privacy

1. Who We Are
Natural Born Media Ltd (“we”, “our”, or “us”) is a UK-registered company providing business consultancy, digital marketing, and media services.

Registered office:
Natural Born Media Ltd
Water House, Wyebank, Bakewell, Derbyshire, DE45 1BH

Email: info@naturalbornmedia.co.uk
Company number: [enter company number]

We act as a Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Our Commitment to Your Privacy
We only collect, store, and use personal information where it is necessary to provide our services, communicate effectively, or meet our legal and contractual obligations. All data is securely stored within Microsoft 365 Business (UK/EU data regions) and protected with encryption, access control, and multi-factor authentication (MFA).

3. What Personal Data We Collect
Identity data: name, job title, company, and contact information.
Contact data: email address, phone number, and correspondence records.
Business and project information: details provided through consultations, proposals, or online forms.
Technical data: IP address, browser type, device identifiers, and usage data when you visit our website.
Financial or billing data (clients): payment references and invoices (no card details stored).
We do not collect special category data unless required by contract and with explicit consent.

4. How We Use Your Data
Purpose Lawful Basis
Respond to enquiries, provide quotes, and deliver services Contractual necessity
Send updates or important service information Legitimate interests
Maintain client and project records Legal obligation / legitimate interests
Manage accounts, invoices, and financial compliance Legal obligation
Improve website performance and user experience Legitimate interests (analytics)
We never sell, rent, or trade your personal data.

5. How and Where Data Is Stored
Digital records are stored securely within Microsoft 365 Business with servers located in the United Kingdom and/or European Economic Area (EEA). International transfers, where necessary, are protected using Standard Contractual Clauses (SCCs).

Files are encrypted at rest and in transit.
Access is restricted to authorised users only; MFA is enforced.
SharePoint and OneDrive version control provides a recoverable audit trail.
Backups and email data are retained according to our retention policy (generally up to 11 years for professional and financial records).

6. Sharing Your Information
We share information with trusted processors only where necessary, for example:

Microsoft Ireland Operations Ltd (cloud hosting and productivity services)
Accountancy and payment processing providers (for billing compliance)
Professional advisers (legal or regulatory purposes)
All processors operate under data processing agreements and UK GDPR–compliant safeguards.

7. Cookies and Analytics
Our website may use cookies or analytics tools to improve performance and user experience. You can adjust your browser settings to block or delete cookies at any time.

8. Data Retention
Client records and invoices: 11 years
Enquiries (non-clients): 2 years
Email correspondence: 7 years
Website analytics: 26 months (anonymised)
Data is securely deleted or anonymised when no longer required.

9. Your Rights
You have the right to access, correct, delete, restrict or object to processing, and to data portability. You may also lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, contact privacy@naturalbornmedia.co.uk.

10. Data Security
Encrypted storage and communications (TLS 1.2+)
Role-based access control and least-privilege principles
Secure password policies and MFA
Regular audits and backups
11. Data Protection Officer / Contact
Data Protection Officer (DPO):
Dr Gregory S. Flint
dpo@naturalbornmedia.co.uk

12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The most recent version will always be available at this page.