Privacy & Data Protection Policy
Last updated December 2025
Established in 1770, John Jarrold advertised his honourable intentions as a shopkeeper and assured customers of his “utmost assiduity to merit their encouragement.” These are values we hold strong today throughout our company including our views on your data and privacy protection.
Yawn Marketing Agency respects your privacy and is committed to protecting your personal data. This privacy notice is to let you know how Yawn Marketing Agency processes and manages your personal data. This includes through your use of this website, what you tell us about yourself, what we learn about you by having you as a valued customer and the choices about what marketing you would like us to send you. This notice explains how we do this and tells you about your privacy rights and the law that protects you.
Yawn Marking Agency is the controller and responsible for your personal data (referred to as “Yawn”, “we”, “us”, or “our” in this privacy notice). This privacy notice is issued on behalf of Yawn Marketing Agency.
Our Privacy Promise
We promise:
• to keep your data safe and private;
• not to sell or give away your personal data; and
• to give you ways to manage and review your marketing choices at any time.
Data Protection Law
As well as our Privacy Promise, your privacy is protected by data protection and privacy law, including the UK version of the General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
The types of personal data we collect
“Personal data” means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
| Type of Personal Data | Description |
|---|---|
| Consents Data | Any permissions, consent or preferences that you give us. This includes how you want us to contact you. |
| Contact Data | Your email address, telephone number, home address and how we contact you. |
| Identity Data | Your first name, last name and title. |
| Technical Data | Details on your internet protocol (IP) address, specific device identifiers, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website. |
| Behavioural / Profile Data | Details about how you use our website, including purchases or orders made by you, your interests, preferences, feedback and survey responses. |
Where we collect personal data from
We collect personal data about you where you have supplied information directly to us, for example when you:
- make an enquiry on our website (on behalf of your business) to become a customer;
- when you contact us by telephone, email or post;
- when you send us a message using the form available on our website
To help us improve the service we offer, as you interact with our website we will also automatically collect Technical Data about your equipment, browsing action and patterns using cookies and other similar automated technologies.
Please also see our cookie policy at https://yawnmarketing.co.uk/privacy-and-cookies-policy/ for further details.
How we use your personal data
Data protection law says that we must have one or more lawful reasons to process your data. Typically, we rely on one or more of the following lawful bases for processing your personal data:
- Performance of a contract with you: When it is necessary to use your personal data to enter into a contract with you (or your business) or to perform a contract we have with you (or your business).
- Compliance with a legal obligation: When it is necessary to use your personal data to allow us to comply with a legal obligation.
- Our legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- Consent: We may use your personal data when you have given your consent to it.
We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
| What We Use Your Personal Data For | Type of Personal Data | Lawful Basis |
|---|---|---|
| To register your business as a customer |
|
|
| To enable you to order services from us on behalf of your business and to provide those services |
|
|
| To manage our relationship with you and your business (including dealing with your feedback and correspondence) |
|
|
| To develop new ways to meet our customers’ needs and to grow our business |
|
|
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
|
|
| To send you marketing emails about our products, services and any ongoing or upcoming promotional offers that we think may be of interest to you |
|
Consent where data is captured by way of cookies or you have positively opted in to sharing data for marketing purposes; and/or Legitimate Interests: Where you are an existing customer, we also rely on our legitimate interests to increase our customer engagement |
| To deliver bespoke training |
|
Performance of a contract with you Legitimate Interests: Where you are an existing customer, we also rely on our legitimate interests to increase our customer engagement |
| To enable us to deliver events and to accommodate any dietary preferences (including food allergies and religious requirements) and any other accessibility requirements you may have when attending one of our events |
|
|
Marketing
We may use your Contact Data, Behavioural and Technical Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us services from us and you have not opted out of receiving that marketing.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a purchase of products or services.
Who we share your personal data with
We may occasionally share your personal data with other like-minded companies that take privacy seriously where this is necessary to support our business. Where we do so, we require all third parties to respect the security of your personal data and to process it in accordance with applicable data protection law.
