How DIRT AND GLORY MEDIA LTD uses personal information in its business
Last updated 9 September 2026
This notice explains how we use personal information about clients and prospective clients, suppliers, freelancers and other professional contacts, people who contact us, marketing contacts and visitors to our website. Job applicants and participants in campaigns may receive a more specific notice.
DIRT AND GLORY MEDIA LTD, company number 09070869, is a creative communications agency registered in England and Wales. Our registered office is 35 Ballards Lane, Finchley, London, N3 1XW.
We are the controller when we decide why and how personal information is used for the business activities described in this notice. This means we are responsible for handling that information fairly, lawfully and transparently.
We also provide services in which we process personal information solely on a client's documented instructions. For those activities, the client is normally the controller and we act as its processor. The relevant client or campaign privacy notice explains that processing. We are not both controller and processor for the same processing purpose.
The information we use depends on your relationship with us and may include:
Please do not send us personal information about another person unless you are authorised to do so and have given them appropriate privacy information.
We use contact details and correspondence to answer enquiries, understand requirements, prepare proposals and take steps requested before entering a contract. We rely on steps necessary before a contract, where the person is a prospective contracting party, and our legitimate interests in developing and managing our business relationships.
We use business contact, contract, project and communication records to deliver services, coordinate work, obtain approvals and manage client relationships. We rely on contract where the individual is a party to the agreement and on our legitimate interests in providing services and communicating with representatives of corporate clients.
We use contact, contract, professional and payment information to appoint and manage suppliers and freelancers, coordinate services and make payments. We rely on contract, legal obligations and our legitimate interests in operating our business and maintaining suitable supplier relationships.
We use transaction, accounting and business records to issue and pay invoices, keep financial records, prevent fraud, meet tax and regulatory duties and respond to lawful requests. We rely on contract, legal obligations and our legitimate interests in protecting the business and maintaining accurate records.
We use contact details, correspondence and relevant records to investigate and respond to enquiries or complaints and to establish, exercise or defend legal claims. We rely on legitimate interests, legal obligations and contract where the issue relates to an agreement with you.
We use technical information to operate and secure our website, diagnose faults, understand broad usage and protect our systems. We rely on legitimate interests for strictly necessary security and operational activities. We use consent where required for non-essential cookies, analytics or similar technologies. Our cookie information should be read alongside this notice.
We may use professional contact details to send relevant information about our services, work and events. We rely on legitimate interests for appropriate business-to-business communications and on consent where the Privacy and Electronic Communications Regulations require it. Every electronic marketing message provides a straightforward way to opt out.
Our legitimate interests include developing and managing professional relationships, delivering and improving our services, operating an efficient and secure business, maintaining records, recovering debts and protecting our legal and commercial interests. Before relying on this basis, we consider whether the processing is necessary and balance our interests against the effect on the people concerned.
We usually obtain information directly from you. We may also receive it from your employer or colleagues, our clients and project partners, suppliers and freelancers, professional advisers, public professional profiles and websites, Companies House, event organisers, referrals and publicly available business sources.
Where necessary, we may share the minimum relevant information with:
Service providers acting on our behalf must protect the information and use it only for the services they provide. We do not sell personal information.
Some technology and service providers may process personal information outside the United Kingdom. Where this amounts to a restricted transfer, we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. We also assess whether additional protections are needed. Contact us if you would like more information about safeguards relevant to your information.
We keep personal information only for as long as needed for the purpose for which it was collected, taking account of contractual, accounting, tax, regulatory and legal-claims requirements. In general:
We may retain information for longer where the law requires it or where it is reasonably necessary for an investigation or legal claim. We delete or anonymise information when it is no longer needed.
Depending on the circumstances and our lawful basis, you may have the right to:
These rights are not absolute and exemptions may apply. We may ask for information to confirm your identity. We normally respond within one month and do not usually charge a fee.
Your right to object. You may object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds to continue or need the information for legal claims. You have an absolute right to object to direct marketing at any time.
We use appropriate technical and organisational measures designed to protect personal information from accidental or unlawful loss, alteration, disclosure, access or destruction. Access is limited to people who need the information for their work, and we require service providers to protect information entrusted to them.
No online service can be guaranteed completely secure. If a personal data breach occurs, we will assess it promptly and notify affected individuals and the Information Commissioner's Office where the law requires us to do so.
We do not make decisions about people using solely automated processing that produces legal or similarly significant effects.
If you have a question about this notice or want to exercise a data protection right, contact:
Please contact us first so that we have an opportunity to address your concern. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.
Make a complaint to the Information Commissioner's Office
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We may update this notice when our activities, suppliers or legal obligations change. The latest version will show its revision date. If a material change affects information already collected, we will take reasonable steps to bring it to the attention of affected people before the new use begins.
For enquiries please contact info@dirtandglorymedia.com
For enquiries please contact info@dirtandglorymedia.com
