Privacy Policy
Last updated: 20 October 2026
1. Who we are
Deadpoets Media is operated by Yoggi Sansom.
We provide digital marketing, social media management, branding, creative production, websites, e-commerce and business systems.
In this policy, "Deadpoets Media", "we", "us" and "our" refer to Yoggi Sansom operating as Deadpoets Media.
We are the data controller for personal information used to manage our own business, website, enquiries and professional relationships. Where we handle information on behalf of a client, our role is explained in section 7.
Website: deadpoetsmedia.com
2. What this policy covers
This policy explains how we handle personal information relating to:
- Website visitors and people making enquiries.
- Prospective and existing clients and their representatives.
- Creators, collaborators, contractors and suppliers.
- People receiving our marketing communications.
- Individuals whose information appears in project materials, where we determine how that information is used.
Additional privacy information may apply to particular projects or software products. Our clients' privacy notices explain their use of information held in systems we manage on their behalf.
3. Information we collect
The information we collect depends on your relationship with us.
Contact and professional information
Names, email addresses, telephone numbers, business names, job titles and relevant business or professional profiles.
Enquiries and correspondence
Messages, selected services, project requirements, timing, budget, meeting arrangements and other information provided when discussing work with us.
Client and project records
Briefs, proposals, agreements, correspondence, approvals, feedback, project materials and records of services provided.
Creative materials
Names, biographies, images, video, audio, social media handles and other personal information contained in materials supplied or produced during a project.
Billing and payment records
Billing details, invoices, payment references, transaction status and payment-related correspondence. External payment providers may collect additional information directly under their own privacy notices.
Technical information
Information associated with website requests, such as IP addresses, browser and device details, requested resources and access times, where recorded by the services delivering and protecting the website.
Marketing preferences
Subscription details, permissions, communication preferences and requests not to receive marketing.
Please avoid submitting sensitive personal information through our general enquiry form unless we have agreed an appropriate way to receive it.
4. Where information comes from
We obtain information directly from you through our enquiry form, email, meetings and other communications.
We may also receive information from your organisation, clients, collaborators or people introducing you to us. Relevant professional information may come from public sources, such as company websites and professional profiles.
Where required, we provide information about the source and our use of your details when contacting you or within the applicable legal timeframe.
5. Why we use information
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries, discussing requirements and preparing proposals | Taking steps at your request before entering a contract, or legitimate interests in responding to business enquiries. |
| Delivering services and managing projects | Performing a contract with you, or legitimate interests in providing services to the organisation you represent. |
| Managing suppliers, contractors and collaborators | Contract, or legitimate interests in organising and delivering our work. |
| Producing commissioned creative materials | Contract, legitimate interests or consent, depending on the relationship and intended use. |
| Invoicing and financial administration | Contract, legal obligations and legitimate interests in administering our business. |
| Providing website functionality and protecting systems | Legitimate interests in providing reliable services, preventing misuse and protecting information, together with applicable legal obligations. |
| Sending newsletters and other marketing | Consent where required, or legitimate interests where applicable marketing rules permit this. |
| Handling complaints, disputes and legal claims | Legal obligations and legitimate interests in resolving issues and establishing, exercising or defending legal rights. |
Where we rely on legitimate interests, we consider whether the processing is necessary and whether your rights and interests override those interests.
Where information is necessary to enter into or perform a contract, we explain this when requesting it. Without that information, we may be unable to provide the requested service.
6. Our website and enquiry form
Our enquiry form collects the information you enter so we can understand your requirements and respond. Successfully submitted enquiries are stored in our enquiry database.
The form uses validation and anti-spam checks to help prevent automated or inappropriate submissions.
Information entered in the enquiry form is held only in your browser's memory until you submit it and is not saved on your device.
The website currently has no connected external analytics service or advertising pixels. Certain interactions, such as starting a form or clicking a contact button, are recorded temporarily in browser memory without being sent to an external analytics provider.
Our website's fonts are served from our own website, so loading them does not send information to Google or any other font provider.
7. Information handled on behalf of clients
Our services may involve hosting, accessing or managing:
- CRM databases and customer records.
- Mailing lists and marketing preferences.
- Enquiries, contact history and follow-up records.
- Website and content management information.
- E-commerce records and related business information.
Where a client determines why information is processed and we act on its instructions, the client is normally the data controller and we act as its processor.
In that role, we handle information for the agreed service and in accordance with the client's instructions and applicable data protection obligations. The client's privacy notice explains its purposes and lawful bases.
This policy does not authorise us to use client-controlled records for our own unrelated marketing or other independent purposes.
If your information is held in a system we manage for a client, you should normally contact that client to exercise your rights. If you contact us, we will direct the request to the appropriate client and assist as required.
8. Marketing communications
We may send information about our services, work, insights and business updates.
For individuals, sole traders and certain partnerships, we obtain consent for unsolicited electronic marketing unless a relevant legal exception applies.
