What we do with your data.

Mojo Business Solutions Limited, trading as Mojo Media, registered in England and Wales, company number 07840909, at 13 Billington Road, London SE14 5QH. We are the data controller for the personal data described here. Questions, or any of the requests below, go to hello@mojomedia.co.uk.

Anyone who visits this website or gets in touch with us, the people we work with at our clients, and the suppliers and freelancers who work with us. If you visit a site we have built for a client, that site has its own privacy policy, and the section on client websites below explains how the two fit together.

When you send an enquiry through the website we collect your name, company if you give one, email address, phone number if you give one, what you need, your budget range if you pick one, and your message. Email and phone calls give us much the same: who you are, how to reach you, and what you want to talk about.

We use it to reply and to carry on the conversation if one starts. Our lawful basis is legitimate interests: you contacted us and expect an answer. You are not added to any mailing list, and we do not use it for marketing.

An enquiry from the website form is written to a file on our server, saved in the site database, and emailed to us. The file exists so a mail outage cannot lose your message, which means your enquiry sits in three places until we clear it down.

We also send you one automatic email confirming we have it. It repeats your first name and the options you picked, never your message, and it is the only email you get from us unless Ben writes back.

The contact form uses Google reCAPTCHA v3 to tell people from bots. Google receives your IP address and some information about how you interacted with the page, and handles it under its own privacy policy. It runs only on the contact page, and only when you submit.

We also run some automatic checks of our own on each enquiry: how quickly the form was filled in, whether the message is full of links, and whether it reads like a sales pitch. Anything that looks like spam is still delivered to us and read by a person, just marked so we know to look twice, and it does not get the automatic confirmation. Nothing is turned away on the strength of those checks alone.

We use Google Analytics to see which pages get read and which ones lead to a conversation. It loads only if you accept analytics cookies, and if you decline it is never loaded at all rather than loaded and switched off. It never receives your name, email or anything you type into the form. What each cookie does, and how to change your mind, is on the cookies page.

When we work together we hold the contact details of the people we deal with at your organisation, our correspondence, the material you send us for the work (briefs, copy, images, access to systems), and what we need to invoice you.

Our lawful basis is the contract between us, and legitimate interests for running the relationship day to day. Logins and access you give us are used only for the work you have asked for.

Most of our calls happen on Microsoft Teams. Some are recorded and transcribed using Fathom, so feedback is captured in full and goes straight into the work rather than relying on somebody’s notes. You will see the notetaker join the call, and if you would rather it did not, say so and we will switch it off. Recordings are used only for the project they belong to.

When we build, host or look after a website for a client, the client decides what that site collects about its own visitors and is responsible for it. We handle that data only on the client’s instructions, under our agreement with them, to keep the site running. If you have a question about your data on one of those sites, the site’s own privacy policy is the place to start, and the client is the one to ask.

The servers we run are in the UK, with Hyperslice in Leeds. Some client sites run on services the client has chosen instead.

If you work with us we hold your contact details, our agreement, and what we need to pay you. Our lawful basis is the contract between us, and our legal obligation to keep financial records.

We do not sell personal data or share it for anyone else’s marketing. It is handled by the people at Mojo Media, and by the suppliers that run the plumbing:

• Hyperslice, which hosts our servers in the UK
• Microsoft 365, for our email, files and calls
• Resend, which sends the website’s notification to us and the confirmation to you
• Fathom, for the calls we record
• Google, for reCAPTCHA and, with your consent, Analytics
• the developers who work with us on projects, some of whom are based outside the UK
• our accountants, and anyone the law requires us to share with

Where personal data goes outside the UK, it is protected by UK adequacy regulations or by contract terms approved for the purpose, such as the International Data Transfer Agreement or the standard contractual clauses in a supplier’s own terms.

Enquiries that do not become work are kept for two years from your last contact with us, so we have the history if you come back, then deleted from the database, the backup file and our mailbox.

Client and project records, supplier records and anything financial are kept for six years after the work ends, which is what the law, our accountants and our insurers need. Call recordings are kept for the life of the project.

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to us holding it at all. Email hello@mojomedia.co.uk and we will deal with it within one month.

If you think we have got it wrong you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.

If we change what we collect or why, we update this page and the date at the top. Where the change is material we will ask for consent again rather than assume it.