Privacy Policy
Last updated: 28th August 2025
1. Who We Are
Hampshire Jeffreys Limited (Company Number: 14382832) is a digital marketing agency registered in England and Wales. We are the data controller responsible for your personal data under this privacy notice.
If you have any questions, please contact our Data Protection Lead:
Email: info@hjagency.co.uk
Postal Address: 41 Iffley Road, Hammersmith, W60PB
2. What Personal Data We Collect
We may collect and process the following types of personal data:
Identity Data: Name, job title, company, social media handle
Contact Data: Email address, phone number, billing/delivery address
Technical Data: IP address, browser type/version, device type, cookies, and analytics data
Marketing Data: Your preferences for receiving marketing from us
Usage Data: How you use our website, services, content, and emails
Financial Data: Payment information (if applicable)
We do not collect special categories of personal data (e.g. health, religious beliefs) unless explicitly provided and consented to, such as for event dietary needs.
3. How We Collect Your Data
We collect personal data in the following ways:
Direct interactions: when you fill in forms, contact us, sign up to newsletters, or enter into contracts
Automated technologies: via cookies, analytics, and tracking on our website
Third parties: e.g. LinkedIn, Meta, Google Analytics, or partners referring your data to us
4. Why We Use Your Data
We will only use your data when the law allows us to, such as:
Purpose: Lawful Basis
To respond to enquiries or provide services. Performance of a contract. To send marketing or service updates. Legitimate interest or consent. To improve our services and optimise campaigns. Legitimate interest. To comply with legal obligations. Legal requirement.
You can opt-out of marketing emails at any time using the unsubscribe link or by contacting us directly.
5. Sharing Your Data
We may share your personal data with:
Internal team members or contractors working on your account
Service providers such as Meta, Google, LinkedIn, CRM and analytics platforms
Event or campaign partners (with your permission)
HMRC, regulators, or legal entities if required by law
We ensure third parties respect your data and comply with relevant UK data protection laws.
6. International Transfers
If we transfer data outside the UK (e.g. through third-party tools like Google or Meta), we ensure adequate safeguards are in place such as standard contractual clauses or certification under data protection frameworks.
7. Data Retention
We only keep your data as long as necessary for the purpose it was collected. For legal, financial, and audit purposes, some data may be retained for up to 6 years after our relationship ends. We regularly review our data retention practices.
8. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion of data (“right to be forgotten”)
Restrict processing
Object to processing or marketing
Request data portability
Withdraw consent at any time
To exercise your rights, please contact: info@hjagency.co.uk
9. Cookies
Our website uses cookies to improve your browsing experience and track campaign effectiveness. You can manage cookie preferences through your browser settings. See our [Cookie Policy] for more information.
10. Security Measures
We use appropriate technical and organisational safeguards to secure your data. Access is restricted to authorised personnel only, and we use secure platforms for all marketing and data storage activities.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. If material changes are made, we will notify you.
12. Complaints
If you have a concern about how we handle your data, you have the right to complain to the ICO (Information Commissioner’s Office) – www.ico.org.uk – but we’d appreciate the chance to resolve the issue directly with you first.
13. government/authority data requests.
We review all requests from public authorities for user data to verify their legality before responding. We will challenge any requests we consider unlawful and will only disclose the minimum information necessary to comply with valid legal requests.