Privacy Policy

Colloco Marketing Ltd

Company Registration Number: 12305516
ICO Registration Number: ZB502351

Last updated: 1 June 2026
Next review due: 1 June 2027

1. Introduction

Colloco Marketing Ltd respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you interact with us, visit our website, enquire about our services, work with us, receive marketing from us, or communicate with us through email, social media or other channels.

We aim to be clear, responsible and transparent about how we use personal data.

2. Who We Are

Colloco Marketing Ltd is a company registered in England and Wales.

Company name: Colloco Marketing Ltd
Company number: 12305516
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
ICO registration number: C1295320

For privacy-related questions, please contact:

Privacy Contact: Sophia Brading
Email: sophia@colloco.marketing

3. The Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us.

3.1 Information You Provide to Us

This may include:

Your name
Job title
Company name
Business address
Email address
Telephone number
Website URL
Social media profiles or business pages
Project requirements
Brand, marketing, website or business information you choose to share with us
Client feedback, testimonials or interview responses
Information provided through forms, questionnaires, discovery calls, emails or project work
Payment, invoice and accounting information
Any other information you choose to provide

Where we work with clients on websites, branding, marketing, strategy or content, you may also provide business information, staff information, client insight, case studies, images, copy, documents, testimonials or other material needed to complete the project.

3.2 Information We Collect Automatically

When you visit our website, certain information may be collected automatically through our website platform and analytics tools.

This may include:

IP address
Browser type and version
Device type
Operating system
Time zone setting
Pages visited
Website navigation behaviour
Referring website or search engine
Approximate location data
Google Analytics 4 data
Wix website analytics data

This information helps us understand how people use our website and improve our content, services and user experience.

3.3 Information from Public or Third-Party Sources

As part of our business development, marketing and research activity, we may collect business contact information from publicly available sources such as:

Company websites
LinkedIn
Companies House
Business directories
Social media platforms
Publicly available press, articles or professional profiles

This is usually limited to business contact details and information relevant to understanding whether our services may be appropriate for a business.

3.4 Cookies and Tracking Technologies

Our website uses cookies and similar technologies through Wix, Google Analytics and other website tools.

Cookies help us understand website performance, improve user experience and support basic website functionality.

For more information, please see our separate Cookie Policy.

4. How We Use Your Personal Data

We only use personal data where we have a lawful reason to do so.

4.1 To Provide Our Services

We use personal data to:

Respond to enquiries
Provide proposals and quotes
Deliver website, branding, marketing, content and strategy services
Manage client relationships
Hold discovery calls, workshops or interviews
Create website copy, content, design and marketing materials
Manage projects and communications
Process invoices and payments
Provide support, updates or ongoing services

Our lawful basis for this is usually contract performance or taking steps before entering into a contract.

4.2 To Run and Improve Our Business

We may use personal data to:

Improve our website and services
Review project performance
Maintain business records
Manage internal systems
Improve client experience
Protect the security of our website, systems and data
Keep records of communication and decisions

Our lawful basis for this is usually legitimate interests.

4.3 For Marketing and Business Development

We may use business contact information to:

Send relevant marketing communications
Follow up with prospective clients
Contact businesses we believe may benefit from our services
Share useful insights, resources, articles or updates
Promote Colloco Marketing services
Maintain a record of prospects, enquiries and previous clients

We may rely on consent or legitimate interests depending on the type of communication and the relationship we have with you.

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us at hello@colloco.marketing.

4.4 To Meet Legal and Regulatory Obligations

We may use personal data to:

Keep accounting and tax records
Comply with legal obligations
Respond to lawful requests from authorities
Protect our legal rights
Manage complaints or disputes
Our lawful basis for this is usually legal obligation or legitimate interests.

5. Use of AI Tools

Colloco Marketing may use AI-assisted tools to support aspects of our work, including research, strategy, planning, content development, copywriting, idea generation, website structure, social media planning, analysis and internal productivity.

Where AI tools are used, we aim to do so responsibly and professionally.

We do not knowingly enter highly sensitive personal data into AI tools unless there is a clear, appropriate reason and suitable safeguards are in place. We also avoid sharing unnecessary confidential client information with AI systems.

AI may support our work, but human review, judgement and strategic direction remain central to the services we provide.

