We understand that you care about your personal data and how it is used, and we want you to trust that And Three Creative uses your personal data lawfully. This Privacy Notice will help you understand what personal data we collect, why we collect it and what we do with it.

We act as data controllers for purposes of the UK GDPR and Data Protection Act 2018 and are responsible for any data you provide to us directly and for the manner in which it is processed. 

Who are we?

And Three Creative are a high-quality marketing and creative agency based in the UK. You can contact us with any queries at hello@andthreecreative.co.uk

What personal data is being collected?

Personal data is any information about an individual from which that person can be identified. 

We will collect, store, and use the following types of personal information about you:

• Full name and title
• Contact information (i.e. home or billing address, email address, telephone number)
• Financial details (i.e. bank account or credit card details)

How is your personal data collected?

We collect the personal information directly from you or in some cases from a third party. It is collected using the following methods:

• Through our website enquiry form
• You contact us by email, phone, text messages or social media
• In person e.g. at tradeshows

How will we use your data?

 We collect, process and disclose your personal data for the following purposes:

• To carry out our business services
• To process your payments
• To answer your enquiries
• To develop and improve our services, and the functionality of our websites;

When we collect and use your personal data for purposes mentioned above or for other purposes, we will inform you before or at the time of collection.

What are our legal bases for processing for the personal data?

 Contractual obligations   - In order for us to fulfil our contractual obligations to you we will need to use your personal data. 

Legal or regulatory obligation  - We must comply with a number of statutory provisions when providing our services, such as providing information to HMRC.

Legitimate Interests  - For the interest of our business enabling us to give you the best service and the most secure experience such as sending you information of a new offer.

Consent   - We will request your consent if we collect your personal data for certain purposes. For example, you may have provided consent to receive marketing updates. You may withdraw consent at any time by contacting us to update your preferences.

Who will data be shared with?

We will only transfer and disclose your personal data to third-parties:

• To comply with a legal obligation;
• Where a third party needs the information to assist with your contract;
• When an applicable law requires it;
• At the request of governmental authorities conducting an investigation;
• To detect and protect against fraud, or any technical or security vulnerabilities;

How long do we keep your personal data for?

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

International Transfers of data

We will only transfer data outside of the United Kingdom and the EEA to a country in respect of which there is an adequacy decision from the UK.  

Data Security and Confidentiality

We use appropriate technical and organisational measures to keep personal data secure against unauthorised or unlawful processing, and against accidental loss, destruction or damage. For example 

• Our staff have received data protection training
• Access to your personal data is restricted
• Any hard copies are securely stored.
• Internal systems and networks are regularly tested.

Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

Further information

 Contact us 

If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact our Privacy Officer:

Email - hello@andthreecreative.co.uk

Alternatively, you can make a complaint to the Information Commissioner’s Office:  

• Report a concern online at https://ico.org.uk/concerns/
• Call 0303 123 1113
• Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF