Privacy Policy
This policy explains what personal data we collect, why we collect it, how long we keep it and the rights you have over it. We have written it in plain English, with a short summary at the top of every section.
01 Who We Are#
In short
Shamrock Marketing is the controller of the personal data described here, and you can reach us by email at any time.
Shamrock Marketing (“we”, “us”) is a growth marketing agency and the data controller for personal data collected through this website and in running our business.
Contact our privacy lead at privacy@shamrockmarketing.agency. We are registered with the UK Information Commissioner's Office (ICO) as a data controller; our registration details are available on request.
02 Personal Data We Collect#
In short
We collect what you send us through forms and calls, basic usage data if you allow analytics, and data needed to run client projects and hiring.
- Forms and enquiries: your name, work email, company, website, budget range and anything you write in a message.
- Calls and meetings: notes from growth calls and, only with your permission, recordings.
- Analytics: pages visited, device and approximate location, only if you accept analytics cookies.
- Cookies: your cookie choices, stored in your browser. See our Cookie Policy.
- Client account data: contact details of client staff and data inside client platforms we access to deliver services.
- Job applications: your CV, portfolio, application answers and interview notes.
- Marketing tracking: UTM parameters and the referring page when you submit a form, so we know which campaigns work.
03 How We Use Your Data#
In short
We use your data to reply to you, deliver services, hire people, send the newsletter you asked for and improve our marketing.
- Replying to enquiries and running growth calls and audits
- Delivering and invoicing the services in a client contract
- Assessing job and partner applications
- Sending the newsletter to people who subscribed
- Understanding which pages and campaigns work, with your consent
- Keeping records we must hold for tax and legal reasons
04 Lawful Bases for Processing#
In short
Each use of your data rests on a lawful basis: consent, contract, legal obligation or our legitimate interests.
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries | Legitimate interests (responding to people who contact us) |
| Delivering client services | Contract |
| Invoicing and accounting records | Legal obligation |
| Assessing job applications | Legitimate interests, and steps before a contract |
| Newsletter | Consent |
| Analytics and marketing cookies | Consent |
| Protecting against fraud and misuse | Legitimate interests |
05 Marketing Communications and Your Choices#
In short
We only send marketing emails if you subscribed or are a client, and every email has a one-click unsubscribe.
We send the newsletter only to people who opted in. Clients may receive occasional service updates relevant to their work with us. Every marketing email includes an unsubscribe link, and you can also email us to stop all marketing at any time.
06 Cookies and Tracking#
In short
Non-essential cookies only run after you agree, and you can change your choice whenever you like.
We use essential storage to remember your cookie choice. Analytics and marketing tools only load after you accept them in the cookie banner. Full details, and a panel to change your preferences, are in our Cookie Policy.
07 Who We Share Data With#
In short
We share data only with service providers who process it for us under contract, and we never sell personal data.
| Processor type | What they do | Data involved |
|---|---|---|
| CRM | Stores enquiries and client contacts | Contact details, notes |
| Email platform | Sends the newsletter and service emails | Name, email, preferences |
| Analytics | Measures site usage (with consent) | Usage data, device data |
| Website hosting | Hosts this website and form endpoints | Form submissions, server logs |
| Calendar tool | Books growth calls | Name, email, meeting time |
We may also share data with professional advisers, or where the law requires it. A current list of named processors is available on request.
08 International Transfers#
In short
When data leaves the UK or EU, we protect it with approved safeguards such as the UK IDTA or EU Standard Contractual Clauses.
Some of our providers store data outside the UK and European Economic Area. Where they do, we rely on adequacy decisions or put in place the UK International Data Transfer Agreement (IDTA), the UK Addendum, or EU Standard Contractual Clauses (SCCs), together with any additional measures needed.
09 How Long We Keep Data#
In short
We keep data only as long as we need it, from 14 months for analytics to six years for accounting records.
| Data | Kept for |
|---|---|
| Enquiries that do not become clients | 24 months from last contact |
| Client contracts and invoices | 6 years after the engagement ends |
| Job applications | 6 months, or 12 months if you agree to stay on file |
| Newsletter subscribers | Until you unsubscribe |
| Analytics data | 14 months |
| Call recordings (with permission) | 90 days |
10 How We Protect Data#
In short
We use access controls, encryption and two-factor authentication, and we give staff access only to what they need.
We protect personal data with role-based access, encryption in transit, two-factor authentication on business systems, regular access reviews and staff training. If a breach affects your rights, we will tell you and, where required, the ICO within 72 hours.
11 Your Rights#
In short
You can ask to see, correct, delete, restrict, move or object to the use of your data, and withdraw consent at any time.
- Access: get a copy of the data we hold about you.
- Rectification: correct data that is wrong or incomplete.
- Erasure: ask us to delete your data.
- Restriction: ask us to limit how we use it.
- Portability: receive your data in a reusable format.
- Objection: object to processing based on legitimate interests or to direct marketing.
- Withdraw consent: change your mind about anything based on consent.
Email privacy@shamrockmarketing.agency. We reply within one month and there is normally no charge.
12 How to Complain#
In short
Talk to us first, and you can also complain to the UK Information Commissioner's Office or your local regulator.
If you are unhappy with how we handle your data, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, or to the data protection authority in your own country.
13 Children's Data#
In short
Our services are for businesses, and we do not knowingly collect data from children.
Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us data, contact us and we will delete it.
14 Changes to This Policy#
In short
We will update this page when our practices change and show the new date at the top.
We review this policy at least once a year. When we make significant changes, we update the dates at the top of this page and, where appropriate, tell clients and subscribers by email.
15 Contact Us#
In short
Email our privacy lead with any question or request about your data.
Privacy questions and requests: privacy@shamrockmarketing.agency. General enquiries: hello@shamrockmarketing.agency.
Questions about this page? Contact Shamrock Marketing.