1. Who is responsible for your data
Vanity Advertising Limited, a company registered in England and Wales at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, trading as Vanity Advertising, is the controller of the personal data described in this policy for the purposes of the UK GDPR and the Data Protection Act 2018. You can contact us about anything in it at contact@vanityadvertising.org.
[If you are required to register with the ICO as a data controller, add your registration number here. If you appoint a Data Protection Officer or an EU representative under Article 27 EU GDPR, name them and give their contact details]
2. What we collect
When you browse this website
This website is served as static pages. It contains no contact form, no login, no advertising pixels and no analytics scripts, and it sets no cookies. Our hosting provider processes standard server request data, including your IP address, browser user agent, requested URL and timestamp, in order to serve the site and protect it from abuse.
[Update this section the moment you add analytics, a remarketing tag, embedded video, a chat widget or a scheduling embed — each one changes what is collected and requires disclosure here and in the cookie policy]
When you email us
We receive whatever you choose to send: typically your name, email address, company, the platforms you need, your advertising spend and a description of your business. We use this to answer you and to assess whether we can take you on as a client.
When you become a client
- Business contact details for you and your team;
- Billing and payment information, and where required by an advertising platform, identity and beneficial-ownership documentation;
- Advertising account identifiers, spend records and correspondence relating to your engagement.
We do not knowingly collect data from children, and our services are not directed at them.
3. Why we use it, and on what basis
- To respond to enquiries and provide the services — because it is necessary to take steps at your request and to perform our contract with you.
- To run and secure our business, including fraud prevention, record keeping and improving our services — because we have a legitimate interest in doing so, balanced against your rights.
- To meet legal obligations, including tax, accounting and any identity checks an advertising platform requires of us.
The bases above are those set out in Article 6 of the UK GDPR: performance of a contract, our legitimate interests, and compliance with a legal obligation. Where we rely on legitimate interests, you may object at any time using the contact details below.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
4. Who we share it with
We share personal data only where necessary, with:
- Advertising platforms, where provisioning or verifying an account requires it;
- Service providers acting on our instructions — hosting, email, accounting and payment processing;
- Professional advisers, and authorities where the law requires it;
- A buyer or successor, if our business is sold or reorganised.
[List your actual processors here — hosting provider, email provider, accounting software, payment processor — with links to their privacy policies]
5. International transfers
We operate across multiple countries and our providers may process data outside the United Kingdom. Where we transfer personal data out of the UK, we rely on an appropriate safeguard under Chapter V of the UK GDPR — either UK adequacy regulations, or the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
[Confirm which mechanism applies to each provider, and where your data is actually hosted]
6. How long we keep it
Enquiries that do not become engagements are deleted within [ENQUIRY RETENTION PERIOD]. Client records are retained for the duration of the engagement and afterwards for as long as required for tax, accounting and limitation purposes, typically [CLIENT RETENTION PERIOD].
7. Your rights
Under the UK GDPR you have the right to:
- Access a copy of the personal data we hold about you;
- Have inaccurate data corrected, and incomplete data completed;
- Have your data erased in certain circumstances;
- Restrict or object to how we use it, including profiling;
- Receive it in a portable, machine-readable format;
- Withdraw consent at any time, where we relied on consent.
To exercise any of these, email contact@vanityadvertising.org. We will respond within one month, which we may extend by two further months for complex requests. There is normally no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.
8. Cookies
This website currently sets no cookies. See our Cookie Policy for detail, and revisit it if we add analytics or advertising technology.
9. Security
We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit and limiting access to personal data to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy. The date at the top of this page shows when it last changed. Where a change is material we will take reasonable steps to notify you.