Privacy Policy

Privacy Policy

Last updated: 24 August 2026

This policy explains what personal data Automated Creative collects when you visit our website, get in touch, come to one of our events or receive our marketing, why we use it, who we share it with, and the rights you have. We have tried to write it in plain English; if anything is unclear, email us and we will explain.

1. Who we are

Automated Creative Ltd is the controller of the personal data described in this policy. We are a company registered in England and Wales, company number 11029640. Our registered office is 20-22 Wenlock Road, London N1 7GU, and our office is at 224 Shoreditch High Street, London E1 6PJ.

For anything to do with privacy or your personal data, contact data@automatedcreative.net, or write to us at our registered office marked for the attention of our Data Protection Lead.

2. What this policy covers

This policy applies to:

• visitors to automatedcreative.net;
• people who contact us, request a demo, or fill in a form on our site;
• people who register for or attend our events and webinars;
• people who receive our marketing emails, or whom we contact about our services; and
• people whose details our customers or partners give us as a business contact.

If you use our platform as a customer, the personal data we handle inside that platform is covered by the contract with your organisation. If you apply for a job with us, we will give you a separate candidate privacy notice when you apply.

3. The personal data we collect

We do not ask for or want special category data, such as information about health, ethnicity or political opinions, and we do not knowingly collect personal data from anyone under 18. If you tell us about a dietary or accessibility requirement for an event, we use it only to make that arrangement and then delete it.

4. Why we use it, and our legal basis

Where we rely on legitimate interests, we have weighed our interest against your privacy and concluded it is reasonable to process the data in the way described. You can ask us for that assessment, and you can object — see section 10.

5. Marketing: what to expect, and how to stop it

If you ask us for something, come to an event, or become a customer, we may email you about our services, research and events. Every marketing email has an unsubscribe link and a link to manage which topics you hear about. Unsubscribing takes effect immediately.

We may also contact people at organisations we think would benefit from our services, using business contact details we have purchased from Perfect Pitch Lead Generation Limited and details from public professional sources. Every message we send tells you how to stop hearing from us, and links to this policy so you can see how we use your data and what rights you have.

We keep a record of where each contact's details came from. If you want to know where we got yours, email data@automatedcreative.net and we will tell you. If you ask us to stop contacting you we record that separately, so the request is still honoured if your details reach us again from another source.

We do not sell your personal data, and we do not share it with other companies for their own marketing.

You can change your preferences at any time by clicking the link in any of our emails, or by emailing data@automatedcreative.net.

6. Cookies and similar technologies

Our website uses cookies. Strictly necessary cookies are always set. Functional, analytics and advertising cookies are set only where you have accepted them in our banner, and you can change or withdraw that choice at any time using the “Cookie settings” link in the footer of any page. If your browser sends a Global Privacy Control signal we treat it as a refusal. Our Cookie Policy lists every cookie we use, who sets it, what it does and how long it lasts.

7. Who we share it with

We share personal data with:

• HubSpot Ireland Limited — our website, CRM and email marketing platform, which hosts this website and stores enquiry, contact and website-analytics data. Our HubSpot data is hosted in the European Union.
• Google Ireland Limited (and Google LLC) — Google Analytics, which measures how our site is used, and Google Ads, which delivers and measures our advertising.
• LinkedIn Ireland Unlimited Company — LinkedIn Campaign Manager, which delivers and measures our advertising on LinkedIn.
• Perfect Pitch Lead Generation Limited — the business contact data provider we buy contact and company data from, registered in England and Wales, company number 11432469. Each time we buy data we give Perfect Pitch a list of people who have asked us not to contact them, so that they are excluded from what we receive. Perfect Pitch may use that list only to apply those exclusions.
• Our professional advisers — lawyers, accountants and auditors — where they need it to advise us.
• Law enforcement, regulators, courts or other authorities, where we are legally required to disclose or need to protect our rights.
• A buyer or investor, and their advisers, if we sell or reorganise our business, in which case we will tell you if the way your data is used changes.

Google and LinkedIn use advertising data for their own purposes as well as ours, which makes them independent controllers for that use; their own privacy notices explain it. Everyone else listed acts on our instructions under a written contract that requires them to keep the data secure and use it only for the service they provide to us.

Perfect Pitch acts only on our instructions for the suppression list we give it, but decides for itself how it collects and compiles the data it sells to us, so it is a controller in its own right for that activity; its own privacy notice explains that use, and you can ask it to correct or delete your details directly as well as asking us.

8. Sending data outside the UK and Europe

Some of our providers process personal data outside the United Kingdom and the European Economic Area, including in the United States. Where that happens we rely on either a finding by the UK government or the European Commission that the country protects personal data adequately, including the EU-US Data Privacy Framework and its UK Extension where the provider is certified, or standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum, supported by an assessment of the protections available in that country.

You can ask us which safeguard applies to a particular provider, and for a copy of the relevant terms, by emailing data@automatedcreative.net.

9. How long we keep it

When a retention period ends, we delete the data or anonymise it so that you can no longer be identified from it.

10. Your rights

If you are in the UK or the European Economic Area, you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected, and incomplete data completed;
• have your data deleted, where we no longer have a good reason to keep it;
• restrict how we use your data while a concern is being resolved;
• object to our use of your data where we rely on legitimate interests, and to object to direct marketing at any time, which we will always honour;
• receive data you gave us in a portable, machine-readable form, or have it sent to another provider; and
• withdraw consent at any time, where we rely on it — this does not affect anything we did before you withdrew it.

