Privacy Policy

1. Who we are

Reign Media Ltd provides one-off marketing campaigns, creative production, and digital activations for UK businesses. We are the data controller for personal information collected through our website, landing pages, and client onboarding workflows. This policy explains how we meet our obligations under UK GDPR and the Data Protection Act 2018.

2. Personal data we collect

3. How and why we use your information

We process personal data under the lawful bases of legitimate interest, contract performance, legal obligation, and consent (for optional marketing). Typical uses include:

• Responding to enquiries, preparing proposals, and delivering statements of work
• Planning and executing campaigns, sourcing media inventory, and managing suppliers
• Sending project updates, invoices, and performance reports
• Improving our website, pricing, and service offering
• Maintaining security, preventing fraud, and meeting legal or regulatory obligations
• Sending marketing communications you opt in to receive

4. Service providers and third parties

We do not sell personal data. We only share it with trusted processors who help us run the business or deliver campaigns, each bound by contractual safeguards:

• Supabase for CRM and secure database storage
• Resend and other transactional email providers for outbound alerts
• Vercel for hosting the public site and landing pages
• Payment processors such as Stripe for invoicing and card payments
• Analytics, advertising, and attribution partners including Google Analytics and Meta
• Collaboration platforms (Notion, Slack, Loom, Google Workspace) used to deliver client projects

Where campaigns rely on outside partners (printers, media owners, couriers), we share only the information needed for fulfilment. We may also disclose data if required by law or to exercise our legal rights.

5. Retention

We keep enquiry data for up to 24 months, successful client project files for at least six years (to meet tax and accounting rules), and financial records for seven years. Creative assets can be deleted sooner on request once a project is complete unless further campaigns are scheduled.

6. Security

We follow industry best practice: encrypted transit and storage, role-based access to Supabase, audit logs, and MFA on key systems. No method is entirely risk free, but we regularly review controls and incident plans to keep data safe.

7. Cookies, analytics, and ad tracking

We use cookies and pixels to measure conversions, remember form inputs, and personalise remarketing. You can reject non-essential cookies through your browser settings. Some site features may be limited if you opt out.

8. International data transfers

Some processors are based outside the UK or European Economic Area. When data leaves the UK, we rely on adequacy regulations or standard contractual clauses to ensure equivalent protection.

9. Your rights

You can exercise your rights at any time by emailing us. Depending on the request, we may need to verify your identity before actioning it.

• Request access to the personal data we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion of your data where we have no legal reason to keep it
• Object to or restrict certain types of processing
• Request a portable copy of data you provided
• Withdraw consent for marketing at any time

10. Updates to this notice

We review this document whenever we launch new services or change how we process data. The revision date at the top will change when updates go live, and material updates may be circulated by email.

11. Contact us

If you have questions, complaints, or requests, contact the Reign Media data team using the details below. You also have the right to raise concerns with the UK Information Commissioner's Office.