Where we rely on the existing customer exception, we must have obtained your contact details directly during a sale or negotiations for a sale, market our own similar services and offer an opportunity to opt out both when collecting your details and in subsequent messages.
We may send relevant business marketing to corporate contacts where permitted by law, subject to their data protection rights.
You can object to direct marketing at any time. Use the unsubscribe option in our marketing communications or email .
We may retain minimal information on a suppression list to ensure we respect your preference.
Unsubscribing does not prevent necessary communications about an enquiry, project, contract or payment.
9. Artificial intelligence tools
We use AI tools, including ChatGPT and Claude, to support general research, ideas and drafting.
We do not submit confidential client information to these tools.
If we introduce an AI use involving personal information beyond the activities described in this policy, we will assess the applicable data protection requirements and provide additional privacy information where required before that use begins.
10. Who receives information
Where necessary for the purposes described in this policy, information may be shared with:
- Google Workspace for business email and file storage.
- Website hosting, database, infrastructure, backup and security providers.
- Cloudflare Turnstile — used on our contact form to protect it from spam and automated abuse. It processes limited technical data such as your IP address and browser signals to check that a real person is submitting the form.
- Communication, newsletter, calendar and meeting providers where used.
- Payment providers selected to collect agreed charges.
- Contractors and collaborators involved in delivering services.
- Accountants, solicitors, insurers and other professional advisers.
- Public authorities where disclosure is legally required.
We share information relevant to the recipient's role and the purpose of the disclosure.
Some recipients process information on our behalf. Others, such as certain payment providers and professional advisers, act as independent controllers.
Information may also be disclosed where necessary in connection with a proposed business transfer, subject to appropriate confidentiality and data protection safeguards.
11. International processing
Providers supporting our business may process information outside the United Kingdom, including through overseas infrastructure or support access.
Where processing constitutes a restricted international transfer, we are required to ensure an appropriate legal transfer mechanism applies. Depending on the destination and provider, this may involve UK adequacy regulations or approved contractual safeguards, together with any required assessment and additional protections.
You can contact for information about the arrangements relevant to your information and how to obtain details of applicable safeguards.
12. How long we keep information
We retain personal information for as long as necessary for its purpose, taking account of legal obligations and legitimate business needs.
Our retention decisions consider:
| Information | Retention considerations |
|---|---|
| Enquiries and proposals | Whether discussions remain active, whether a client relationship follows and whether correspondence is needed to resolve questions or disputes. |
| Client and project records | Delivery, revision and support requirements, contractual obligations and relevant legal claims. |
| Financial records | Applicable tax, accounting and other record-keeping requirements. |
| Creative materials | Project requirements, licensing arrangements, permissions and agreed archive needs. |
| Marketing records | Whether the relationship and lawful basis remain relevant, and whether you have withdrawn consent or objected. |
| Suppression records | The need to prevent further unwanted marketing. |
| Technical and security records | Operational troubleshooting, security monitoring and investigation requirements. |
| Client-controlled information | The client's instructions and applicable service, retention and deletion arrangements. |
Information may be retained longer where required for a particular legal obligation, dispute or investigation.
Backup copies may remain until overwritten under the applicable backup cycle. Backup retention must also be limited and access appropriately controlled.
Browser storage for enquiry drafts is explained separately in our Cookie Policy.
13. Security
We take reasonable technical and organisational steps appropriate to the information we handle and the risks involved.
These responsibilities include controlling access, protecting credentials, maintaining systems and considering the security arrangements of providers.
No website, system or transmission method can be guaranteed completely secure.
Where a personal data breach occurs, we assess it and notify affected clients, individuals or the regulator where legally required.
14. Your rights
Depending on the circumstances, you may have the right to:
- Access your personal information.
- Correct inaccurate or incomplete information.
- Request deletion.
- Restrict processing.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on it.
You have an absolute right to object to the use of your information for direct marketing, including associated profiling.
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Contact to exercise your rights. We may request information necessary to verify your identity. We normally respond within one month, subject to extensions or adjustments permitted by law.
Some rights are subject to legal conditions or exceptions. If we cannot fulfil a request, we will explain why.
15. Complaints
Please contact if you have concerns about our use of personal information.
You also have the right to complain to the Information Commissioner's Office. You do not have to contact us first.
16. Children's information
Our website is directed at business users and is not intended to solicit enquiries or marketing subscriptions from children.
If a commissioned project involves children's information or their appearance in creative materials, appropriate project-specific privacy information, permissions and safeguards are required.
17. External websites
Our website and communications may contain links to other websites or services. Their operators are responsible for their own processing, which is explained in their privacy notices.
18. Changes to this policy
We may update this policy to reflect changes to our services, processing or legal requirements.
The date above shows when it was last updated. Where necessary, we will provide additional notice or obtain consent before introducing a new use of personal information.