Privacy Policy

Introduction

This privacy notice tells you what to expect us to do with your personal information.

Contact details

Post

Jask Creative Ltd,
Shelly Shopping Centre,
20 Farmhouse Way,
Shirley,
Solihull,
West Midlands,
B90 4EH,
United Kingdom

Telephone

0121 708 2466

Email

[email protected]

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Addresses
  • Occupation
  • Payment details (including card or bank information for transfers and direct debits)
  • Transaction data (including details about payments to and from you and details of products and services you have purchased)
  • Usage data (including information about how you interact with and use our website, products and services)
  • Information relating to compliments or complaints
  • Video recordings
  • Account access information
  • Website user information

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Addresses
  • Purchase or service history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences
  • Technical data, including information about browser and operating systems

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Profile information
  • Marketing preferences
  • Purchase or account history
  • Website and app user journey information
  • IP addresses

We collect or use the following personal information for research or archiving purposes:

  • Names and contact details
  • Addresses
  • Purchase or client account history
  • Website and app user journey information
  • IP addresses

We collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information
  • Identification documents
  • Client account information
  • Health and safety information
  • Any other personal information required to comply with legal obligations
  • Safeguarding information

We collect or use the following personal information to protect client welfare:

  • Names and contact information
  • Client account information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Addresses
  • Account information
  • Purchase or service history
  • Video recordings of public areas
  • Audio recordings of public areas
  • Photographs
  • Customer or client accounts and records
  • Financial transaction information
  • Correspondence

How we use Cookies on this website

What is a cookie?

A cookie is a small text file stored by the software you use to browse the Internet which remembers your visit and preferences on our site. Cookies let the site recognise your device, save your preferences and measure how people use our website.

How we use cookies

We may use cookies to:

  • Analyse site traffic so we can improve structure, design and content.
  • Keep you signed in as you move between pages if required.
  • Run simple tests like showing different content to groups of visitors so we can see what content or features are most effective.
  • Remember your preferences to personalise your experience, for instance – presenting you with information you find more relevant and interesting.
  • Recognise returning visitors and restore any settings to show you relevant content, or provide functionality you used previously.

Cookies do not provide us with access to your computer, device, or any other application you have installed. They also do not allow us to access any personal information about you, other than what you choose to share with us.

The Cookies we use
CookieDomainDescriptionDurationType
bcookielinkedin.comLinkedIn sets this cookie to track the use of embedded services.1 yearAdvertisement
__hstcjaskcreative.co.ukThis is the main cookie set by Hubspot, for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).6 monthsAnalytics
hubspotutkjaskcreative.co.ukHubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.6 monthsAnalytics
li_gclinkedin.comLinkedin set this cookie for storing visitor’s consent regarding using cookies for non-essential purposes.6 monthsFunctional
lidclinkedin.comLinkedIn sets the lidc cookie to facilitate data center selection.1 dayFunctional
__cf_bmhs-analytics.net
hs-banner.com
hs-scripts.com
hsadspixel.net
hscollectedforms.net
hubapi.com
hubspot.com
vimeo.com
This cookie, set by Cloudflare across multiple domains, is used to support Cloudflare Bot Management.1 hourNecessary
_cfuvidvimeo.com
hubspot.com
Calendly sets this cookie across multiple domains to track users across sessions to optimise user experience by maintaining session consistency and providing personalised services.SessionNecessary
__hssrcjaskcreative.co.ukHubSpot cookie sets this cookie to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.SessionNecessary
__hsscjaskcreative.co.ukHubSpot sets this cookie to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (which increments with each pageview in a session), and session start timestamp.1 hourNecessary
__cf_bmhubapi.comThis cookie, set by Cloudflare, is used to support Cloudflare Bot Management.1 hourNecessary
wpEmojiSettingsSupportsjaskcreative.co.ukWordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly.SessionNecessary
cfz_google-analyticsjaskcreative.co.ukThis cookie is used by Google Analytics through Cloudflare to distinguish unique users and track website usage analytics for performance measurement and site optimisation purposes.1 yearOther
google-analytics_BKke___gajaskcreative.co.ukThis cookie is used by Google Analytics to distinguish unique users and track website usage analytics for performance measurement and site optimisation purposes.SessioOther
Controlling cookies

Whilst we provide cookie controls as a convenience when viewing our website – some privacy or script blocking functionality in your Internet browsing software may stop this working correctly. Ultimately, you control how our website uses cookies through your browser settings. To refuse cookies, adjust your browser to block them.

Bear in mind that blocking cookies may prevent certain features and pages from working correctly on our website. Some pages and services may potentially become unavailable to you.

Unless you have changed your browser settings to explicitly refuse cookies, our website may issue cookies when you visit it. Some third party services we use can be opted out of separately if you do not wish to disable all cookies. Details on how to do this can be found in the Analytics and Advertising sections of this document.

To learn more about cookies and how they are used, visit All About Cookies.

