Introduction
This privacy notice tells you what to expect us to do with your personal information.
- Contact details
- What information we collect, use, and why
- How we use Cookies on this website
- Lawful bases and data protection rights
- Where we get personal information from
- How long we keep information
- Who we share information with
- How to complain
Contact details
Post
Jask Creative Ltd,
Shelly Shopping Centre,
20 Farmhouse Way,
Shirley,
Solihull,
West Midlands,
B90 4EH,
United Kingdom
Telephone
0121 708 2466
What information we collect, use, and why
We collect or use the following information to provide and improve products and services for clients:
- Names and contact details
- Addresses
- Occupation
- Payment details (including card or bank information for transfers and direct debits)
- Transaction data (including details about payments to and from you and details of products and services you have purchased)
- Usage data (including information about how you interact with and use our website, products and services)
- Information relating to compliments or complaints
- Video recordings
- Account access information
- Website user information
We collect or use the following personal information for the operation of client or customer accounts:
- Names and contact details
- Addresses
- Purchase or service history
- Account information, including registration details
- Information used for security purposes
- Marketing preferences
- Technical data, including information about browser and operating systems
We collect or use the following personal information for information updates or marketing purposes:
- Names and contact details
- Addresses
- Profile information
- Marketing preferences
- Purchase or account history
- Website and app user journey information
- IP addresses
We collect or use the following personal information for research or archiving purposes:
- Names and contact details
- Addresses
- Purchase or client account history
- Website and app user journey information
- IP addresses
We collect or use the following personal information to comply with legal requirements:
- Name
- Contact information
- Identification documents
- Client account information
- Health and safety information
- Any other personal information required to comply with legal obligations
- Safeguarding information
We collect or use the following personal information to protect client welfare:
- Names and contact information
- Client account information
We collect or use the following personal information for dealing with queries, complaints or claims:
- Names and contact details
- Addresses
- Account information
- Purchase or service history
- Video recordings of public areas
- Audio recordings of public areas
- Photographs
- Customer or client accounts and records
- Financial transaction information
- Correspondence
How we use Cookies on this website
What is a cookie?
A cookie is a small text file stored by the software you use to browse the Internet which remembers your visit and preferences on our site. Cookies let the site recognise your device, save your preferences and measure how people use our website.
How we use cookies
We may use cookies to:
- Analyse site traffic so we can improve structure, design and content.
- Keep you signed in as you move between pages if required.
- Run simple tests like showing different content to groups of visitors so we can see what content or features are most effective.
- Remember your preferences to personalise your experience, for instance – presenting you with information you find more relevant and interesting.
- Recognise returning visitors and restore any settings to show you relevant content, or provide functionality you used previously.
Cookies do not provide us with access to your computer, device, or any other application you have installed. They also do not allow us to access any personal information about you, other than what you choose to share with us.
The Cookies we use
| Cookie | Domain | Description | Duration | Type |
|---|---|---|---|---|
| bcookie | linkedin.com | LinkedIn sets this cookie to track the use of embedded services. | 1 year | Advertisement |
| __hstc | jaskcreative.co.uk | This is the main cookie set by Hubspot, for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). | 6 months | Analytics |
| hubspotutk | jaskcreative.co.uk | HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. | 6 months | Analytics |
| li_gc | linkedin.com | Linkedin set this cookie for storing visitor’s consent regarding using cookies for non-essential purposes. | 6 months | Functional |
| lidc | linkedin.com | LinkedIn sets the lidc cookie to facilitate data center selection. | 1 day | Functional |
| __cf_bm | hs-analytics.net hs-banner.com hs-scripts.com hsadspixel.net hscollectedforms.net hubapi.com hubspot.com vimeo.com | This cookie, set by Cloudflare across multiple domains, is used to support Cloudflare Bot Management. | 1 hour | Necessary |
| _cfuvid | vimeo.com hubspot.com | Calendly sets this cookie across multiple domains to track users across sessions to optimise user experience by maintaining session consistency and providing personalised services. | Session | Necessary |
| __hssrc | jaskcreative.co.uk | HubSpot cookie sets this cookie to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. | Session | Necessary |
| __hssc | jaskcreative.co.uk | HubSpot sets this cookie to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (which increments with each pageview in a session), and session start timestamp. | 1 hour | Necessary |
| __cf_bm | hubapi.com | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. | 1 hour | Necessary |
| wpEmojiSettingsSupports | jaskcreative.co.uk | WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly. | Session | Necessary |
| cfz_google-analytics | jaskcreative.co.uk | This cookie is used by Google Analytics through Cloudflare to distinguish unique users and track website usage analytics for performance measurement and site optimisation purposes. | 1 year | Other |
| google-analytics_BKke___ga | jaskcreative.co.uk | This cookie is used by Google Analytics to distinguish unique users and track website usage analytics for performance measurement and site optimisation purposes. | Sessio | Other |
Controlling cookies
Whilst we provide cookie controls as a convenience when viewing our website – some privacy or script blocking functionality in your Internet browsing software may stop this working correctly. Ultimately, you control how our website uses cookies through your browser settings. To refuse cookies, adjust your browser to block them.
Bear in mind that blocking cookies may prevent certain features and pages from working correctly on our website. Some pages and services may potentially become unavailable to you.
Unless you have changed your browser settings to explicitly refuse cookies, our website may issue cookies when you visit it. Some third party services we use can be opted out of separately if you do not wish to disable all cookies. Details on how to do this can be found in the Analytics and Advertising sections of this document.
