregate statistics about pages viewed, time on page and traffic sources. Set only if you accept.
- Advertising. Pixels from advertising platforms used to measure campaigns and to show our ads to relevant audiences. Set only if you accept.
No analytics or advertising cookie is set before you make a choice in the banner. The banner offers Accept and Reject with equal prominence, and rejecting has no effect on your access to the site. Your choice applies to the current visit only; the banner will ask again next time, because we do not store your choice in your browser. You can also block or delete cookies in your browser settings at any time.
11. Your rights
Under UK data protection law you have the right to:
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate or incomplete data corrected
- Erasure — ask us to delete data where there is no continuing reason to keep it
- Restriction — ask us to pause processing while a matter is resolved
- Portability — receive data you gave us in a structured, machine-readable format
- Objection — object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent — where processing relies on consent, as set out in section 12
To exercise any of these rights, e-mail ceo@jmbsmarketing.co.uk. We respond within one month and may extend that by two further months for complex requests, telling you if we do. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity before we release data.
12. Withdrawing consent
Where we rely on your consent — marketing e-mails, call recording, and analytics or advertising cookies — you can withdraw it at any time, and it is as easy to withdraw as it was to give:
- Marketing e-mails: use the unsubscribe link in any message, or e-mail us
- Call recording: tell us during the call, or ask afterwards for the recording to be deleted
- Cookies: choose Reject in the banner, or clear cookies in your browser
- Anything else: e-mail ceo@jmbsmarketing.co.uk
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
13. Complaints
If you are unhappy with how we have handled your data, please tell us first at ceo@jmbsmarketing.co.uk so that we can put it right.
You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, helpline 0303 123 1113, ico.org.uk.
14. Age restriction
This website and our services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
15. Changes to this policy
We update this policy when our services, suppliers or legal obligations change. The date at the top of the page shows when it was last revised. Where a change materially affects how we use your data, we will tell affected contacts directly rather than relying on this page alone.
16. Contact us
For any question about this policy, a data request, or to withdraw consent:
- E-mail: ceo@jmbsmarketing.co.uk
- Telephone: +44 7207 088914
- Post: JMBS MARKETING LTD, The Cream Cottage New Road, Woodwalton, Huntingdon, England, PE28 5YT