If you have specific concerns about the use of AI in your project, please contact us before sharing confidential information.

6. Where We Store and Process Data

We may store, process or manage personal data using trusted third-party platforms and service providers.

These may include:

Wix — website hosting, forms, CRM and website management
Google Analytics — website analytics
Microsoft Outlook — email communication
Microsoft services — business administration and file handling
Dropbox — file storage and backup
Google Drive — file storage and collaboration
Canva — design and creative assets
ChatGPT/OpenAI or other AI tools — research, drafting, planning and productivity support
Meta Business Suite — Facebook and Instagram management
LinkedIn — professional networking and marketing
Xero — invoicing and accounting
Stripe or other payment processors — payments
Zoom, Google Meet or similar platforms — meetings and calls
WhatsApp — client or project communication where appropriate
Project management or productivity tools used to manage client work

We only use these platforms where they support the running of our business or the delivery of our services.

7. Data Security

We take reasonable steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction.

Measures may include:

Secure passwords
Access controls
Two-factor authentication where available
Encrypted data transmission where supported
Secure file storage
Limited access to client information
Regular software and security updates
Confidentiality expectations for anyone working with us
Careful handling of client documents, login details and project information
However, no online system can be guaranteed to be completely secure.

8. Data Sharing

We do not sell your personal data.

We may share personal data where necessary with:

Service providers who help us operate our business
Website, hosting, CRM, analytics and email providers
Payment and accounting providers
Freelancers, consultants or trusted delivery partners involved in client work
Legal, financial or professional advisers
Regulatory authorities where required by law
Social media or advertising platforms where relevant to marketing work

Where we work with freelancers, consultants or delivery partners, we only share the information reasonably needed for them to carry out their role.

9. International Data Transfers

Some of the platforms and service providers we use may process personal data outside the UK or European Economic Area.

Where this happens, we rely on appropriate safeguards such as:

UK International Data Transfer Agreements
EU Standard Contractual Clauses
UK or EU adequacy decisions
Relevant safeguards provided by the service provider

10. How Long We Keep Personal Data

We only keep personal data for as long as necessary for the purpose it was collected, including business, legal, tax, contractual and legitimate interest reasons.

As a guide:

Active and former client records: up to 5 years from the last meaningful interaction
Prospective client records: up to 2 years from the last meaningful interaction
Proposal and enquiry information: up to 2 years unless a longer period is needed for business or legal reasons
Marketing communication data: until you unsubscribe or ask us to remove you
Financial, accounting and tax records: usually 7 years
Website analytics data: according to the retention settings of the relevant analytics platform
Project files and creative assets: for as long as reasonably needed to support the client relationship, portfolio records or future project work

We may keep some information for longer if required by law, to resolve disputes, enforce agreements or protect our legal rights.

11. Your Rights

Under UK data protection law, you have rights relating to your personal data.

These may include the right to:

Access the personal data we hold about you

Ask us to correct inaccurate or incomplete data
Ask us to delete your personal data
Ask us to restrict how we use your data
Object to certain types of processing
Ask for your data to be transferred where applicable
Withdraw consent where processing is based on consent
Object to direct marketing

To exercise any of these rights, please contact:

sophia@colloco.marketing

We may need to verify your identity before responding to certain requests.

12. Marketing Communications

We may send marketing communications where you have requested information, used our services, subscribed to receive updates, or where we believe our services may be relevant to your business role.

You can opt out at any time by:

Clicking the unsubscribe link in our emails
sophia@colloco.marketing

Asking us directly to stop contacting you

We will respect your preferences.

13. Links to Other Websites

Our website may include links to third-party websites, platforms or resources.

We are not responsible for the privacy practices, content or security of those third-party websites. We recommend reviewing their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, systems, legal obligations or data practices.

The latest version will be published on our website with the updated date shown at the top of the policy.

Where changes are significant, we will take reasonable steps to bring them to your attention.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Privacy Contact: Sophia Brading
Colloco Marketing Ltd
71-75 Shelton Street, Covent Garden
London, WC2H 9JQ

Email: hello@colloco.marketing

You also have the right to make a complaint to the Information Commissioner’s Office, the UK supervisory authority for data protection.

ICO website: www.ico.org.uk

Document control
Version: 2.0
Last updated: 1 June 2026
Next review due: 1 June 2027