Privacy Policy - Cardamom Food, Drink & Lifestyle PR

Cardamom Creative Limited, trading as Cardamom Food, Drink & Lifestyle PR (“we”, “our”, or “us”), is committed to protecting and respecting your personal data and privacy.

This privacy policy explains how we collect, use, store, and protect any personal data gathered through our website (https://cardamompr.co.uk) and our PR services. Whenever you provide personal data, we are legally obliged to process it in line with all applicable data protection legislation, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) (together, the “Data Protection Laws”).

1. Who We Are and How to Contact Us

For the purpose of the Data Protection Laws, the data controller is Cardamom Creative Limited (Company No. 17427641), trading as Cardamom Food, Drink & Lifestyle PR.

If you have any questions regarding this policy, wish to exercise your legal rights, or require further details on our data protection practices, please contact us:

FAO: Privacy Officer
Cardamom Creative Limited
Wakeham Farm, Aveton Gifford, Kingsbridge, Devon, TQ7 4NE
Email: hayley@cardamompr.co.uk / jonathan@cardamompr.co.uk
Telephone: 07887 474 104 / 07710 048 728

2. Your Legal Rights

Under Data Protection Laws, you have the following rights regarding your personal information:

To be informed – You have the right to transparent information regarding how we collect and process your personal data.
Access – You have the right to request access to the personal data we hold about you and receive a copy of that data.
Rectification – You have the right to request correction of inaccurate, incomplete, or out-of-date personal data.
Erasure – Known as the “right to be forgotten”, you may request deletion of your personal data where there is no compelling legal reason for its continued processing.
Restrict Processing – You have the right to request that we pause or limit the processing of your personal data under certain conditions.
Data Portability – You have the right to obtain and reuse your personal data in a structured, commonly used, and machine-readable format.
Object – You have the right to object at any time to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Automated Decision-Making & Profiling – We do not carry out automated decision-making or profiling.

3. The Data We Collect

We collect and process personal data that is necessary to deliver our services, communicate with clients and journalists, and maintain our site:

Contact Details: Names, job titles, business names, addresses, phone numbers, and email addresses provided directly by you.
Technical & Usage Data: IP addresses, browser types, device information, and site interaction data collected via cookies when you visit our website.
Inquiry Information: Correspondence and details supplied when submitting an inquiry or contacting our team.

4. How Your Data is Used

We process your personal information under the following legal bases:

To fulfill our contractual obligations or prepare client proposals.
Under our Legitimate Interests to manage commercial relationships, respond to business queries, and improve website functionality and infrastructure.
To send relevant PR updates, industry newsletters, or service information where consent has been given or where permitted under legitimate interest.
To comply with legal, regulatory, and accounting obligations.

5. Third-Party Data Processors

We do not sell, rent, or trade your personal information. We only disclose personal data to trusted third-party service providers (data processors) who assist us in operating our business and website under strict confidentiality and processing agreements:

IT support and web hosting services (SiteGround)
Email and cloud communications providers
Email marketing platforms
Banking, accounting, and legal advisors
Secure document storage and disposal services

All processors are legally required to handle your data securely and only according to our explicit written instructions.

6. Where Your Data is Stored

All digital personal data processed directly by us is hosted securely within the United Kingdom and the European Economic Area (EEA).

7. Data Retention

We retain personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, including legal, statutory accounting, and reporting obligations.

8. Right to Complain

If you have concerns about how we handle your personal data, please contact our Privacy Officer directly so we can resolve the matter. You also retain the right to lodge a formal complaint at any time with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk | Telephone: 0303 123 1113