PRIVACY POLICY

WHO WE ARE

Band of Merry is a B2B creative agency specialising in video-first content production and social media management. We help businesses generate qualified leads through strategic video content.

For the purposes of UK data protection law, Band of Merry is the data controller in respect of the personal data we collect through this website.

WHAT DATA WE COLLECT

We collect personal data only when you voluntarily provide it to us — for example, by completing a contact or callback request form on this website. The data we collect may include:

• Your name
• Your email address
• Your company name
• Your phone number (if provided)
• Preferred callback date and time
• Any other information you choose to include in your message

We do not collect sensitive personal data (such as health information, financial data, or information about protected characteristics) through this website.

HOW WE USE YOUR DATA

We use the personal data you provide for the following purposes:

• To respond to your enquiry or contact request
• To schedule and carry out a callback at your preferred time
• To send you relevant information about our services, where you have consented to receive it
• To improve our website and services based on how people interact with us

Our lawful basis for processing your data is legitimate interests (responding to business enquiries) and consent (marketing communications, where applicable). You can withdraw consent at any time by contacting us.

WHERE YOUR DATA IS STORED

The personal data you submit through our contact forms is stored and processed using HubSpot, a CRM and marketing platform. HubSpot is certified under the EU–US Data Privacy Framework and implements appropriate safeguards for international data transfers.

HubSpot's servers may be located outside the UK or European Economic Area. Where this is the case, HubSpot relies on Standard Contractual Clauses approved by the relevant authorities to ensure your data receives an equivalent level of protection.

You can read HubSpot's privacy policy at legal.hubspot.com/privacy-policy.

RETENTION PERIODS

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Enquiry data — retained for up to 2 years from last contact, unless an ongoing business relationship is established
• Marketing contacts — retained until you unsubscribe or request deletion
• Callback request data — retained for up to 6 months after the scheduled call

When data is no longer needed, we delete it from HubSpot and any other systems where it may be held.

YOUR RIGHTS

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data in certain circumstances
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a portable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at hello@bandofmerry.com. We will respond within one month.

SECURITY

We take the security of your personal data seriously. We use HTTPS encryption for all data transmitted through this website, and our third-party processor (HubSpot) maintains industry-standard security measures including access controls, encryption at rest, and regular security audits.

No method of transmission over the internet is completely secure. While we take reasonable precautions to protect your data, we cannot guarantee absolute security.

COOKIES

This website uses a small number of cookies to improve your experience:

• Theme preference — a localStorage entry (not a cookie) that remembers whether you prefer light or dark mode. This data never leaves your device.
• HubSpot analytics cookies — if you interact with our forms, HubSpot may set cookies to track form submissions and support their platform functionality.

We do not use advertising cookies, tracking pixels, or any third-party analytics on this site beyond HubSpot's form-related functionality.

COMPLAINTS

If you have concerns about how we handle your personal data, please contact us first at hello@bandofmerry.com and we will do our best to resolve the matter.

If you remain unsatisfied, you have the right to lodge a complaint with the UK's data protection supervisory authority:

CHANGES TO THIS POLICY

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of this website after any changes constitutes your acceptance of the updated policy.