To learn more about cookies and how they are used, visit All About Cookies.
To learn how to disable cookies in common browsers, visit the How To Manage Cookies on the All About Cookies website.
Analytics
Jask Creative use website analytics packages to analyse website statistics, these include but are not limited to metrics such as the number of visitors, visit duration and most viewed pages. The data collected by the analytics packages is anonymised and Jask Creative cannot use this data to identify an individual.
Google Analytics
Learn more at https://www.google.com/policies/privacy/, and to opt out, visit https://tools.google.com/dlpage/gaoptout.
To help further protect the privacy of our website visitors, we utilise the IP address anonymisation feature of Google Analytics. This replaces the last few digits of your IP address with 0’s, rendering it useless. More information about Google’s IP address anonymisation can be found here: https://support.google.com/analytics/answer/2763052?hl=en
Google Tag Manager
Learn more at https://support.google.com/tagmanager/answer/6102821?, and to opt out, visit https://support.google.com/analytics/answer/7519794.
Advertising & Targeting
Doubleclick
Google advertising platform that analyses browsing activity across Website to establish user profile. Learn more at https://www.google.com/policies/technologies/ads/, and to opt out, visit https://adssettings.google.com.
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
- Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
- Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- Note: Business data of individuals may be used under legitimate interest to introduce them to relevant services offered by the agency.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information for information updates or marketing purposes are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- Note: Business data of individuals may be used under legitimate interest to introduce them to relevant services offered by the agency.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Our lawful bases for collecting or using personal information for research or archiving purposes:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information to comply with legal requirements:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information to protect client welfare are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Where we get personal information from
- Directly from you
- Regulatory authorities
- Publicly available sources
- Previous employment
- Market research organisations
- Suppliers and service providers
How long we keep information
This retention schedule defines the periods for which Jask Creative Ltd retains each category of personal data, in line with the UK GDPR storage-limitation principle and ICO best practice. Periods are measured from the relevant trigger event.
If you require more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.
1. Client and Prospect Data
| Data Category | Trigger Event | Retention Period | Action |
|---|---|---|---|
| Contact details (name, email, phone) | End of last engagement | 6 years | Destroy |
| Project briefs and proposals | End of project | 6 years | Destroy |
| Contracts and signed agreements | End of contract | 6 years + current year ¹ | Destroy |
| Payment and transaction records | Payment date | 6 years | Destroy |
| Marketing opt-in consents | Withdrawal of consent or 5 years from collection² | Destroy | Destroy |
| Website analytics (IP, usage data) | Data collection | 1 year | Pseudonymise or destroy³ |
2. Employee and HR Records
| Data Category | Trigger Event | Retention Period | Action |
|---|---|---|---|
| Recruitment applications | Position filled or closing date | 1 year | Destroy |
| Employment contracts | End of employment | 7 years | Destroy |
| Payroll and tax records | End of tax year | 6 years + current year¹ | Destroy |
| Sickness and absence records | End of employment | 3 years | Destroy |
| Health and safety incident reports | Incident closure | 6 years | Destroy |
| Pension and benefit documentation | End of employment | 6 years + current year¹ | Destroy |
3. Financial and Accounting Records
| Data Category | Trigger Event | Retention Period | Action |
|---|---|---|---|
| Sales invoices and credit notes | Financial year-end | 6 years | Destroy |
| Purchase invoices and receipts | Financial year-end | 6 years | Destroy |
| Bank statements and reconciliations | Financial year-end | 6 years | Destroy |
| VAT records | End of VAT accounting period | 6 years | Destroy |
| Annual accounts and statutory reports | Filing date with Companies House | Permanently available⁴ | Preserve |
4. Legal and Compliance
| Data Category | Trigger Event | Retention Period | Action |
|---|---|---|---|
| Data subject access requests (DSARs) | Final response | 1 year | Destroy |
| Consent records (marketing, cookies) | Withdrawal or expiry | 5 years | Destroy |
| Privacy impact assessments (DPIAs) | End of project | 3 years | Destroy |
| Breach logs and remediation records | Closure of incident | 7 years | Destroy |
| ICO correspondence | Closure of case | 7 years | Destroy |
5. Archiving and Research
| Data Category | Trigger Event | Retention Period | Action |
|---|---|---|---|
| Marketing research data | End of campaign | 3 years | Anonymise |
| Project research data | End of project | 5 years | Anonymise |
| Historical project archives | End of project | Indefinite (public interest archive)⁵ | Preserve |
¹ Companies Act 2006 and HMRC require retention of accounting and tax records for six years plus the current year.
² ICO recommends specifying criteria for withdrawal of consent; marketing consent may be retained up to five years if still relevant to service improvement.
³ Storage-limitation principle: anonymise or delete website analytics after no more than 12 months to minimise personal data risks.
⁴ Annual accounts are public records and must remain accessible via Companies House.
⁵ Indefinite retention allowed for public interest archiving, subject to appropriate safeguards and anonymisation where possible.
Who we share information with
Others we share personal information with:
- Debt collection agencies
- Other financial or fraud investigation authorities
- Professional or legal advisors
- Emergency services
- Insolvency practitioners
- Regulatory authorities
- External auditors
- Organisations we’re legally obliged to share personal information with
- Publicly on our website, social media or other marketing and information media
- Suppliers and service providers
- Professional consultants
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
This policy was last reviewed and updated on 16th of June 2025.