Privacy Policy

Millarn LTD ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (millarn.com or any subdomain), contact us, or engage our services as a marketing agency.

We are the data controller for the personal data we process. Our registered office is:

Millarn LTD
International House, 50 Essex Street
London, WC2R 3JF
United Kingdom

You can contact us about this policy or your data rights at:
Email: [email protected]

1. What personal data we collect

We collect the following types of personal data:

• Contact and inquiry data: When you use our contact form, "Let's Talk" section, or email us, we collect your name, email address, phone number (if provided), company name (if provided), and any message or project details you share about your marketing needs.
• Website usage data: Technical information such as your IP address, browser type/version, device information, operating system, referring pages, pages visited, time/date of visits, and time spent on pages. This is collected automatically via cookies and similar technologies.
• Client/project data: If we work together, we may process additional personal data necessary for delivering marketing services (e.g., contact details of your team, business emails, feedback, campaign data, or content you provide for SEO, PR, content marketing, or strategy projects).

We do not collect special category data (e.g., health, race, religion) or data about children.

2. How we collect your personal data

• Directly from you (e.g., contact form submissions, emails, project communications, consultation calls).
• Automatically through your use of our website (via cookies, server logs, and third-party tools like Google Analytics).

3. How we use your personal data (purposes and legal bases)

We process your personal data for the following purposes and legal bases:

Purpose	Personal Data Used	Legal Basis (UK GDPR)
Respond to inquiries and provide quotes/information	Contact details, message content	Legitimate interests (to run our business and communicate with potential clients) / Steps prior to a contract
Deliver our marketing services (SEO, PR, Strategy, Content Marketing)	Contact/project details	Performance of a contract (with clients) / Legitimate interests (for prospects)
Improve and secure our website (analytics, performance, security)	Usage/technical data	Legitimate interests (to understand site performance, prevent abuse, and improve user experience)
Comply with legal obligations (e.g., tax, contracts)	Any relevant data	Legal obligation
Defend legal claims or protect rights	Any relevant data	Legitimate interests

We do not use your data for automated decision-making or profiling.

4. Sharing your personal data

We do not sell your personal data. We only share it in limited circumstances:

• With service providers acting as our processors (under strict contracts):
  • Google Analytics (for website analytics; data may be processed in the US under UK-approved mechanisms).
  • Our hosting provider and other essential IT/tools (e.g., email providers, CRM software).
• If required by law, court order, or to protect our rights/safety.
• In the event of a business sale/transfer (data would transfer under the same protections).

All third parties are required to respect the security of your data and treat it only for the purposes we instruct.

5. International data transfers

Some of our processors (e.g., Google) are based outside the UK, including in the US. Where applicable, we ensure appropriate safeguards are in place, such as the UK Extension to the EU-US Data Privacy Framework or other approved mechanisms.

6. Data security

We implement reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse (e.g., secure hosting, encryption where appropriate, access controls). However, no internet transmission is 100% secure.

7. How long we keep your personal data

We keep data only as long as necessary:

• Inquiry/contact form data: Up to 24 months (unless you become a client or request deletion).
• Client project data: For the duration of our contract plus up to 7 years (for legal/tax purposes).
• Website analytics data: Typically 14–26 months (Google Analytics default; anonymised where possible).

We review data periodically and securely delete or anonymise it when no longer needed.

8. Your rights under UK GDPR

You have the following rights (subject to exceptions):

• Access your data.
• Correct inaccurate data.
• Erase your data (right to be forgotten).
• Restrict processing.
• Object to processing (especially for legitimate interests).
• Data portability.
• Withdraw consent (where we rely on it, though we mainly use other bases).

To exercise any right, email [email protected]. We will respond within one month (extendable if complex). You can also complain to the Information Commissioner's Office (ICO): www.ico.org.uk.

9. Cookies and similar technologies

Our website uses cookies and similar technologies for essential functions and analytics (Google Analytics). We do not use advertising cookies.

For more details, please refer to our Cookie Policy (or contact us for information on managing cookies via your browser settings).

10. Changes to this policy

We may update this policy from time to time. Changes will be posted here with the updated date. Significant changes will be notified via the website or email if appropriate.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact:
Email: [email protected]

Thank you for trusting Millarn LTD with your information.

© Millarn LTD 2026