About this notice
Ottr Works Ltd exists to support effective communications between its clients and their stakeholders (including journalists, analysts and blog/website/social media followers). As such, we handle personal information.
This Transparency Notice describes how Ottr Works Ltd collects and uses personal information during and after your relationship with us.
Ottr Works Ltd is a “data controller” and is responsible for deciding how we hold and use personal information and for explaining it clearly.
This notice applies to prospective, existing and former clients of Ottr Works Ltd, individual and business contacts and prospects, individuals who request information from us, any person who provides services to Ottr Works Ltd, either as an individual or as the employee or representative of a service provider and third parties acting for our clients.
To be COMPLETELY transparent; as GDPR is still so new (and as a small business) we’re trying our best to be compliant, but as there is still a certain level of interpretation around GDPR, guaranteeing 100% compliance is tricky at this stage (we believe it’s tricky for everyone to be honest).
If you have any questions about this Transparency Notice or how we handle personal information, please contact Ben Lawton, via
What information do we hold?
‘Personal data’ or ‘personal information’ is defined as any information about an individual from which that person can be identified.
How we collect such information is dependent on the relationship (details follow).
We process: Names, job titles and contact details. We also store email correspondents. This is necessary for the performance of the contract between us.
Prospects and other non-clients
We process: Names, job titles and contact details. We also store email correspondents. Such processing is necessary for the legitimate interest of promoting and growing our business and improving our services.
We process: Names, job titles and contact details. We also store email correspondents. This is necessary for the performance of the contract between us. We record details relating to the performance of the contract between us, including financial information and bank details for payment. Such processing is necessary for performance of the arrangement.
We process: Names, job titles contact details and pitch.communication preferences. We also store email correspondents. We collect and process journalist data for the legitimate interest of providing information which helps journalists and our clients work well with each other. These services serve the interests of journalists, who wish to be kept informed on what is happening in the sectors they cover and businesses that wish to share information that might be of interest. This is known as ‘media relations’ and is a well-established practice.
How we collect information
We collect personal information directly when establishing a client, supplier or journalist relationship, through our website enquiries form or where we enter into a work agreement.
We collect further information during the ongoing relationship or period of service delivery.
We collect information from other third parties, such as journalist databases.
We may collect information about you from public sources, such as ‘Contact’ details on websites, from online searches and from social media sites.
Adhering to the law
We use personal information when:
We need to perform the contract we have entered into
It is necessary for the legitimate interests of delivering our services
Otherwise (when given consent)
We will only use the personal information for the purposes for which it was collected.
We share personal data between clients and journalists to the benefit of all.
We may share personal data with third-party service providers, who provide services to us. For example, in order to collect payment, we store information in our cloud-based accountancy software.
We share personal data with:
Our insurance and professional indemnity insurance providers
Where we share information with other data controllers, they are responsible to you for the use of information and compliance with the law.
The hosting of our website is carried out by a third party provider.
We have put in place measures to protect the security of your information. Details of these measures are available upon request.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process personal information on our instructions and they are subject to a duty of confidentiality.
Length of retainer-ship
We will only retain personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of personal information, the purposes for which we process personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
We retain where a minimum retention period is required by law, we comply with that minimum period.
In some circumstances we may anonymise personal information so that it can no longer be associated with a specific individual, in which case we may use such information without further notice.
Under certain circumstances, by law you have the right to:
Request access to your personal information
Request correction of the personal information that we hold about you
Request erasure of your personal information
Object to processing of your personal information where we are relying on a legitimate interest
Request the restriction of processing of your personal information
Request the transfer of your personal information to another party
Withdraw consent in the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose