Legal
Please note: This policy is designed to meet UK GDPR requirements and should be reviewed by a qualified solicitor before relying on it for compliance purposes. It covers data collected through this website only.
Harmonic London is a B2B digital marketing agency based in London, United Kingdom. We operate the website harmoniclondon.com.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Harmonic London is the data controller for personal data collected through this website.
You can contact us at hello@harmoniclondon.com.
We are not currently required to appoint a Data Protection Officer, but any data-related queries can be directed to the address above.
We only collect data that is necessary for the purposes described in this policy. Depending on how you interact with our website, we may collect:
We do not knowingly collect data from individuals under the age of 18. This website is intended for business professionals.
When you submit an enquiry or strategy brief through our website, the data you enter is collected and stored in our CRM system (HubSpot). This includes both the quick contact form and the multi-step strategy brief.
We use cookies and similar technologies to understand how visitors use our site. See section 9 for full details.
Our website uses HubSpot for form processing and CRM functionality. HubSpot may collect technical data about your visit as part of its standard operation. HubSpot's own privacy policy is available at legal.hubspot.com/privacy-policy.
We process your personal data on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries and strategy briefs you submit | Legitimate interests (responding to a direct business enquiry) |
| Managing our ongoing client relationship | Contract (where we enter into an engagement with you) |
| Sending marketing communications about our services | Consent (where you have opted in) or legitimate interests (existing business contacts) |
| Improving our website and understanding how it is used | Legitimate interests |
| Complying with legal obligations | Legal obligation |
Where we rely on legitimate interests, we have considered the impact on your rights and freedoms and are satisfied that our interests do not override them. You have the right to object to processing carried out on this basis at any time (see section 8).
We do not keep your data for longer than is necessary. Our standard retention periods are:
| Data type | Retention period |
|---|---|
| Enquiry and contact form data (non-client) | 2 years from last contact |
| Client contact and project records | 7 years from end of engagement (for legal and tax purposes) |
| Marketing communication opt-in records | Until consent is withdrawn or 3 years of inactivity |
| Website analytics data | 26 months (standard analytics retention) |
When data reaches the end of its retention period, it is securely deleted or anonymised.
Most of your data is processed within the UK or EU. Where data is transferred outside of these regions (for example, to Google services based in the USA), we ensure appropriate safeguards are in place, including:
You can request details of the specific safeguards in place for any transfer by contacting us.
Under UK GDPR, you have the following rights in relation to your personal data. There is no charge for exercising these rights and we will respond within one calendar month.
You can request a copy of the personal data we hold about you.
You can ask us to correct inaccurate or incomplete data.
You can ask us to delete your data where there is no legitimate reason for us to continue processing it.
You can ask us to pause processing of your data in certain circumstances.
You can request your data in a structured, machine-readable format to transfer elsewhere.
You can object to processing based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
We do not currently make decisions about you using solely automated processing.
To exercise any of these rights, contact us at hello@harmoniclondon.com. We may need to verify your identity before processing your request.
If you are unhappy with how we have handled your personal data, please contact us in the first instance at hello@harmoniclondon.com. We will do our best to resolve your concern promptly.
If you remain dissatisfied, you have the right to lodge a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, SK9 5AF
For any questions about this privacy policy or how we handle your data:
Harmonic London
London, United Kingdom
Email: hello@harmoniclondon.com
Website: harmoniclondon.com
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of this website after changes are posted constitutes your acceptance of the updated policy.
Material changes that affect how we use your data will be communicated more prominently where required by law.