Your information. Handled properly.

01

Who we are

AMB360 is a trading name of AMB Marketing Limited. For the purposes of UK data protection law, AMB Marketing Limited is the controller of personal information covered by this Privacy Policy unless we tell you otherwise. AMB360 provides marketing, creative and digital services including strategy, websites, search marketing, paid advertising, social media, email and CRM, creative services, analytics and reporting.

If you have a question about this policy, how we use your personal information or a data protection request, email hello@amb360.co.uk or call 0333 335 7458.

02

Information we collect

The information we collect depends on how you interact with AMB360. It may include information you give us directly, information created through our relationship with you and technical information generated when you use our website.

Information you give us

• Your name, business name, job title and contact details.
• Information submitted through contact, enquiry and Free Marketing Diagnosis forms.
• Information you provide when discussing, purchasing or using an AMB360 service or subscription.
• Billing, transaction and account information required to administer a commercial relationship.
• Marketing preferences and communications you send to us.
• Information contained in briefs, documents, files or other materials you provide to us in connection with our work.

Information generated through our relationship

• Records of enquiries, proposals, projects, subscriptions and services.
• Correspondence, meeting notes and records of decisions or instructions.
• CRM records, lead status, customer journey information and relevant commercial information.
• Performance, campaign and reporting information created while delivering services.

Website and technical information

• IP address, browser, device and operating system information.
• Pages viewed, referral information and interactions with our website.
• Cookie identifiers and similar technical information where those technologies are used.
• Analytics, conversion and advertising information where you have provided any consent required for the relevant technology.

We do not ask you to provide special category personal data through our general website forms. Please avoid including sensitive personal information in an enquiry unless it is genuinely necessary.

03

Forms, enquiries and Free Marketing Diagnosis

When you submit a form through the AMB360 website, we use the information you provide to respond to your enquiry and, where appropriate, discuss or provide our services. This includes general enquiries, project enquiries, the Free Marketing Diagnosis and other interactive features provided through the website.

If you use our Free Marketing Diagnosis, we may ask for information about you, your organisation, website and marketing activity. We use this information to carry out the diagnosis, produce relevant findings, communicate the results to you and understand whether AMB360's services may be relevant to your organisation.

We may retain enquiry information within our internal systems and CRM so that we have an appropriate record of our communications and can manage prospective and existing client relationships. Submitting an enquiry does not automatically subscribe you to marketing communications.

04

Online tools, scanners and assessments

AMB360 may provide free or paid online tools, calculators, scanners, assessments and other interactive services. These tools may process information such as a website address, business name, search queries or other information necessary to produce the requested result.

Where a tool requires personal information, we use that information for the purposes explained when it is collected and, where applicable, the purposes described in this Privacy Policy. Information submitted through a tool may be transferred to systems we use to manage enquiries, reporting and prospective client relationships.

05

How we use your information

We may use personal information to:

• respond to enquiries and provide requested information;
• provide the Free Marketing Diagnosis and respond to information submitted through it;
• prepare proposals, quotations and agreements;
• set up, administer and deliver AMB360 products, subscriptions and other services;
• manage client relationships, projects, communications and support;
• process payments, maintain financial records and meet accounting or tax obligations;
• operate, maintain, secure and improve our website and systems;
• measure website and marketing performance;
• manage our CRM and understand enquiries, leads and customer journeys;
• send marketing communications where permitted by law;
• protect AMB360, our clients, systems and legal rights;
• establish, exercise or defend legal claims; and
• comply with legal and regulatory obligations.

06

Our lawful bases for processing

UK data protection law requires us to have a lawful basis for processing personal information. The basis we use depends on the information and the reason we are using it.

Contract

We may process information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes responding to service requests, administering subscriptions and delivering agreed work.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights. Those interests may include managing client and prospective client relationships, improving our services, operating and securing our systems, understanding business performance and pursuing or defending legal rights.

Legal obligation

We may process information where necessary to comply with a legal obligation, including accounting, taxation and other requirements that apply to our business.

Consent

Where we rely on consent, including for certain electronic marketing or non-essential cookies and tracking technologies, you can withdraw that consent at any time. Withdrawal does not make earlier processing based on valid consent unlawful.

