Privacy & Security Policy - a-commotion Ltd

Last updated: April 2026 • Version 1.0

1. Who we are

A-Commotion Ltd (“we”, “us”, “our”) is a management and technology consultancy registered in England and Wales. Our website is www.a-commotion.com and our data contact is enquiries@a-commotion.com.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We collect personal data only when you actively provide it to us. This includes:

Your name, email address, and organisation name when you submit our contact form
Your email address if you subscribe to our newsletter
Any additional information you choose to include in your message to us

We do not collect data through tracking cookies, analytics tools, advertising networks, or any passive collection method. We do not purchase, rent, or receive personal data from third parties.

3. How we use your data

We use your personal data solely for the following purposes:

To respond to your enquiry via our contact form
To send you our newsletter, if and when you have explicitly subscribed to receive it
To fulfil our legal obligations, if required

Our lawful basis for processing is legitimate interests (responding to enquiries) and consent (newsletter subscriptions). We do not use your data for any automated decision-making or profiling.

4. How long we keep your data

We retain contact form submissions for a maximum of 24 months, after which they are securely deleted. Newsletter subscribers’ data is retained until you unsubscribe. We will not retain your data for longer than is necessary for the purpose for which it was collected.

5. Who we share your data with

We do not sell, trade, or share your personal data with third parties for marketing purposes. We may share data with:

Our email service provider (for sending newsletter communications), who is contractually bound to handle your data securely and in accordance with UK GDPR
Law enforcement or regulatory authorities, where required by law

6. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Contact form submissions are transmitted securely and stored only in our email systems.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: to request a copy of the data we hold about you
Right to rectification: to correct inaccurate data
Right to erasure: to request deletion of your data
Right to restrict processing: to limit how we use your data
Right to object: to object to our processing of your data
Right to data portability: to receive your data in a portable format

To exercise any of these rights, please contact us at enquiries@a-commotion.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page. We will notify active newsletter subscribers of any material changes.

9. Contact

For any questions about this policy or your data, please contact: enquiries@a-commotion.com • A-Commotion Ltd, London, UK.