Privacy Policy

1. Who We Are (Data Controller)

Expressive Media (operated by founder and Principal Engineer Brian Revie, located at 10 Camden Place, Preston, Lancashire, PR1 3JL, United Kingdom) is the data controller responsible for your personal information collected through expressivemedia.co.uk.

For any privacy or data protection enquiries, you can contact Brian Revie directly at hello@expressivemedia.co.uk.

2. What Information We Collect

We only collect the minimum personal information necessary to respond to your project enquiries and provide our software, AI, web, and mobile app services:

• Enquiry & Project Brief Data: Your name, email address, phone/WhatsApp number (optional), company name (optional), and project notes when you submit our Project Brief form or callback form.
• Technical & Consent Data: Your cookie consent preferences stored locally in your browser and standard server security logs (such as IP address and browser user-agent) needed to protect our cloud infrastructure.

3. Lawful Basis for Processing (UK GDPR)

Under Article 6 of the UK GDPR, we process your personal data on the following lawful bases:

• Consent & Pre-Contractual Steps (Art. 6(1)(a) & (b)): When you submit a project brief or callback request, we process your details to reply to your enquiry, prepare a proposal or quote, and enter into a contract at your request.
• Legitimate Interests (Art. 6(1)(f)): To maintain the security, reliability, and performance of our website and cloud services.
• Legal Obligation (Art. 6(1)(c)): Maintaining statutory accounting and tax records for active client engagements.

4. How We Store & Protect Your Data

We never sell, rent, or trade your personal data to third parties or marketing lists. We use trusted, enterprise-grade infrastructure providers acting as data processors under strict data processing agreements:

• Google Cloud Platform (`europe-west2`, London, UK): Secure serverless hosting and encrypted transport (TLS/HTTPS).
• Resend (`eu-west-1`): Transactional email delivery so your project brief reaches Brian Revie and you receive an immediate confirmation copy.

5. Data Retention

Enquiry emails and project briefs that do not proceed to a commercial engagement are retained for up to 24 months so you can pick up the conversation when ready, or deleted immediately upon your request. Client project and invoicing records are kept for 6 years in line with UK HMRC statutory requirements.

6. Your Rights Under UK GDPR

You have the right to:

• Request access to a copy of the personal data we hold about you.
• Request correction or immediate erasure (“right to be forgotten”) of your personal data.
• Withdraw your consent or object to processing at any time.
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has not been handled properly.

To exercise any of these rights, email hello@expressivemedia.co.uk and we will action your request promptly.