Legal
Privacy Policy
What this website collects, why, how long it is kept, and what you can ask for. Written to describe what this site actually does rather than what a template assumes.
Who is responsible for your data
Ferguson Media Group operates this website and is the data controller for personal data submitted through it. Enquiries and data protection requests can be sent to Hello@FergusonMediaGroup.com.
For confirmation: the registered legal entity name, company number and registered address are not currently published on this site. A data controller should be identifiable, and these should be added before this policy is relied upon.
What this website collects
This website collects personal data in one place only: the contact form.
When you submit the contact form, the following is collected — your name, your email address, and optionally your company name and a website or domain name, together with the enquiry category you select and the message you write.
The form also records the time of submission, a shortened one-way hash of your IP address, and your browser's user agent string. The IP address is hashed rather than stored, and is used only to apply a submission rate limit — it cannot be reversed to recover the original address.
Why it is collected, and on what basis
The information you submit is used to respond to your enquiry and to keep a record of the correspondence. The lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR: you have contacted Ferguson Media Group about a commercial matter and expect a reply.
The technical data — timestamp, hashed IP, user agent — is processed on the same basis, for the specific purpose of protecting the form from automated abuse.
Nothing submitted through this form is used for marketing. There is no mailing list, and you will not be added to one.
Where it is stored, and for how long
Enquiries are written to a file on the web server, in a directory outside the publicly accessible web root, and are also sent by email to the address above. Files are created with permissions that restrict them to the site's own account.
Enquiries are retained for as long as there is a business reason to keep them — typically the life of the enquiry and any subsequent engagement — and are reviewed periodically and deleted when that reason ends. Rate-limiting records, which contain only timestamps against a hashed IP, are pruned automatically within an hour.
For confirmation: a specific retention period should be set by the owner, and this paragraph updated to state it.
Who else is involved
This website is served by a third-party hosting provider, which processes data on behalf of Ferguson Media Group in order to run the site and deliver email. Server logs kept by the hosting provider may contain IP addresses and are subject to that provider's own retention arrangements.
Email sent from and received by this website is handled by that provider's mail services.
No other third parties receive data from this website. There is no analytics service, no advertising network, no tag manager, no embedded social media, no font or script loaded from another company's servers, and no chat widget. The contact form is protected by anti-spam measures that run entirely on this site's own server.
For confirmation: the hosting provider should be named here, and a data processing agreement should be in place with them.
Cookies and tracking
This website sets no cookies at all, and runs no analytics or tracking of any kind. See the cookie policy for the detail.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal data held about you, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to receive data you provided in a portable form.
To exercise any of these, email Hello@FergusonMediaGroup.com. There is no charge, and a response will be provided within one month.
If you are not satisfied with how a request has been handled, you can complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at [ico.org.uk](https://ico.org.uk/make-a-complaint/).
Children
This website is a business-to-business site and is not directed at children. No part of it is intended to collect data from anyone under 18.
Changes to this policy
This policy is updated when the website changes in a way that affects it. The date at the top of this page shows when it was last reviewed.