Our Privacy Policy

Last updated: 1st January 2026.

1. Who we are

The Tallulah Agency Limited (“we”, “us”, “our”) is a UK-based limited company. We are the data controller for the personal data we process.

Company name: The Tallulah Agency Limited. Registered address: Maidstone Studios, New Cut Road, Maidstone, Kent, ME14 5NZ. Email: hello@tallulah.agency

2. What personal data we collect

We may collect and process the following types of personal data:

Name
Email address
Telephone number
Company name and job title
Enquiry details or correspondence
Website usage data (e.g. IP address, browser type)

We only collect personal data that is necessary for our business activities.

3. How we collect personal data

We collect personal data when you:

Contact us via our website, email, or phone
Submit an enquiry or request information
Work with us as a client, supplier, or partner
Use our website (via cookies or analytics tools)

4. How we use your personal data

We use personal data to:

Respond to enquiries and communications
Provide our services
Manage client and supplier relationships
Send relevant business communications
Improve our website and services
Meet legal or regulatory obligations

We do not sell personal data.

5. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

Consent – where you have actively provided information
Contract – where processing is necessary to deliver services
Legitimate interests – to operate and grow our business
Legal obligation – where required by law

6. Data sharing

We may share personal data with:

Professional advisers (e.g. accountants)
IT and hosting providers
Third-party suppliers or freelancers engaged to support delivery

All third parties are required to handle personal data securely and in line with data protection law.

7. International data transfers

Some systems we use may store or process data outside the UK (for example, cloud-based email or hosting services).

Where this occurs, appropriate safeguards are in place to ensure data is protected in accordance with UK GDPR.

8. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.

9. How long we keep personal data

We keep personal data only for as long as necessary for the purposes it was collected, including legal, accounting, or reporting requirements.

10. Your data protection rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data
Object to or restrict processing
Withdraw consent (where applicable)
Lodge a complaint with the Information Commissioner's Office

11. How to contact us

If you have any questions about this privacy notice or how we handle personal data, please contact: Email: hello@tallulah.agency

12. Changes to this notice

We may update this privacy notice from time to time. The latest version will always be available on our website.