Privacy Policy

Last updated: April 23, 2026 · AQmedia, United Kingdom

Compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018

1. Introduction

AQmedia ("we", "our", or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or engage our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

AQmedia acts as the data controller in respect of your personal data. If you have any questions or concerns about this policy, please contact us using the details in section 11 below.

Please read this policy carefully. If you do not agree with its terms, please discontinue use of our site.

2. Information We Collect

2.1 Information You Provide

Contact & enquiry data — name, email address, phone number, company name, and project details submitted via our contact form
Account data — if you create a client account, we collect login credentials and billing details
Communications — emails, messages, and other correspondence you send us

2.2 Automatically Collected Information

Log data — IP address, browser type, referring URLs, pages viewed, and timestamps
Cookies & tracking — we use first-party cookies for session management and analytics (see section 5 below)
Analytics — we use Vercel Analytics (privacy-first, no personal data stored) to understand traffic patterns

3. Lawful Basis for Processing

Under the UK GDPR, we are required to identify a lawful basis for processing your personal data. We rely on the following:

Contract performance — processing necessary to fulfil a contract with you or take pre-contractual steps at your request (e.g. delivering agreed services, processing payments)
Legitimate interests — where processing is in our legitimate business interests and does not override your rights (e.g. improving our services, portfolio display, fraud prevention)
Legal obligation — where we are required to process data to comply with UK law
Consent — where you have given clear, freely given, and withdrawable consent (e.g. for marketing communications)

4. How We Use Your Information

We use the data we collect to:

Respond to enquiries and deliver requested services
Process payments and send invoices
Send project updates, proposals, and administrative communications
Improve our website, services, and user experience
Comply with legal obligations and enforce our agreements

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Sharing of Information

We may share your personal data with:

Service providers — trusted partners (e.g. payment processors, hosting providers) who assist in operating our business and who are bound by data processing agreements consistent with UK GDPR requirements
Legal and regulatory authorities — when required by law, court order, or a competent authority in the UK
Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred as a business asset, subject to equivalent data protection obligations

We do not transfer personal data outside of the UK or the European Economic Area (EEA) without ensuring that adequate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).

6. Cookies

We use the following types of cookies:

Essential cookies — necessary for the website to function correctly (e.g. session management, login state). These do not require your consent.
Analytics cookies — anonymised cookies that help us understand how visitors use our site. We will request your consent before placing these cookies.

You may withdraw consent for non-essential cookies at any time via your browser settings or our cookie preference centre. Please note that disabling certain cookies may affect site functionality.

For full details, please refer to our Cookie Policy (available on request).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by UK law. Specifically:

Contact and enquiry data is retained for up to 3 years unless you request deletion earlier
Client and billing data is retained for 6 years following the end of the engagement, in accordance with HMRC requirements

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights Under UK GDPR

As a UK data subject, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you (Subject Access Request)
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data ('right to be forgotten'), where no overriding legal obligation to retain it exists
Right to restriction — to request that we limit our processing of your data in certain circumstances
Right to data portability — to receive your data in a structured, commonly used, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing purposes
Rights in relation to automated decision-making — to request human review of any automated decisions that significantly affect you

To exercise any of these rights, please contact us at privacy@aqmedia.com. We will respond within one calendar month, as required by UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Security

We implement industry-standard technical and organisational measures — including TLS encryption, access controls, and regular security reviews — to protect your personal data against unauthorised access, disclosure, alteration, or destruction. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you without undue delay.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us immediately and we will take steps to delete that data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Where changes are material, we will provide prominent notice on our website and, where appropriate, notify you directly. The 'Last Updated' date at the top of this page will always reflect the most recent revision.

12. Contact Us & Data Controller Details

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact our Data Controller:

Email: privacy@aqmedia.com
Address: AQmedia, United Kingdom

You may also contact the Information Commissioner's Office (ICO) if you have concerns about how we handle your data:

Website: ico.org.uk
Helpline: 0303 123 1113