Privacy Policy

Privacy Policy

Privacy Policy

Last updated: AUGUST 2026

1. Interpretation and Defined Terms

1. Interpretation and Defined Terms

In this Privacy Policy, the following terms shall have the meanings set out below:

  • “the Company” means Tiny Team Marketing Ltd, a company registered in England and Wales (Company Number: 17104454), whose registered address is Forma House, 40 Bowling Green Lane, London, England, EC1R 0NE.

  • “the Website” means the website located at www.tinyteammarketing.com.

  • “the User” means any individual who accesses or uses the Website.

  • “Personal Data” has the meaning given to it in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  • “Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.


The Company is the data controller in respect of Personal Data collected through the Website. Correspondence may be directed to: gemmagarcia@tinyteammarketing.com.

2. Personal Data Collected by the Company

2. Personal Data Collected by the Company

The Company collects Personal Data from Users in the following circumstances:

2.1 Contact Enquiries. Where a User submits an enquiry via the contact form on the Website or contacts the Company directly by email, the following Personal Data may be collected: full name, email address, telephone number, and any further information voluntarily included in the User’s message.

2.2 Website Usage Data. The Company’s website platform (Framer) and any analytics tools in use collect the following data automatically upon the User’s visit to the Website: IP address, browser type and version, pages accessed and time spent on the Website, and referring URL or traffic source. This data may constitute Personal Data where it can be used to identify an individual, directly or indirectly.

3. Purposes and Lawful Bases for Processing

3. Purposes and Lawful Bases for Processing

The Company processes Personal Data for the following purposes and on the following lawful bases under UK GDPR:

3.1 Responding to Enquiries. Personal Data submitted via the contact form or by email is processed for the purpose of responding to the User’s enquiry and managing the pre-contractual relationship. The lawful basis for this Processing is the Company’s legitimate interests (Article 6(1)(f) UK GDPR) in responding to business communications.

3.2 Website Analytics and Improvement. Website usage data is processed for understanding how the Website is used and improving its content and functionality. The lawful basis is the Company’s legitimate interests (Article 6(1)(f) UK GDPR) in maintaining and improving its online presence.

3.3 Performance of a Contract. Where a User engages the Company for services, Personal Data will be processed as necessary for the performance of the contract between the Company and the client. The lawful basis is Article 6(1)(b) UK GDPR.

3.4 Compliance with Legal Obligations. The Company may process Personal Data where required to comply with a legal obligation. The lawful basis is Article 6(1)(c) UK GDPR.

4. Disclosure of Personal Data to Third Parties

4. Disclosure of Personal Data to Third Parties

The Company does not sell Personal Data to third parties. The Company may share Personal Data with third-party service providers engaged to support its operations, including Framer Inc. for website hosting and platform services; email and productivity service providers such as Google Workspace; and project management and document storage platforms used in the delivery of client services. All third-party processors are required to handle Personal Data in accordance with applicable data protection law and are subject to appropriate contractual safeguards. Where a third-party processor is located outside the United Kingdom, the Company ensures that appropriate transfer mechanisms are in place in accordance with UK GDPR Chapter V. The Company may also disclose Personal Data where required to do so by law, court order, or the instructions of a competent regulatory authority.

5. Retention of Personal Data

5. Retention of Personal Data

The Company retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Contact enquiries are retained for up to two (2) years from receipt, unless the User requests earlier deletion. Client records, including communications and project materials, are retained for six (6) years from the conclusion of the engagement, in accordance with UK legal and tax requirements. Website usage data is subject to the retention periods applied by Framer and any analytics tools in use. Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised.

6. Rights of Data Subjects

6. Rights of Data Subjects

Under UK GDPR, Users have the following rights in relation to their Personal Data held by the Company:

  • Right of Access (Article 15), to request a copy of Personal Data;

  • Right to Rectification (Article 16), to request correction of inaccurate or incomplete Personal Data;

  • Right to Erasure (Article 17), to request deletion in certain circumstances;

  • Right to Restriction of Processing (Article 18), to request limits on use in certain circumstances;

  • Right to Data Portability (Article 20), to receive Personal Data in a structured, commonly used, machine-readable format;

  • Right to Object (Article 21), to object to Processing carried out on the basis of legitimate interests.


To exercise these rights, contact gemmagarcia@tinyteammarketing.com. The Company will respond within one (1) calendar month of receipt. The User also has the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by telephone on 0303 123 1113.

7. Cookies

7. Cookies

The Website uses cookies and similar tracking technologies. A cookie is a small text file placed on the User’s device upon visiting a website. The Website uses both strictly necessary cookies, which are required for the Website to function, and non-essential cookies, including analytical and performance cookies. Where non-essential cookies are used, the Company will seek the User’s consent prior to placing such cookies on the User’s device, in accordance with the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR). The User may withdraw consent or manage cookie preferences at any time via the cookie preference centre on the Website, or through their browser settings. For full details of cookies in use, including their names, purposes, and duration, please refer to the Company’s Cookie Policy.

8. Links to Third-Party Websites

8. Links to Third-Party Websites

The Website may contain hyperlinks to third-party websites. The Company has no control over the content or privacy practices of those websites and accepts no responsibility for them. The User is advised to review the privacy policy of any third-party website before submitting Personal Data to it.

9. Amendments to this Privacy Policy

9. Amendments to this Privacy Policy

The Company reserves the right to amend this Privacy Policy at any time. Where material changes are made, the Company will update the effective date shown at the top of this document. The User’s continued use of the Website following any such amendment shall constitute acceptance of the revised Privacy Policy.

10. Governing Law

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of England and Wales. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

11. Contact

11. Contact

Any questions, requests, or complaints regarding this Privacy Policy or the Company’s data protection practices should be directed to: Gemma Garcia Gamble, Tiny Team Marketing Ltd, gemmagarcia@tinyteammarketing.com.

Book a Tiny Team Session