PRIVACY POLICY

Last updated: 26 July 2026

1. Who we are

Tin Man Communications Limited (“Tin Man”, “we”, “us” or “our”) is an award-winning creative communications agency.

Tin Man Communications Limited is registered in England and Wales under company number 08717578. Our registered office is:

3rd Floor
Baird House
15–17 St Cross Street
London
EC1N 8UW

For the purposes of UK data protection law, Tin Man Communications Limited is the controller of the personal information described in this policy.

If you have any questions about this policy or how we use your personal information, please contact us at:

hello@tinmancomms.com

2. What this policy covers

This policy explains how we collect and use personal information when you:

visit tinmancomms.com;
contact us about our work or services;
work with us as a client, supplier or professional contact;
apply for a role or send us your CV; or
otherwise communicate or interact with Tin Man.
Our website may contain links to other websites and services. Those organisations are responsible for their own privacy practices, so we recommend reading their privacy notices when leaving our website.

3. Information we collect

Depending on how you interact with us, we may collect:

Contact and professional information

This may include your name, email address, telephone number, job title, organisation and other professional contact information.

Enquiries and correspondence

We collect information you provide when contacting us, including the content of emails, enquiries, briefs and other communications.

Client and supplier information

If you work with us, we may hold information necessary to manage our professional relationship, provide or receive services, administer projects, process payments and maintain appropriate business records.

Recruitment information

If you apply for a role or send us your CV, we may collect your contact details, employment history, qualifications, portfolio, references and any other information you choose to include in your application.

Please avoid providing sensitive personal information unless it is relevant and necessary. Where recruitment information includes health, disability, equality monitoring or other special-category information, we will only use it where permitted by data protection law.

Website and analytics information

If you consent to analytics cookies, we may collect information about how you use our website. This may include:

the pages you visit;
the date and time of your visit;
your general geographic location;
your browser and device type;
how you reached our website; and
how you interact with its content.
Further information is provided in our Cookies Policy.

4. How we use your information

We may use personal information to:

respond to enquiries and communicate with you;
discuss potential projects or services;
deliver and manage our work for clients;
manage relationships with clients, suppliers and other professional contacts;
administer contracts, invoices and payments;
consider job applications and manage recruitment;
retain a CV for suitable future opportunities where the applicant has agreed to this;
understand how visitors use our website and improve its content and performance;
protect our website, systems, staff and business;
maintain appropriate financial, legal and business records; and
comply with our legal and regulatory obligations.
We do not sell personal information.

5. Our lawful bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we rely on:

Legitimate interests

We use information where it is reasonably necessary to operate and develop our business, respond to enquiries, manage professional relationships, recruit staff and protect our organisation, provided those interests are not overridden by your rights.

Contract

We use information where necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.

Legal obligation

We may use or retain information where necessary to comply with legal, regulatory, tax, accounting or employment obligations.

Consent

We rely on consent where required, including before placing non-essential analytics cookies on your device. If we rely on consent, you may withdraw it at any time.

6. Cookies and analytics

Our website uses Google Analytics to help us understand how visitors use the site. Google Analytics will only be activated after you have agreed to analytics cookies.

You can accept, reject or change your cookie choices using the cookie controls on our website. For more information, please read our Cookies Policy.

7. Recruitment and careers

Our website links to an external recruitment platform operated by Employment Hero. If you follow that link or submit information through its platform, additional privacy terms may apply.

We may also receive CVs and applications directly by email. If there is no suitable immediate vacancy, we will only retain your CV for possible future opportunities with your permission.

Recruitment information will only be available to people involved in the recruitment process and relevant service providers.

8. Who we share information with

Where reasonably necessary, we may share information with trusted organisations that help us operate our business, including:

website hosting, maintenance and technical-support providers;
email, document-storage and other IT providers;
Google, where you have consented to Google Analytics;
recruitment and applicant-management providers;
accountants, insurers, lawyers and other professional advisers;
contractors and suppliers involved in providing services to us or our clients; and
regulators, courts, law-enforcement bodies or other authorities where legally required.
These organisations may only use personal information for the relevant purpose and must protect it appropriately.

If Tin Man or part of its business is reorganised, sold or transferred, relevant information may be disclosed to advisers and prospective purchasers and transferred as part of that transaction, subject to appropriate safeguards.

9. International transfers

Some of our technology and service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to protect it. These may include using a country covered by UK adequacy regulations or contractual safeguards approved for use under UK data protection law.

10. How long we retain information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including to meet legal, accounting or reporting obligations.

Generally:

initial business enquiries that do not lead to a working relationship may be retained for up to two years after the last meaningful contact;
client, supplier, contractual and financial records may be retained for up to seven years after the relevant relationship or transaction ends;
unsuccessful recruitment applications may be retained for up to six months after the recruitment process ends;
where an applicant has agreed that we may retain their CV for future opportunities, we may keep it for up to 12 months; and
Google Analytics event data may be retained for up to 14 months.
We may retain information for longer where necessary to establish, exercise or defend legal claims, respond to a complaint or comply with the law.

11. How we protect information

We use appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access is restricted to staff, contractors and service providers who need the information for legitimate business purposes and who are subject to appropriate confidentiality obligations.

No internet or email transmission can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

12. Your rights

Depending on the circumstances, you may have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your information;
ask us to restrict how we use your information;
object to processing based on legitimate interests;
receive certain information in a portable format;
withdraw consent where we rely on consent; and
complain to the Information Commissioner’s Office.
These rights are not absolute and may be subject to legal exceptions.

To exercise a right, contact hello@tinmancomms.com. We may ask for information to confirm your identity before responding.

You can also complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

We would appreciate the opportunity to address your concerns directly before you contact the ICO.

13. Children

Our website and services are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal information from children through the website.

14. Automated decision-making

We do not use information collected through this website to make decisions about individuals solely by automated means where those decisions have legal or similarly significant effects.

15. Changes to this policy

We may update this policy when our practices, services or legal obligations change. The latest version will always be published on this page, with the date of the most recent update shown above.