Privacy Policy

Contact details

For this site and related enquiries, So What Media Ltd is the controller of the personal information described in this policy.

So What Media Ltd is a private limited company registered in Scotland under company number SC502693. The registered office is 4-5 Mitchell Street Mitchell Street, Edinburgh, Scotland, EH6 7BD.

If you have questions about this policy or how we use your personal information, contact us at [email protected].

Information we collect

We may collect information you send to us through the site, including your name, work email address, company name, company website, competitor details, prompt examples, page examples, and any notes or context you choose to provide.

If you email us or become a client, we may also collect the information needed to respond, manage the relationship, deliver the work, keep records, and meet legal or accounting obligations.

When you visit the site, we may collect limited technical information such as IP address, browser type, device information, pages visited, approximate location, referral source, and security or server log information.

How we use personal information

We use personal information to respond to enquiries, review audit requests, confirm scope and timing, provide services, keep business records, maintain site security, prevent spam or abuse, understand how the site is used, and improve the site and our services.

We do not sell personal information.

Lawful bases

Where UK data protection law applies, we rely on one or more lawful bases depending on the context.

We may use personal information to take steps before entering into a contract or to perform a contract with you or your organisation.

We may rely on legitimate interests to respond to enquiries, assess audit requests, maintain business records, protect the site, prevent abuse, and improve our services, provided those interests are not overridden by your rights and freedoms.

We may rely on legal obligation where we need to keep records for tax, accounting, regulatory, or legal reasons.

Where consent is required, such as for certain non-essential cookies or analytics, we will ask for consent and you can withdraw it.

Cookies, analytics, and anti-spam checks

The site may use strictly necessary technologies to make the site work, protect forms, prevent spam, and keep the service secure.

The Request Audit form uses Cloudflare Turnstile to help distinguish legitimate submissions from spam or automated abuse.

We may add analytics later to understand how visitors use the site. If those analytics use non-essential cookies or similar technologies, we will ask for consent where required before using them.

Who we share information with

We may share personal information with service providers who help us operate the site, process form submissions, host the website, provide email, protect against spam or abuse, provide analytics, manage client records, or provide professional advice.

This may include providers such as Cloudflare, which hosts and protects parts of the site, and Google services, which may be used to receive form submissions and email.

We may also share information if required by law, regulation, court order, or to protect our rights, users, systems, or business.

International transfers

Some service providers may process personal information outside the UK. Where this happens, we expect appropriate safeguards to be in place, such as contractual protections or other transfer mechanisms recognised under applicable data protection law.

How long we keep information

We keep personal information only for as long as needed for the purpose it was collected, including responding to enquiries, managing client relationships, maintaining business records, resolving disputes, meeting legal obligations, and protecting the site.

If an enquiry does not become client work, we would normally expect to keep the enquiry record for up to 24 months unless there is a reason to keep it for longer or delete it sooner.

Client, contract, tax, and accounting records may be kept for longer where required for legal, tax, accounting, or business record reasons.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to, or receive a copy of your personal information. Where processing is based on consent, you may withdraw that consent.

These rights are not absolute and may depend on the lawful basis and the reason we hold the information.

To exercise your rights, contact [email protected].

Complaints

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve it.

You can also complain to the Information Commissioner's Office, the UK supervisory authority for data protection. The ICO website is ico.org.uk/make-a-complaint.

Changes to this policy

We may update this privacy policy from time to time. The latest version will be posted on this page.