To exercise any of these, email data@automatedcreative.net. We will respond within one month, and will tell you if we need longer because the request is complex. We may ask you to confirm your identity. Exercising your rights is free unless a request is excessive, in which case we will tell you before doing anything.

You can also complain to a data protection authority. In the UK that is the Information Commissioner’s Office, ico.org.uk/concerns, 0303 123 1113. In the EEA it is the authority in the country where you live or work. We would ask you to raise it with us first so we can try to put it right.

11. Automated decision-making and profiling

We do not make decisions about you by purely automated means that have a legal or similarly significant effect on you.

We do group business contacts into audiences for advertising and email — for example, people who have read a particular case study — using the website and advertising data described above. You can stop this by refusing advertising and analytics cookies, and by unsubscribing from our emails.

12. How we protect your data

We keep personal data in access-controlled cloud systems, restrict access to the people who need it for their job, use multi-factor authentication on our core systems, and require our providers to maintain appropriate security measures. We review these arrangements annually. No system is completely secure, so if something goes wrong that puts your data at risk we will tell you and the relevant authority where the law requires it.

13. Additional information for people in the United States

This section applies if you live in California, Colorado, Connecticut, Virginia, or another US state with a comprehensive privacy law, and it supplements everything above. Terms such as “personal information”, “sale”, “sharing”, “targeted advertising” and “sensitive personal information” have the meanings given in those laws.

Notice at collection. We collect the categories of personal information in the table below. We do not collect Social Security numbers, driver’s licence numbers, financial account details, precise geolocation, biometric data, or information about health, race, religion, sexual orientation or union membership, and we do not use or disclose sensitive personal information for any purpose that would require an opt-out.

Sources. Some of the identifiers and professional information above are bought from Perfect Pitch Lead Generation Limited, a business contact data provider, or taken from publicly available professional sources, rather than collected from you directly.

Sale and sharing. We do not sell personal information for money. We do “share” personal information for cross-context behavioural advertising, and engage in “targeted advertising”, when our advertising cookies are switched on: Google and LinkedIn receive online identifiers and browsing activity so we can show you relevant ads and measure them. The categories involved are identifiers, internet activity, professional information, approximate location and inferences. We do not knowingly sell or share the personal information of anyone under 16.

How to opt out. Click “Cookie settings” in the footer of any page and switch off the Advertising category. We also treat a Global Privacy Control signal from your browser as a valid opt-out, automatically and without you having to do anything else.

Your rights. Depending on your state, you have the right to know what personal information we hold and how we use it, to get a copy of it, to correct it, to delete it, to opt out of sale, sharing, targeted advertising and profiling, and to limit our use of sensitive personal information. We will not discriminate against you for exercising any of them — you will get the same service and the same prices.

How to exercise them. Email data@automatedcreative.net, or write to us at 20-22 Wenlock Road, London N1 7GU. We will confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days if we tell you why. We may need to verify your identity by matching the details you give us against our records. An authorised agent may act for you if they give us written permission signed by you, and we may ask you to confirm it directly.

Appeals. If we refuse your request and you live in a state that gives you a right of appeal, email data@automatedcreative.net with “Privacy appeal” in the subject line. We will respond within 45 days with our decision and our reasons, and tell you how to contact your state Attorney General if you are still unhappy.

Retention. We keep each category for the periods set out in section 9. We do not keep personal information for longer than is reasonably necessary for the purpose we collected it for.

14. Additional information for people in Canada

This section applies if you are in Canada and supplements everything above.

Accountability. The person responsible for the protection of personal information at Automated Creative, and for handling questions and complaints about it, is our Data Protection Lead, contactable at data@automatedcreative.net.

Consent. We ask for your consent to collect, use and disclose your personal information, except where the law allows or requires us to do so without it. For cookies and marketing, consent is express — you accept our cookie banner or opt in to our emails — and you can withdraw it at any time, subject to any legal or contractual obligations we still have to meet. Withdrawing consent to marketing will not affect any service we provide to your organisation.

Purposes. We use personal information only for the purposes described in this policy, or for a new purpose we tell you about and, where required, get your consent for.

Storage and transfer outside Canada and Quebec. We are based in the United Kingdom, and our providers operate in the United Kingdom, the European Union and the United States. Your personal information will therefore be stored and processed outside Canada, and outside Quebec, where it may be accessible to courts, law enforcement and national security authorities under the laws of those countries. Before transferring it we assess whether it will receive protection equivalent to that required under Quebec law, and we put contractual protections in place with each provider. You can ask us for details of that assessment.

Your rights. You can ask for access to the personal information we hold about you, ask us to correct it, ask us to stop using or disclosing it, withdraw your consent, and ask for the information you gave us in a structured, commonly used technological format. Email data@automatedcreative.net and we will respond within 30 days.

Automated processing. We do not use your personal information to make a decision about you based exclusively on automated processing. If that ever changes we will tell you at the time and explain the personal information used, the reasons and main factors involved, and your right to have the decision reviewed by a person.

Complaints. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, if you are in Quebec, to the Commission d’accès à l’information du Québec at cai.gouv.qc.ca.

15. Changes to this policy

We review this policy annually and whenever we change how we use personal data. If a change materially affects you, we will tell you by email or by a notice on our website before it takes effect. The date at the top shows when it last changed, and you can ask us for a previous version.

16. Contact us

Automated Creative Ltd, 20-22 Wenlock Road, London N1 7GU, United Kingdom

Privacy and data protection: data@automatedcreative.net

Anything else: hello@automatedcreative.net