Sweet Marketing Ltd privacy policy

Last updated: 13 October 2026

Sweet Marketing Ltd respects your privacy. This policy explains how we collect, use, share and protect personal information when you visit our website, contact us, work with us or apply for a role.

1. Who we are

Sweet Marketing Ltd is registered in England and Wales under company number 09329633.

Our registered office is:

Sweet Marketing Ltd
1st Floor, Langton & Moat House
Bird Street
Lichfield
Staffordshire
WS13 6PY

For privacy enquiries or to exercise your data protection rights, contact:

Email: enquiries@sweet.marketing
Telephone: 01543 250505

Please mark privacy correspondence “Privacy enquiry”.

Sweet Marketing Ltd is the data controller for personal information we use to operate our own business.

Where we process personal information on behalf of a client, for example when managing a client’s website or marketing campaign, we may act as a data processor. That processing is governed by our agreement with the client and their instructions. The client’s privacy notice explains their use of that information.


2. Information we collect

Depending on your relationship with us, we may collect:

  • Contact information: your name, job title, organisation, email address, telephone number and postal address.

  • Enquiry and correspondence information: messages, project requirements, meeting notes and information you provide when contacting us.

  • Client and supplier information: contracts, project records, billing details, payment records and business correspondence.

  • Marketing information: communication preferences, subscription details and records of consent or objections.

  • Website information: IP address, browser and device information, pages visited, referral information and interactions with our website, depending on your cookie choices.

  • Recruitment information: CVs, portfolios, employment history, qualifications, references and information provided during an application.

  • Project content: photographs, video, testimonials and other materials containing personal information where relevant to commissioned work.

Please avoid sending sensitive personal information unless it is necessary and we have agreed an appropriate way to handle it.

Where sensitive information is needed, such as information about adjustments during recruitment, we will explain the purpose and applicable legal grounds separately.


3. How we obtain information

We collect information directly when you:

  • Complete a website form or send us an enquiry.

  • Contact us by email, telephone, post or social media.

  • Request a quotation, commission work or supply services.

  • Subscribe to our communications.

  • Apply for a role or send us your CV or portfolio.

We may also obtain relevant business contact information from introductions, referrals, clients, recruitment agencies and public sources such as company websites, professional directories and LinkedIn.

Our website and hosting systems also collect technical information. Cookies and similar technologies are explained in section 6.

Where we obtain personal information indirectly, we will provide appropriate privacy information within the period required by law, unless a lawful exception applies.


4. How we use information and our lawful bases

We must have a lawful basis for using personal information. The basis depends on the activity and our relationship with you.

Purpose

Information used

Lawful basis

Responding to enquiries and preparing proposals

Contact details, correspondence and project requirements

Legitimate interests in responding to requests and developing our business. Contractual necessity applies where you are personally entering into a contract with us.

Providing services and managing client or supplier relationships

Business contact details, contracts, correspondence and project records

Legitimate interests in delivering services and managing business relationships. Contractual necessity applies where the contract is with you personally.

Invoicing, payments and financial administration

Contact, billing and payment records

Legal obligations for accounting and tax records; legitimate interests in administering payments and recovering debts.

Sending requested newsletters and other consent-based marketing

Contact details, subscription preferences and consent records

Consent.

Relevant marketing to corporate business contacts where permitted

Business contact details and communication preferences

Legitimate interests in promoting relevant services, subject to electronic marketing rules and your right to object.

Operating and securing our website and systems

Technical information, access records and security logs

Legitimate interests in maintaining reliable services and preventing misuse; legal obligations where applicable.

Optional website analytics, advertising and tracking

Online identifiers and website interactions

Consent where required. Any applicable exemption and its conditions will be explained in our cookie information.

Assessing applications and communicating with candidates

CVs, portfolios, qualifications and application correspondence

Legitimate interests in recruiting suitable people; steps towards a contract where applicable; legal obligations for required checks.

Handling complaints and establishing or defending legal claims

Relevant correspondence, contracts and project records

Legitimate interests in resolving disputes and protecting legal rights; legal obligations where applicable.

Where we rely on legitimate interests, we consider the purpose, necessity and impact on your rights. We do not rely on legitimate interests where your interests or rights override ours.

Where information is necessary to respond to a request, provide services or meet a legal obligation, we will explain this. If you do not provide it, we may be unable to fulfil the request or proceed with the relevant service.


5. Marketing communications

We may send news, insights, event information and information about our services where we have your consent or another lawful basis and the communication is permitted by applicable marketing rules.

For individuals, sole traders and certain partnerships, marketing emails require consent unless a valid legal exception applies.

For corporate business contacts, we may send relevant business marketing where permitted, based on our legitimate interests.

You can object to direct marketing at any time. Use the unsubscribe option in a marketing email or contact enquiries@sweet.marketing.

We will stop using your information for direct marketing when you object. We may keep a limited suppression record to ensure we respect your preference.

Administrative messages about an enquiry, project, invoice or service are separate from marketing communications.

Where we use email tracking to measure engagement, we will explain it and obtain consent where required.


6. Cookies and website technologies

Our website uses cookies and similar technologies. Some are necessary for security, essential functionality or remembering your privacy choices. Other technologies may support analytics, embedded content or advertising.

