Privacy Policy

Dino Media Ltd is a digital agency registered in England and Wales (Company No. 12345678), with our registered office at 1 Park Street, Bristol, BS1 5PB. We are the data controller for any personal data we collect through this website and our services.

If you have any questions about this policy or how we handle your personal data, please contact us at privacy@dino.media.

We may collect and process the following personal data:

• Contact information — name, email address, telephone number and company name when you complete a contact form, request a health check, or email us directly. • Usage data — information about how you use our website, including your IP address, browser type, pages visited and time spent on each page (via Google Analytics 4). • Cookie data — see our Cookie Policy for full details of the cookies we use. • Communication data — any information you choose to share with us in emails, phone calls or meetings.

We use your personal data to:

• Respond to enquiries and provide the services you have requested. • Send you project updates, proposals and invoices. • Improve our website and services using aggregated, anonymised analytics. • Comply with our legal and regulatory obligations. • Send marketing communications where you have given us explicit consent (you can opt out at any time).

We process your personal data under the following legal bases as defined in the UK GDPR:

• Contract — processing necessary to perform a contract you have entered into with us. • Legitimate interests — responding to enquiries and improving our services. • Consent — for marketing communications and non-essential cookies. • Legal obligation — where we are required to retain records by law.

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and contact data — up to 2 years after last contact. • Client project data — 7 years for accounting and legal purposes. • Marketing consent records — until you withdraw consent. • Website analytics — 26 months (Google Analytics default retention).

We do not sell your personal data. We may share it with trusted third-party service providers who act as data processors on our behalf, including:

• Google (Analytics, Ads, Workspace) • HubSpot (CRM and marketing automation) • Mailchimp (email marketing) • Our hosting providers (AWS, Vercel)

All third parties are contractually obligated to handle your data securely and only for the purposes we specify.

Under the UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you. • Rectification — ask us to correct inaccurate data. • Erasure — ask us to delete your data in certain circumstances. • Restriction — ask us to limit how we process your data. • Portability — receive your data in a machine-readable format. • Object — object to processing based on legitimate interests or for direct marketing. • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@dino.media. We will respond within 30 days.

We use cookies and similar technologies on our website. For full details of the cookies we use, why we use them, and how to manage your preferences, please see our Cookie Policy.

We may update this privacy policy from time to time. The most current version will always be available at this URL, with the effective date shown below. We will notify you of material changes by email where we have your contact details.

For any privacy-related queries, contact us at privacy@dino.media or by post at Dino Media Ltd, 1 Park Street, Bristol, BS1 5PB.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.