Privacy policy
Last updated: 29 August 2026
| Plain-English summary. Carron Media uses personal information to respond to enquiries, provide and improve its services, keep its systems secure, meet legal duties and—where permitted—communicate about relevant services. Carron Media does not sell personal information. |
1. Who we are
Carron Media Ltd is the controller of personal information described in this notice. We are a private limited company registered in England and Wales under company number 06836521. Our registered office is 21 Boundary Road, Wooburn Green, High Wycombe, Buckinghamshire, England, HP10 0DH.
You can contact us about privacy, your rights or a data-protection complaint at privacy@carronmedia.com or by writing to the registered office above. Please mark correspondence “Data protection”.
2. Scope of this notice
This notice covers personal information we handle about visitors to carronmedia.com, people who contact us, client and prospective-client contacts, supplier and professional contacts, and people who interact with our business communications. It also explains the website technologies that may collect information. When Carron Media processes personal information solely on a client’s instructions while providing hosting, support or development services, the client is normally the controller and its privacy notice applies to that processing.
3. Information we collect
- Contact and identity information, such as your name, job title, company, email address, telephone number and postal address.
- Enquiry and relationship information, including project details, correspondence, meeting notes, proposals, service requirements and feedback.
- Contract, account and transaction information, including billing contacts, invoices and payment status. We do not ask you to send full payment-card details through the website.
- Technical and usage information, such as IP address, browser and device details, pages viewed, referral information, timestamps, consent choices, diagnostic events and security logs.
- Marketing preferences and records of whether you opened or interacted with a communication, where relevant.
- Information you provide in support or incident communications, which may include personal information relating to a client system.
Please do not send special-category information, criminal-offence information, passwords or secret keys through the contact form. If a project requires such information, we will agree an appropriate secure method and legal basis first.
4. How we obtain information
We obtain information directly from you when you use the contact form, email, telephone or other business channels; from your employer or colleagues in connection with a project; from service providers that support the website and communications; and from public professional sources where relevant to business development or due diligence.
5. Purposes and lawful bases
| Purpose | Information and lawful basis |
| Respond to enquiries and prepare proposals | Contact and enquiry information. Necessary to take steps at your request before a contract, or our legitimate interests in developing and operating our business. |
| Provide and manage services | Relationship, account, transaction and support information. Contract where you contract personally; otherwise legitimate interests in delivering and administering services to the client organisation. |
| Accounts, tax and legal compliance | Contract and transaction records. Legal obligation and legitimate interests in establishing, exercising or defending legal claims. |
| Operate, protect and troubleshoot the website | Technical, consent and security information. Legitimate interests in security, fraud/spam prevention, service reliability and evidence; consent where required for a storage or access technology. |
| Measure and improve the website | Usage and technical information. Consent for Google Analytics and comparable non-essential analytics. Analytics remains off unless and until the visitor opts in. |
| Relevant business marketing | Business contact details and preferences. Consent where required; otherwise legitimate interests where electronic-marketing rules permit. You may opt out at any time. |
| Manage complaints and rights | Identity, correspondence and case records. Legal obligation and legitimate interests in resolving and documenting matters. |
6. When information is required
Fields marked as required on the contact form are needed so that we can receive and respond to an enquiry. Other fields are optional. If information is needed to enter into or perform a contract and you do not provide it, we may be unable to provide the requested service.
7. Sharing information
We share personal information only where necessary and proportionate. Recipients may include:
- hosting, content-delivery, backup, email, collaboration, ticketing, monitoring and security providers;
- Google, for reCAPTCHA and any externally delivered web fonts retained on the site;
- Google, where you consent to Google Analytics and for reCAPTCHA or externally delivered web fonts where these remain enabled;
- Automattic/Akismet, for contact-form spam prevention;
- professional advisers, insurers, auditors and prospective purchasers or investors under appropriate confidentiality arrangements;
- public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and
- employees and vetted contractors who need access for their role and are bound by confidentiality and data-protection obligations.
We do not sell personal information. Links to external websites and social-media services are governed by those providers’ own notices when you follow them.
8. International transfers
Some service providers may process personal information outside the United Kingdom. Where this happens, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. You may contact us for further information about the safeguards relevant to your information.
9. Retention
We keep information only for as long as reasonably necessary for the purpose collected, including legal, accounting, security and claims requirements. Our current intended periods are:
| Record | Normal retention |
| Unsuccessful or dormant enquiries | Up to 24 months after the last meaningful contact. |
| Client, supplier, contract and accounting records | Normally seven years after the end of the relevant relationship or financial period, subject to legal and claims needs. |
| Website security and diagnostic logs | Up to 12 months unless an incident requires longer evidence retention. |
| Marketing records | Until you opt out or the details are no longer useful; a minimal suppression record may be kept to respect an opt-out. |
| Cookie and similar-technology records | For the periods shown in the cookie policy and consent settings. |
| Data-protection complaint and rights records | Normally six years after closure where needed to demonstrate compliance or handle claims. |
We may retain information for longer where required by law, a dispute, an investigation, an insurance obligation or a documented legal hold. We may retain anonymised information that no longer identifies anyone.
10. Security
We use proportionate technical and organisational measures designed to protect personal information, including controlled access, authentication, patching, backups, encryption where appropriate, supplier controls and incident procedures. No internet service is completely secure, so please do not send confidential credentials through ordinary website forms or email.
11. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information; object to processing; receive portable information; and withdraw consent without affecting earlier lawful processing. These rights are not absolute. We may need to verify your identity and may retain information where the law permits or requires it.
| Your right to object. You have an absolute right to object to direct marketing. You may also object to processing based on legitimate interests; we will stop unless we demonstrate compelling legitimate grounds or need the information for legal claims. |
To exercise a right, contact privacy@carronmedia.com. We will normally respond within one month, subject to any lawful extension.
12. Data-protection complaints
You may complain to us if you believe we have handled personal information unlawfully. Email privacy@carronmedia.com with the subject “Data protection complaint” or write to our registered office. We will acknowledge receipt within 30 days, take appropriate steps to investigate without undue delay, keep you informed where appropriate, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the opportunity to resolve the matter first.
13. Children
The website is intended for businesses and is not directed to children. We do not knowingly collect personal information from children through the website. Please contact us if you believe a child has provided information to us.
14. Automated decisions
We do not use personal information collected through the website to make solely automated decisions that produce legal or similarly significant effects.
15. Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. We will publish the revised version here with a new “last updated” date and provide additional notice where a change materially affects people.