We obtain consent before using technologies that require it. Where a legal exemption applies, we provide the information and controls required for that exemption.

You can manage your choices through the website’s cookie controls. Browser settings may also allow you to restrict cookies, although this can affect website functionality.

Our cookie policy and cookie controls identify the technologies in use, their providers, purposes and duration. This privacy policy does not replace that information.


7. Who we share information with

We share personal information only where necessary for the purposes described in this policy, including with:

  • Hosting, email, cloud storage, IT support and security providers.

  • Project management, accounting and customer relationship management providers.

  • Marketing, analytics and communications providers, subject to applicable consent requirements.

  • Freelancers, production partners and subcontractors involved in delivering agreed services.

  • Accountants, solicitors, insurers and other professional advisers.

  • Relevant companies within Eighty Group where necessary for shared administration or delivery of an agreed service, with appropriate safeguards.

  • Authorities or other parties where disclosure is legally required or necessary to establish, exercise or defend legal rights.

Group membership does not automatically permit another company to use your information for its own marketing. Any such use must have an appropriate lawful basis and comply with applicable marketing rules.

We may also disclose relevant information during a proposed business sale, merger or restructuring, subject to appropriate confidentiality and data protection safeguards.

We do not sell personal information to third parties for their own marketing.

Where a provider processes information on our behalf, we require appropriate contractual protections. Some recipients, such as professional advisers or authorities, may act as independent controllers.


8. International transfers

Some service providers may process information outside the UK.

Where a transfer is subject to UK international transfer rules, we ensure an appropriate legal mechanism is in place. This may include UK adequacy regulations or approved contractual safeguards, supported by any required assessment and additional protections.

You can contact us for information about the safeguards relevant to your information and how to obtain a copy, subject to appropriate redactions.


9. How long we keep information

We keep personal information only for as long as needed for its purpose, taking account of legal obligations, contractual requirements and the need to resolve disputes.

Our normal retention periods are:

Information

Normal retention period

Enquiries that do not become client work

Up to 24 months after the last meaningful contact.

Core client contracts and records needed to evidence completed work

Normally six years after completion or the end of the relationship, with longer retention where justified by a particular contract or legal claim.

Accounting and tax records

Normally six years from the end of the relevant financial year, or longer where legally required.

Unsuccessful recruitment applications

Normally six months after the recruitment process ends.

Applications retained for future opportunities

Up to 12 months with your agreement.

Marketing contact records

Until you withdraw consent, object, or the information is no longer relevant, subject to periodic review.

Marketing suppression records

For as long as necessary to prevent unwanted communications.

Website tracking information

As stated in the cookie policy and relevant tool settings.

Security logs

For the period needed to investigate incidents and protect our systems, according to the applicable security retention schedule.

Not every document or item of project data is retained for the full period applying to core contractual records. We minimise personal information in working files and archives where practicable.

Information processed on behalf of clients is returned or deleted in accordance with their instructions, our agreement and applicable law.

We may retain relevant records longer where necessary for an ongoing dispute, investigation or legal obligation. Information in backups is removed through the applicable backup cycle and remains protected in the meantime.


10. Keeping information secure

We use technical and organisational measures appropriate to the information and risks involved, including access controls, secure systems and confidentiality requirements.

Access is limited to people who need information for their work. We also assess relevant service providers and review security arrangements.

No system can be guaranteed completely secure. If a personal data breach occurs, we will investigate and make notifications where required by law.


11. AI-assisted tools and automated decisions

Where we use AI-assisted tools in our work, their use must comply with our confidentiality and data protection obligations.

We assess whether personal information is necessary, minimise it where possible and use appropriate contractual and security safeguards.

AI-assisted analysis does not remove our responsibility for lawful processing or appropriate human review.

This policy does not authorise significant decisions about individuals based solely on automated processing. If we introduce such processing, we will provide the required information and safeguards before doing so.


12. Your rights

Depending on the circumstances and lawful basis, you may have the right to:

  • Obtain a copy of your personal information.

  • Correct inaccurate or incomplete information.

  • Request deletion.

  • Restrict how we use information.

  • Receive certain information in a portable format.

  • Object to processing based on legitimate interests.

  • Withdraw consent where we rely on it.

  • Exercise applicable rights concerning automated decisions.

Your right to object to direct marketing is absolute. You do not need to provide a reason.

Other rights may be subject to legal exceptions. Withdrawing consent does not affect processing carried out lawfully before withdrawal.

Contact enquiries@sweet.marketing to make a request. We may need proportionate information to verify your identity.

We normally respond within one month, subject to lawful extensions or other timing rules. Requests are normally free of charge.


13. Complaints

If you are concerned about our handling of personal information, please contact us so we can investigate.

You also have the right to complain to the Information Commissioner’s Office:

Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

You do not have to contact us before complaining to the ICO.


14. Children and external websites

Our website and agency services are primarily intended for business users. We do not intentionally collect children’s personal information through general website enquiries.

If a commissioned project involves children’s information, we will agree appropriate arrangements and safeguards before processing it.

Our website may link to external websites. Their operators are responsible for their own privacy practices.


15. Changes to this policy

We may update this policy to reflect changes in our activities, systems or legal requirements. The date above shows the latest revision.

Where a material change affects how we use existing personal information, we will provide additional notice and obtain fresh consent where required.