To learn how to disable cookies in common browsers, visit the How To Manage Cookies on the All About Cookies website.

Analytics

Jask Creative use website analytics packages to analyse website statistics, these include but are not limited to metrics such as the number of visitors, visit duration and most viewed pages. The data collected by the analytics packages is anonymised and Jask Creative cannot use this data to identify an individual.

Google Analytics

Learn more at https://www.google.com/policies/privacy/, and to opt out, visit https://tools.google.com/dlpage/gaoptout.

To help further protect the privacy of our website visitors, we utilise the IP address anonymisation feature of Google Analytics. This replaces the last few digits of your IP address with 0’s, rendering it useless. More information about Google’s IP address anonymisation can be found here: https://support.google.com/analytics/answer/2763052?hl=en

Google Tag Manager

Learn more at https://support.google.com/tagmanager/answer/6102821?, and to opt out, visit https://support.google.com/analytics/answer/7519794.

Advertising & Targeting

Doubleclick

Google advertising platform that analyses browsing activity across Website to establish user profile. Learn more at https://www.google.com/policies/technologies/ads/, and to opt out, visit https://adssettings.google.com.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • Note: Business data of individuals may be used under legitimate interest to introduce them to relevant services offered by the agency.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • Note: Business data of individuals may be used under legitimate interest to introduce them to relevant services offered by the agency.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for research or archiving purposes:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information to protect client welfare are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Where we get personal information from

  • Directly from you
  • Regulatory authorities
  • Publicly available sources
  • Previous employment
  • Market research organisations
  • Suppliers and service providers

How long we keep information

This retention schedule defines the periods for which Jask Creative Ltd retains each category of personal data, in line with the UK GDPR storage-limitation principle and ICO best practice. Periods are measured from the relevant trigger event.

If you require more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

1. Client and Prospect Data
Data CategoryTrigger EventRetention PeriodAction
Contact details (name, email, phone)End of last engagement6 yearsDestroy
Project briefs and proposalsEnd of project6 yearsDestroy
Contracts and signed agreementsEnd of contract6 years + current year ¹Destroy
Payment and transaction recordsPayment date6 yearsDestroy
Marketing opt-in consentsWithdrawal of consent or 5 years from collection²DestroyDestroy
Website analytics (IP, usage data)Data collection1 yearPseudonymise or destroy³
2. Employee and HR Records
Data CategoryTrigger EventRetention PeriodAction
Recruitment applicationsPosition filled or closing date1 yearDestroy
Employment contractsEnd of employment7 yearsDestroy
Payroll and tax recordsEnd of tax year6 years + current year¹Destroy
Sickness and absence recordsEnd of employment3 yearsDestroy
Health and safety incident reportsIncident closure6 yearsDestroy
Pension and benefit documentationEnd of employment6 years + current year¹Destroy
3. Financial and Accounting Records
Data CategoryTrigger EventRetention PeriodAction
Sales invoices and credit notesFinancial year-end6 yearsDestroy
Purchase invoices and receiptsFinancial year-end6 yearsDestroy
Bank statements and reconciliationsFinancial year-end6 yearsDestroy
VAT recordsEnd of VAT accounting period6 yearsDestroy
Annual accounts and statutory reportsFiling date with Companies HousePermanently available⁴Preserve
4. Legal and Compliance
Data CategoryTrigger EventRetention PeriodAction
Data subject access requests (DSARs)Final response1 yearDestroy
Consent records (marketing, cookies)Withdrawal or expiry5 yearsDestroy
Privacy impact assessments (DPIAs)End of project3 yearsDestroy
Breach logs and remediation recordsClosure of incident7 yearsDestroy
ICO correspondenceClosure of case7 yearsDestroy
5. Archiving and Research
Data CategoryTrigger EventRetention PeriodAction
Marketing research dataEnd of campaign3 yearsAnonymise
Project research dataEnd of project5 yearsAnonymise
Historical project archivesEnd of projectIndefinite (public interest archive)⁵Preserve

¹ Companies Act 2006 and HMRC require retention of accounting and tax records for six years plus the current year.
² ICO recommends specifying criteria for withdrawal of consent; marketing consent may be retained up to five years if still relevant to service improvement.
³ Storage-limitation principle: anonymise or delete website analytics after no more than 12 months to minimise personal data risks.
Annual accounts are public records and must remain accessible via Companies House.
Indefinite retention allowed for public interest archiving, subject to appropriate safeguards and anonymisation where possible.

Who we share information with

Others we share personal information with:

  • Debt collection agencies
  • Other financial or fraud investigation authorities
  • Professional or legal advisors
  • Emergency services
  • Insolvency practitioners
  • Regulatory authorities
  • External auditors
  • Organisations we’re legally obliged to share personal information with
  • Publicly on our website, social media or other marketing and information media
  • Suppliers and service providers
  • Professional consultants

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

This policy was last reviewed and updated on 16th of June 2025.