We do not permit third-party service providers to use your personal data for their own purposes. They are only allowed to process your personal data for the specific purposes we have instructed and in line with our documented instructions.
Sending personal data outside of the UK
Your personal data may be transferred for processing by our external third parties, some of whom may be based outside the UK. External third parties include service providers who provide IT and system administration services to us, and professional advisers who provide banking, legal, insurance, and accounting services to us.
We will only transfer your personal data to countries that provide an adequate level of protection for personal data (currently all countries in the European Economic Area have been found to provide such protection) or if the transfer is subject to appropriate safeguards as required under data protection laws in the UK or if a specific derogation applies.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
If you choose not to give personal data
We may need to collect personal data by law, or under the terms of a contract to supply goods and/or services.
If you choose not to give us this personal data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot supply the goods and/or services you have requested from us, and we would therefore have to cancel your order.
Any data collection that is optional will be made clear at the point of collection.
Data security
We employ appropriate security measures and safeguards to keep your personal information secure, including but not limited to the following:
- Network protection: Traffic between our systems and the public internet is filtered through enterprise firewalls.
- Encryption: Personal data is encrypted in transit using industry-standard protocols.
- Access controls: Systems are protected by strong authentication and role-based access so people only see the information needed for their job. Offices, venues, and data centres have physical access controls.
- Monitoring and testing: We monitor for vulnerabilities and suspicious activity and run regular penetration tests to check and strengthen our defences.
- Identity checks: We verify identity before sharing any personal information by phone or email to prevent disclosure to the wrong person.
- Administrative and physical safeguards: We apply organisational, technical, and physical measures across collection, storage, and disclosure of personal data.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Third-party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
How long we keep your personal data
We will limit the amount of personal data we hold in compliance with our data retention policy and reduce the amount of data held the older your data becomes. We may keep your data for as long as is legally necessary, for example to support our internal reporting purposes.
Your rights under data protection law
You have the following rights in relation to your personal data. These rights are not absolute, but we will always assess and respond to requests in line with applicable data protection law.
Right of access
You have the right to ask for a copy of the personal data we hold about you, and to understand how we use it.
Right to rectification
You can ask us to correct personal data that is inaccurate or incomplete.
Right to erasure
You can ask us to delete your personal data where there is no lawful reason for us to continue using it, for example where the data is no longer needed or processing is based on consent that has been withdrawn.
Right to restrict processing
You can ask us to limit how we use your data in certain circumstances, such as where you are challenging its accuracy or objecting to our use of it.
Right to object
You can object to our use of your personal data where we rely on legitimate interests, including for direct marketing. We will stop unless we have compelling lawful grounds to continue.
Right to data portability
Where processing is based on consent or contract and carried out by automated means, you can ask to receive the personal data you provided to us in a structured, commonly used, machine-readable format, or ask us to send it to another organisation where technically possible.
Right to withdraw consent
Where we rely on your consent, you can withdraw it at any time. This will not affect processing already carried out before consent was withdrawn.
Right to complain
If you have concerns about how we use your personal data, you have the right to complain to the Information Commissioner’s Office (ICO). We would, however, welcome the opportunity to address your concerns first.
How to exercise your rights
To exercise any of these rights, please contact us at: privacy@yawnmarketing.co.uk
We may ask for information to confirm your identity where necessary. We will respond within one month of receipt of your request, although this may be extended by up to two further months for complex requests or multiple requests, as permitted by law.
Cookies
We use “cookies” as a shorthand for cookies and similar technologies (for example, web beacons in emails and link-tracking). They help our site work, improve your experience, and provide insights so we can keep content relevant. Some also support advertising and email analytics.
You can block or delete cookies in your browser settings. Note: parts of our site may not work properly without them.
For details on types of cookies we use and how to control them, see our Cookie Policy on https://yawnmarketing.co.uk/privacy-and-cookies-policy/
Contact Us:
Email
privacy@yawnmarketing.co.uk
Telephone
01603 863150