The Creative Composite Agency Ltd
Last Updated: 18th November 2025

1. Introduction

This Privacy Policy explains how The Creative Composite Agency Ltd (“we”, “us”, “our”) collects, uses and protects your personal data. We are committed to being transparent and handling your information securely in line with the UK General Data Protection Regulation (UK GDPR).

By using our website, submitting your details, or working with us, you agree to the practices set out below.

If you have any questions, please get in touch using the contact details at the end of this page.

2. Who We Are

The Creative Composite Agency Ltd
Registered Address: Office 11, Quebec Building, Salford, M3 7DU
Company Number: 09334757
Email: info@thecreativecomposite.co.uk
Phone: 0161 884 3301

We are the data controller, which means we determine how and why your personal data is used.

3. Information We Collect

We collect information in the following ways:

Information you provide directly

When you submit a form, sign up for emails, download a resource or get in touch, you may provide:

  • Name
  • Email address
  • Phone number
  • Company name
  • Job title
  • Message or enquiry information

    • Information collected automatically

    When you visit our website, we automatically collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited and time spent
  • Click behaviour
  • Cookies and tracking identifiers

    • This helps us understand how people use our website.

    Information received from third parties
    We may receive information from:

  • Advertising platforms (Meta/Facebook, Google Ads)
  • Analytics tools (Google Analytics)
  • CRM and form tools (ActiveCampaign)
  • Public sources (LinkedIn, business websites)

    • We only collect what is necessary for our services.

    4. How we use your information

    We use personal data for the following purposes:

    To respond to enquiries
    If you contact us, we use your details to reply and discuss your needs.
    Legal basis: Performance of a contract or steps taken before entering one.

    To deliver our services
    If you become a client, we use your information to manage your account and deliver marketing services.
    Legal basis: Performance of a contract.

    To send marketing emails
    You may receive newsletters, resources or updates if you have opted in or if you are a business contact who would reasonably expect communication. You can unsubscribe at any time.
    Legal basis: Consent or legitimate interests.

    To improve our website and advertising
    Tools such as Google Analytics, Google Tag Manager and Meta Pixel help us understand behaviour and run relevant advertising.
    Legal basis: Legitimate interests and, for non-essential cookies, consent.

    To manage internal administration
    Record keeping, compliance, reporting and business improvement.
    Legal basis: Legitimate interests.

    We do not sell your data.

    5. Cookies & Tracking Technologies

    Our website uses cookies and similar technologies to improve performance and personalise marketing. These include:

  • Google Analytics – to understand website usage
  • Google Tag Manager – to manage tracking scripts
  • Meta (Facebook) Pixel – for advertising and measurement
  • ActiveCampaign tracking – to monitor email engagement and form submissions

    • You can accept or decline non-essential cookies through our cookie pop-up. For full details, see our Cookie Policy.

    6. How your information is shared

    We share your personal data with trusted third-party service providers who help us operate and improve our business. These include:

  • Website hosting providers
  • ActiveCampaign (CRM & email marketing platform)
  • Google Services (google Analytics / Tag Manager)
  • Meta advertising and tracking tools
  • ManyChat (automated messaging and lead follow-up
  • Payment processors (e.g., Stripe, GoCardless)
  • Cloud storage and file-management platforms
  • Professional contractors who support our work

    • These providers may process personal data as independent controllers or processors, depending on how their services operate.
    They only have access to the information necessary to perform their functions, and they must handle that information securely and lawfully.

    7. International Data Transfers

    Some of our service providers store or process data outside the UK and EEA (for example, ActiveCampaign and Meta).

  • When this happens, we ensure that appropriate safeguards are in place, such as:
  • UK adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Additional security measures recommended by the ICO

    • We only work with organisations that meet strict data protection standards.

    8. How Long We Keep Your Data

    We retain personal data only for as long as it is needed for the purposes for which it was collected.

  • Enquiry information: retained for as long as it remains relevant for business purposes, up to a maximum of 36 months after the last interaction.
  • Client data: retained for the duration of the contract and for up to 6 years afterwards to meet legal and contractual obligations.
  • Marketing data: retained until you unsubscribe or request deletion.
  • Analytics data: typically retained for up to 26 months (Google default).
  • Financial and invoice data: retained for 6 years in line with UK accounting requirements.

    • After the retention period expires, personal data is securely deleted or anonymised.

    9. Your Rights

    Under the UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete information
  • Request deletion (“right to be forgotten”)
  • Restrict how your data is used
  • Object to processing (including marketing)
  • Transfer your data to another provider
  • Withdraw consent at any time
  • Complain to the Information Commissioner’s Office (ICO)
  • To exercise any of these rights, email us at info@thecreativecomposite.co.uk

    • 10. Security

    We take appropriate technical and organisational measures to protect your data, including:

  • SSL encryption
  • Secure servers
  • Access controls
  • Confidentiality agreements
  • Data minimisation
  • Regular security reviews
  • If a data breach occurs, we will notify the ICO and affected individuals where legally required.

    • 11. External Links

    Our website may contain links to other websites.
    We do not control their content or privacy practices, so we recommend reviewing their policies before providing personal information.

    12. Updates to this policy

    We may update this Privacy Policy from time to time.
    The “Last Updated” date at the top reflects the latest version.
    Any significant changes will be posted on this page.

    13. Contact Us

    For questions about this policy or to exercise your rights, please contact:

    The Creative Composite Agency Ltd
    Email: info@thecreativecomposite.co.uk
    Address: Office 11, Quebec Building, Salford, M3 7DU