Privacy Policy
Last Updated: [20/01/2026]
At ESM Media Ltd ("we", "us", "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, the Data Protection Act 2018, and other applicable global privacy laws, including those applicable in the United States.
By using our website or services, you confirm that you have read and understood this Privacy Policy.
3. How We Use Your Information
We use personal data to:
Provide and manage our services
Respond to enquiries and communications
Process payments and manage client relationships
Improve website performance and user experience
Send marketing communications (where consent is given)
Analyse marketing performance and optimise campaigns
Comply with legal and regulatory obligations
4. Legal Bases for Processing
We process personal data under the following lawful bases:
Contractual necessity – where processing is required to deliver services
Consent – where you have explicitly agreed
Legitimate interests – to improve our services and marketing (without overriding your rights)
Legal obligations – to comply with applicable laws
7. Website Hosting (Squarespace)
Our website is hosted on Squarespace, which provides the platform used to deliver our website and services. Squarespace may process personal data as a data processor in accordance with its own privacy policy and applicable data protection laws.
9. Data Retention
We retain personal data only for as long as necessary to:
Fulfil contractual obligations
Meet legal and regulatory requirements
Support legitimate business purposes
Retention periods vary depending on the type of data and processing purpose.
Information Collected Automatically
IP address
Browser and device details
Usage data and analytics
Cookies and tracking technologies
Information from Third Parties
We may receive data from platforms and services you interact with, including advertising and analytics providers.
1. Who We Are
ESM Media Ltd is a marketing and media agency based in the United Kingdom.
Contact Email: hello@esmmedia.co
We act as the data controller for personal data collected through this website.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Information You Provide Directly
Full name
Email address
Telephone number
Postal address
Payment information (processed securely via third-party providers such as Stripe)
Any information submitted through contact forms, bookings, or communications
5. Cookies & Tracking Technologies
We use cookies and similar technologies to operate our website and improve our services.
Tools We Use Include:
Google Analytics
Meta / Facebook Pixel
Advertising and conversion tracking tools
Non-essential cookies are only used with your consent, in line with PECR and GDPR requirements. You can manage your preferences at any time via our cookie banner.
6. Third-Party Service Providers
We work with trusted third-party providers who process data on our behalf, including:
Google Analytics & Meta Platforms (analytics and advertising)
GoHighLevel, Zapier & Hyros (CRM, automation, and tracking)
Stripe (secure payment processing)
All providers are required to implement appropriate safeguards and comply with data protection laws.
8. International Data Transfers
Some of our third-party providers may process data outside the UK or EU, including in the United States. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect personal data.
10. Your RightS
Under data protection laws, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of your data
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, contact us at hello@esmmedia.co.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Automated Decision-Making & Profiling
We may use automated tools for analytics and marketing optimisation. These processes do not produce legal or similarly significant effects on individuals. You may object to profiling at any time.
12. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children.
13. Information Security
We implement appropriate technical and organisational measures to protect personal data. However, no system can be guaranteed to be completely secure.
14. External Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
15. Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
16. Consent
By using our website and services, you agree to this Privacy Policy. If you do not agree, please refrain from using our website.