Privacy Policy
Last updated: April 2026
1. Interpretation and Defined Terms
In this Privacy Policy, the following terms shall have the meanings set out below:
"the Company" means Tiny Team Marketing Ltd, a company registered in England and Wales (Company Number: 17104454), whose registered address is Forma House, 40 Bowling Green Lane, London, England, EC1R 0NE.
"the Website" means the website located at www.tinyteammarketing.com.
"the User" means any individual who accesses or uses the Website.
"Personal Data" has the meaning given to it in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
The Company is the data controller in respect of Personal Data collected through the Website. Correspondence may be directed to: gemmagarcia@tinyteammarketing.com.
2. Personal Data Collected by the Company
The Company collects Personal Data from Users in the following circumstances:
2.1 Contact Enquiries
Where a User submits an enquiry via the contact form on the Website or contacts the Company directly by email, the following Personal Data may be collected:
Full name
Email address
Telephone number
Any further information voluntarily included in the User's message
2.2 Website Usage Data
The Company's website platform (Squarespace) and any analytics tools in use collect the following data automatically upon the User's visit to the Website:
IP address
Browser type and version
Pages accessed and time spent on the Website
Referring URL or traffic source
This data may constitute Personal Data where it can be used to identify an individual, directly or indirectly.
3. Purposes and Lawful Bases for Processing
The Company processes Personal Data for the following purposes and on the following lawful bases under UK GDPR:
3.1 Responding to Enquiries
Personal Data submitted via the contact form or by email is processed for the purpose of responding to the User's enquiry and managing the pre-contractual relationship. The lawful basis for this Processing is the Company's legitimate interests (Article 6(1)(f) UK GDPR) in responding to business communications.
3.2 Website Analytics and Improvement
Website usage data is processed for the purpose of understanding how the Website is used and improving its content and functionality. The lawful basis for this Processing is the Company's legitimate interests (Article 6(1)(f) UK GDPR) in maintaining and improving its online presence.
3.3 Performance of a Contract
Where a User engages the Company for services, Personal Data will be processed as necessary for the performance of the contract between the Company and the client. The lawful basis for this Processing is Article 6(1)(b) UK GDPR.
3.4 Compliance with Legal Obligations
The Company may process Personal Data where required to do so in order to comply with a legal obligation. The lawful basis for this Processing is Article 6(1)(c) UK GDPR.
4. Disclosure of Personal Data to Third Parties
The Company does not sell Personal Data to third parties. The Company may share Personal Data with third-party service providers engaged to support its operations, including:
Squarespace Inc. — website hosting and platform services
Email and productivity service providers (such as Google Workspace)
Project management and document storage platforms used in the delivery of client services
All third-party processors are required to handle Personal Data in accordance with applicable data protection law and are subject to appropriate contractual safeguards. Where a third-party processor is located outside the United Kingdom, the Company ensures that appropriate transfer mechanisms are in place in accordance with UK GDPR Chapter V.
The Company may also disclose Personal Data where required to do so by law, court order, or the instructions of a competent regulatory authority.
5. Retention of Personal Data
The Company retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The Company's standard retention periods are as follows:
Contact enquiries: retained for a period of up to two (2) years from the date of receipt, unless the User requests earlier deletion
Client records, including communications and project materials: retained for six (6) years from the conclusion of the engagement, in accordance with UK legal and tax requirements
Website usage data: subject to the retention periods applied by Squarespace and any analytics tools in use
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised.
6. Rights of Data Subjects
Under UK GDPR, Users have the following rights in relation to their Personal Data held by the Company:
Right of Access (Article 15): the right to request a copy of the Personal Data held by the Company.
Right to Rectification (Article 16): the right to request correction of inaccurate or incomplete Personal Data.
Right to Erasure (Article 17): the right to request deletion of Personal Data in certain circumstances.
Right to Restriction of Processing (Article 18): the right to request that the Company limit its use of Personal Data in certain circumstances.
Right to Data Portability (Article 20): the right to receive Personal Data in a structured, commonly used, machine-readable format.
Right to Object (Article 21): the right to object to Processing carried out on the basis of the Company's legitimate interests.
To exercise any of the above rights, the User should contact the Company at: gemmagarcia@tinyteammarketing.com. The Company will respond to any such request within one (1) calendar month of receipt, in accordance with its obligations under UK GDPR.
The User also has the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom, at www.ico.org.uk or by telephone on 0303 123 1113.
7. Cookies
The Website uses cookies and similar tracking technologies. A cookie is a small text file placed on the User's device upon visiting a website. The Website uses both strictly necessary cookies, which are required for the Website to function, and non-essential cookies, including analytical and performance cookies.
Where non-essential cookies are used, the Company will seek the User's consent prior to placing such cookies on the User's device, in accordance with the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR). The User may withdraw consent or manage cookie preferences at any time via the cookie preference centre on the Website, or through the settings of their browser.
For full details of the cookies in use on the Website, including their names, purposes, and duration, please refer to the Company's Cookie Policy
8. Links to Third-Party Websites
The Website may contain hyperlinks to third-party websites. The Company has no control over the content or privacy practices of those websites and accepts no responsibility for them. The User is advised to review the privacy policy of any third-party website before submitting Personal Data to it.
9. Amendments to this Privacy Policy
The Company reserves the right to amend this Privacy Policy at any time. Where material changes are made, the Company will update the effective date shown at the top of this document. The User's continued use of the Website following any such amendment shall constitute acceptance of the revised Privacy Policy.
10. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of England and Wales. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.
11. Contact
Any questions, requests, or complaints regarding this Privacy Policy or the Company's data protection practices should be directed to:
Gemma Garcia Gamble
Tiny Team Marketing Ltd