Privacy Policy
Last updated: 20th October 2026
1. Who we are
Yellow Flamingo Ltd, (10759567), Aberdeen House, South Road, Haywards Heath, England, RH16 4NG is the controller of personal data collected through this website. Contact us about privacy at [email protected].
2. Data we collect
| Category | Examples | Source |
| Contact data | Name, email, phone, company, job title | You, via the contact form or email |
| Enquiry data | The content of your message and any details about your brand or project | You |
| Business relationship data | Correspondence, meeting notes, proposals, invoicing details | You and your organisation |
| Technical data | IP address, browser type, device, pages visited, referring site | Automatically, via cookies and server logs |
| Marketing preferences | Whether you have opted in to updates from us | You |
We do not knowingly collect special category data, and the site is not intended for children under 16.
3. How and why we use it
| Purpose | Lawful basis (UK GDPR) |
| Responding to enquiries and arranging meetings | Legitimate interests, or steps before entering a contract |
| Delivering consultancy services and managing client relationships | Performance of a contract |
| Sending occasional business updates | Consent, or legitimate interests for existing business contacts (you can opt out at any time) |
| Running, securing and improving the website | Legitimate interests |
| Analytics and non-essential cookies | Consent |
| Meeting legal, tax and accounting obligations | Legal obligation |
4. Who we share it with
We do not sell your personal data. We share it only with:
- service providers who help run our business, such as website hosting ([host]), email ([provider]), CRM and analytics ([tools]), under contracts that protect your data;
- professional advisers such as accountants and lawyers;
- authorities, where required by law;
- a buyer or successor if our business is reorganised or sold.
If you interact with our Instagram or LinkedIn content, those platforms process your data under their own privacy policies.
5. International transfers
Some providers may store data outside the UK. Where they do, we ensure an adequate level of protection, such as a UK adequacy regulation or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Enquiries that do not lead to work: up to 12 months after our last contact.
- Client and contract records: 6 years after the engagement ends, for legal and tax purposes.
- Marketing data: until you unsubscribe or withdraw consent.
- Analytics data: per the retention period set in relevant analytics tool, typically 14 months.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing, including for direct marketing;
- data portability;
- withdraw consent at any time, where we rely on consent.
To exercise any right, email [email protected]. We will respond within one month. There is normally no fee.
8. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure.
9. Complaints
Please contact us first so we can try to help. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be posted on this page with its revision date.