Privacy Policy

    Last updated: 13 September 2026

    1. Introduction

    Affinity Media ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and digital out-of-home advertising services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    2. Data Controller

    Affinity Media is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at .

    3. What Data We Collect

    We may collect and process the following personal data:

    • Account information: Name, email address, phone number, and password when you register an account.
    • Company details: Company name, billing address, and VAT number provided in your advertiser profile.
    • Booking & payment data: Details of screen bookings, invoices, payment references, and transaction history.
    • Media files: Advertising creative assets you upload for display on our screens.
    • Technical data: IP address, browser type, device information, and cookies when you visit our website.
    • Communication data: Any correspondence you send to us via email, phone, or our contact form.

    4. Lawful Basis for Processing

    We process your personal data on the following lawful bases under Article 6 of the UK GDPR:

    • Contract: Processing necessary to fulfil our advertising services and manage your bookings.
    • Legitimate interests: Improving our services, fraud prevention, and business administration.
    • Legal obligation: Compliance with tax, accounting, and regulatory requirements.
    • Consent: Where you have opted in to marketing communications (which you may withdraw at any time).

    5. How We Use Your Data

    • To create and manage your advertiser account.
    • To process screen bookings and generate invoices.
    • To display your advertising content on our digital screens.
    • To communicate with you regarding your bookings, payments, and account.
    • To improve our website and services.
    • To comply with legal and regulatory obligations.

    6. Data Sharing

    We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in operating our platform, processing payments, and delivering our services. All third parties are required to process your data in accordance with UK GDPR. We may also disclose your data where required by law or to protect our legal rights.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is retained for the duration of your account and for up to 6 years after closure for tax and legal purposes. Booking and invoice records are retained for a minimum of 6 years in accordance with HMRC requirements.

    8. Data Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data storage, secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

    9. Your Rights

    Under UK GDPR, you have the following rights:

    • Right of access: Request a copy of your personal data.
    • Right to rectification: Request correction of inaccurate data.
    • Right to erasure: Request deletion of your data where there is no compelling reason to continue processing.
    • Right to restrict processing: Request that we limit how we use your data.
    • Right to data portability: Request your data in a structured, machine-readable format.
    • Right to object: Object to processing based on legitimate interests or direct marketing.
    • Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

    To exercise any of these rights, please contact us at . We will respond within one month.

    10. Cookies

    Our website uses essential cookies to enable core functionality such as authentication and session management. We do not use third-party advertising or tracking cookies. By using our website, you consent to the use of essential cookies necessary for the operation of the service.

    11. International Transfers

    Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).

    12. Complaints

    If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

    14. Contact Us

    For any questions regarding this Privacy Policy or your personal data, please contact us at .