Privacy Policy

Information collected automatically when you visit our website:

• Technical information, including IP address, browser type and version, time zone setting, operating system, and device type.
• Information about your visit, including pages viewed, time spent on pages, referring and exit pages, and interaction data (such as clicks and scrolling).
• Cookie and similar identifier data (see Section 7).
  

Information you provide to us directly:

• Name, job title, and the organisation you work for.
• Contact details, including email address, telephone number, and postal address.
• The content of inquiries, correspondence, and project briefs you send us.
• Information about your preferences, interests, and requirements.
• For clients and suppliers: contract, billing, and payment details.
• Publicly available business information (including LinkedIn, company websites, and industry directories) where we are researching potential clients or suppliers.
• Information provided by our clients about their staff and contacts for the purpose of delivering a project.
  

Event Delegate Data: Where we deliver an event on behalf of a client, we collect and process information about delegates attending. Depending on the event, this may include:

• Name, job title, employer, and contact details
• Travel and accommodation details, including flight information, rooming requirements, and arrival and departure times
• Identity document details, such as passport or national ID number, where a hotel or venue requires these for check-in or security
• Dietary requirements, allergies, and accessibility or assistance needs
• Photographs and film footage captured at the event

Dietary requirements, allergies, and accessibility or assistance needs may reveal information about your health or religious beliefs. Data of this kind is treated as “special category data” under UK GDPR and receives additional protection — see Section 2.

Where our client determines the purposes and means of the processing, we act as a data processor. In those circumstances we process delegate data only on the client’s documented instructions, under a written data processing agreement, and the client’s own privacy notice governs. Where we organise our own events or marketing activity, we act as the controller and this notice applies in full.

Providing you have given us consent, or where we rely on a legitimate business interest (such as providing B2B marketing services and maintaining professional relationships), we use your information in the following ways:

• To fulfill our contractual obligations and deliver agency services.
• To periodically send promotional emails about new services, special offers, or industry insights using the email address you provided.
• To contact you for market research purposes.
• To customise our website according to your interests.

Event Photography & Filming: 

Events we deliver are often photographed or filmed. Signage is displayed at venues where filming occurs, and designated non-filming areas are provided where possible.

• If you do not wish to appear in event media, please inform us before or during the event.
• If an image of you has been published and you wish for it to be removed, contact us and we will promptly remove it from any materials within our control.

Special Category Data
Where we act as controller and process dietary, allergy, accessibility, or assistance information, we rely on your explicit consent under Article 9(2)(a) UK GDPR. You provide this information voluntarily during registration, and we ask only for what is necessary to make the relevant arrangements. Where we act as processor on behalf of a client, we rely on the condition established by that client.

We handle this information as follows:

• It is used only to make catering, accommodation, travel, or accessibility arrangements.
• It is shared only with the specific supplier who needs it to deliver those arrangements — for example, a caterer or hotel — and only the minimum detail required.
• It is never used for marketing, profiling, or any purpose unrelated to the event.
• It is deleted within 30 days of the event, unless we are instructed otherwise by our client.

You may withdraw your consent at any time by contacting us using the details in Section 10, although we may then be unable to accommodate your requirements at the event.

We do not sell, rent, or lease your personal data to third parties, nor do we share it with third parties for their own marketing purposes. We only share personal data with:

• Service Providers & Sub-processors: Secure platforms that process data on our behalf under written contract, including our website host, email/productivity platforms (Google Workspace), collaboration tools (Slack), project management software (Roll HQ), CRM, and accounting platforms.
• Event Delivery Partners: Venues, hotels, caterers, transport providers, badge printers, and technical suppliers where required to deliver an event.
• Professional Advisers: Lawyers, insurers, IT support partners (SupportIT), and auditors, where strictly necessary.
• Regulators & Authorities: Law enforcement or regulatory bodies where required by law.
• Business Transfers: Prospective purchasers in the event of a business sale or corporate reorganization.

Where our third-party service providers host or access data outside of the UK (such as in the US or EU), we ensure appropriate legal safeguards are in place. This includes the use of Standard Contractual Clauses (SCCs) or reliance on the UK Extension to the EU-US Data Privacy Framework to ensure your data receives the same level of protection as it does in the UK.

We are committed to ensuring your information is secure. In order to prevent unauthorised access, loss, or disclosure, we maintain appropriate physical, technical, and managerial procedures (managed in partnership with our dedicated IT support provider).

These measures include role-based access controls, encryption in transit, multi-factor authentication (MFA) on business systems, regular staff privacy training, and binding contracts with our sub-processors.

Data Breaches: While no system is completely secure, in the event of a personal data breach likely to result in a risk to your rights, we will report it to the ICO within 72 hours and notify you directly where required by law.

A cookie is a small file placed on your device that allows a website to recognise you and remember your preferences. We use cookies to operate our website and to understand how it is used.

When you first visit our website, a consent banner allows you to accept or reject non-essential cookies. Strictly necessary cookies — those required for the website to function and remain secure — are set automatically, as these are exempt from the consent requirement. All other cookies, including analytics cookies, are only set once you have given your consent. If you reject them, they are not placed on your device.

We use the following categories of cookie:

Strictly necessary: required for core website functionality and security. No consent required.

Analytics and performance: used strictly for statistical analysis of website traffic so we can improve the experience we offer. Set only with your consent, and retained for a maximum of 14 months.

You can also manage cookies through your browser settings, though disabling strictly necessary cookies may limit website functionality.

Cookies do not give us access to your device or to any personal information other than what you choose to share. Where our analytics provider processes data outside the UK, the safeguards described in Section 4 apply.

Our website may contain links to external sites of interest. Please note that we have no control over third-party websites. They are not governed by this privacy policy, and we cannot be responsible for the protection and privacy of any information you provide while visiting them.

Under UK data protection law, you have the following rights:

• Right to be Informed: To know how your data is collected and used (the purpose of this notice).
• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request correction of inaccurate or incomplete data.
• Right to Erasure (‘Right to be Forgotten’): To request deletion of your data in certain circumstances.
• Right to Restrict Processing: To ask us to pause processing your data under specific conditions.
• Right to Data Portability: To receive your data in a structured, machine-readable format.
• Right to Object: To object to processing based on legitimate interests, and an absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: To withdraw consent at any time where processing is consent-based.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within one month. Exercising your rights is free of charge, though we may verify your identity before acting on a request.

If you have questions about this policy or are unhappy with how we have handled your personal data, please contact us first so we can resolve the issue:

• Email: hello@jdmarketing.co.uk
• Postal Address: JD Marketing, Market Peckham, 133a Rye Lane, London, SE15 4BQ

We will acknowledge your complaint within 30 days and aim to resolve it promptly.

Complaining to the Regulator: You also have the right to lodge a complaint directly with the UK supervisory authority at any time:
Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Helpline: 0303 123 1113
• Website: ico.org.uk