07

Marketing communications

We may send information about AMB360, our services, products, insights or relevant offers where we are permitted to do so. The lawful basis and electronic marketing rules that apply can depend on who you are, how we obtained your details and the type of communication.

Where consent is required, we will ask for it. In circumstances where the law permits marketing without prior consent, we may rely on another appropriate lawful basis and comply with the applicable electronic marketing rules.

You can opt out of marketing communications at any time by using the unsubscribe option in the message or emailing hello@amb360.co.uk. We may keep a minimal suppression record so that we can respect your preference.

08

Cookies and similar technologies

Our website may use cookies and similar technologies for purposes such as security, essential functionality, remembering preferences, analytics, performance measurement and advertising.

Technologies that are strictly necessary for the website or a service you request may operate without consent where the law permits. Where consent is required for non-essential cookies or similar technologies, we will ask for it before using them.

Where advertising or analytics technologies process information about your device or activity, that information may also be processed by the relevant technology provider in accordance with the arrangements that apply to that service.

You can use the cookie controls made available on our website to manage non-essential technologies. More detailed information about the technologies in use, their purposes and durations should be provided through our Cookie Policy or cookie preference tool.

09

Who we share personal information with

We do not sell personal information. We may share information with organisations that help us operate AMB360 or deliver services, where there is an appropriate reason to do so.

Depending on the circumstances, these may include:

• website hosting, infrastructure and security providers;
• CRM, email, communications and productivity platforms;
• analytics, advertising and marketing technology providers;
• payment processors, banks and accounting providers;
• professional advisers, including legal and financial advisers;
• contractors or specialist suppliers involved in delivering agreed work;
• regulators, courts, law enforcement or public authorities where disclosure is required or permitted by law; and
• a purchaser, investor or adviser in connection with a genuine business sale, restructuring or similar corporate transaction.

Where a supplier processes personal information on our behalf, we take appropriate steps to ensure the relationship is governed by suitable data protection terms.

10

International transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where UK data protection law restricts an international transfer, we will use an appropriate lawful transfer mechanism. Depending on the destination and provider, this may include UK adequacy regulations, approved contractual safeguards or another mechanism permitted by law. Where required, we will also consider whether additional protections are appropriate.

11

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain appropriate business records and meet legal, accounting, tax, regulatory or dispute-resolution requirements.

Different categories of information therefore have different retention periods. When deciding how long to retain information, we consider its nature and sensitivity, the purpose for which it is held, whether we still need it, applicable limitation periods and any legal or contractual requirements.

When information is no longer required, we will delete it, anonymise it or otherwise dispose of it appropriately, subject to any continuing legal requirement to retain it.

12

How we protect information

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No internet transmission or information system can be guaranteed to be completely secure. We therefore review security in proportion to the nature of the information, the systems involved and the risks associated with the processing. Measures may include access controls, authentication, secure hosting, backups and encryption where appropriate.

13

Client data and our role as a processor

Some AMB360 services involve processing personal information on behalf of our clients. This may occur where we provide website, CRM, email marketing, analytics, hosting or other digital services involving information controlled by a client.

In those circumstances, the client will normally be the controller and AMB360 will act as a processor in accordance with the client's documented instructions and the applicable contractual arrangements. Questions about personal information controlled by one of our clients should normally be directed to that client in the first instance.

14

Your data protection rights

Depending on the circumstances and the law that applies, you may have rights in relation to your personal information, including the right to:

• ask for access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to certain processing, including direct marketing;
• receive certain information in a portable format where the right to data portability applies;
• withdraw consent where processing is based on consent; and
• raise a complaint about how your information has been handled.

These rights are not absolute and exemptions may apply. If you want to exercise a right, email hello@amb360.co.uk. We may need to ask for information to verify your identity before acting on a request.

15

Complaints

If you have concerns about how AMB360 uses your personal information, please contact us first so we have an opportunity to address them.

You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO). Information about making a data protection complaint is available from the ICO.

16

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, suppliers, business practices or legal requirements. The latest version will be published on this page and the date at the top of the policy will show when it was last updated.

Where a change materially affects how we use personal information, we will take appropriate steps to bring that change to the attention of affected individuals where required.