How we handle your data.

This policy explains how we collect and use personal data when you visit this website or join our priority list. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Clifton Media Group LTD, trading as True Signal Agency. Registered in England and Wales, Company No. 17218547. We are the data controller for the personal data described here.

Registered office address: 66 Paul Street, London, EC2A 4NA, England, United Kingdom

ICO registration number: [ICO REG NO]

Privacy enquiries: [email protected]

What we collect

When you join the priority list for the Flash Audit, EARNED or one of our events, we collect:

• your name and email address;
• your business name and sector, where you provide them;
• your optional answer to “What do you think your market is missing about you?”;
• which list you joined (Flash Audit, EARNED or an event), and the date and time you gave consent.

We do not take payments on this website at present. When bookings open, card payments will be handled by [STRIPE ENTITY] as an independent processor of payment data; we receive your name, email, billing address and a record of the payment, but never your full card details. If you allow analytics cookies, we also collect anonymised information about which pages are viewed (see the Cookie Policy).

Why we use it

We use your details to tell you when the Flash Audit opens, when EARNED launch pricing is announced and when bookings open for any event you registered interest in, and to prepare your Flash Audit when it is available. We do not send a sequence of chasers and we do not sell or rent your data.

Lawful basis

Our lawful basis is your consent (UK GDPR Article 6(1)(a)), given by ticking the consent box on the form. You can withdraw consent at any time by emailing us or using the unsubscribe link in any message we send. Withdrawing consent does not affect processing carried out before you withdrew it.

How long we keep it

We keep priority-list data until you unsubscribe or ask us to delete it, and in any case for no longer than 24 months after our last contact with you, after which it is deleted.

Who processes it

Your data is stored with our website hosting and database provider, Abacus.AI, Inc., which processes it on our instructions under a written agreement. Abacus.AI is based in the United States, so your data is transferred outside the UK. For that transfer we rely on [MECHANISM: international transfer basis for Abacus.AI].

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw consent at any time.

To exercise any of these rights, email [email protected]. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).