1. Data Controller
The data controller is Kangaroo Trade Marketing Ltd, a company registered in England and Wales (Company No. 17149602) with its registered office at 71-75 Shelton Street, London, WC2H 9JQ.
For all data protection enquiries, contact us at hello@kangaroo-marketing.com.
2. Data We Collect
2.1 Information You Provide
- Contact & enquiry data — name, email address, company name, phone number, and the content of messages sent via our contact form or email.
- Business information — job title, company size, industry sector, and marketing objectives shared during briefing or onboarding.
- Correspondence — records of communications between you and our team.
2.2 Information Collected Automatically
- Usage data — pages visited, time on site, referral source, and browser/device type, collected via server logs and analytics tools.
- Cookies — see Section 8 for full details.
- IP address — used for security and fraud prevention.
3. Legal Basis for Processing
| Purpose | Legal Basis (UK GDPR Art. 6) |
|---|---|
| Responding to enquiries | Legitimate interests (Art. 6(1)(f)) |
| Delivering contracted services | Performance of a contract (Art. 6(1)(b)) |
| Sending marketing communications | Consent (Art. 6(1)(a)) |
| Legal and compliance obligations | Legal obligation (Art. 6(1)(c)) |
| Website analytics and security | Legitimate interests (Art. 6(1)(f)) |
4. How We Use Your Data
- To respond to your enquiries and provide requested services.
- To manage and deliver marketing campaigns on your behalf.
- To send service updates, proposals, and project communications.
- To send marketing newsletters and thought-leadership content (where you have consented).
- To improve our website, services, and internal processes.
- To comply with applicable laws and regulations.
- To detect and prevent fraud or misuse of our services.
5. Sharing Your Data
We do not sell your personal data. We may share data with:
- Service providers — cloud hosting, CRM, email delivery, and analytics platforms acting as data processors under contractual data processing agreements.
- Professional advisers — legal, accounting, or insurance advisers where required.
- Regulatory authorities — when required by law, court order, or regulatory obligation.
- Business transfers — in the event of a merger, acquisition, or sale of assets, with appropriate data protection safeguards.
All third-party processors are required to maintain appropriate security standards and may only process your data on our instructions.
6. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected:
- Enquiry / contact data — up to 2 years after last contact, unless a client relationship is established.
- Client data — for the duration of the contract plus 7 years (for tax and legal compliance).
- Marketing consent data — until you withdraw consent or for 3 years of inactivity.
- Website analytics — aggregated / anonymised after 26 months.
7. Your Rights
Under the UK GDPR you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where there is no legitimate reason to retain it.
Ask us to suspend processing in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent at any time where processing relies on consent.
Lodge a complaint with the ICO (ico.org.uk) if you believe your rights have been infringed.
To exercise any of these rights, contact us at hello@kangaroo-marketing.com. We will respond within 30 days.
8. Cookies
We use cookies and similar tracking technologies on our website. Please refer to our Cookie Policy for full details, including a list of all cookies used and instructions for managing your preferences.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS/TLS encryption for all data in transit.
- Access controls and role-based permissions for our systems.
- Regular security reviews and staff data-protection training.
- Incident response procedures with prompt notification obligations.
No method of transmission over the internet is 100% secure. If you suspect a security incident, please notify us immediately at hello@kangaroo-marketing.com.
10. International Data Transfers
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy regulations. We only use service providers that offer equivalent levels of data protection.
11. Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via our website or directly to affected individuals. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our services following any changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related enquiries or to exercise your rights, please contact: Kangaroo Trade Marketing Ltd · 71-75 Shelton Street, London, WC2H 9JQ · hello@kangaroo-marketing.com
You also have the right to lodge a complaint with the UK Information Commissioner's Office: ico.org.uk