Legal

Privacy Policy

How we handle the personal data you share with us — what we collect, why, and what you can do about it. Written in plain English. Last updated 2 May 2026.

Who we are

Type A Media is a UK-based SEO and digital PR consultancy operating at typeamedia.net. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data submitted through this site.

You can reach us at clients@a.agency or at our registered office: 20-22 Wenlock Road, London, N1 7GU.

What we collect

We only collect the data you give us directly. Specifically:

  • Contact form submissions: name, email, company name, your website URL, the service you're enquiring about, and your message.
  • Landing page enquiries: the same fields, plus the page you submitted from (so the right consultant follows up).
  • Newsletter subscriptions: just your email address, plus the date you signed up.

We do not run Google Analytics, Facebook Pixel, or any third-party tracking. We do not buy, sell, or rent personal data — ever.

We do log standard request metadata at the network level (IP address, user agent, request path) via Cloudflare for security, abuse prevention, and uptime monitoring. This is processed under our legitimate interest in keeping the site online and free of bot traffic.

Why we collect it, and the lawful basis

  • To reply to your enquiry — lawful basis: legitimate interests (responding to a request you initiated).
  • To send you the newsletter if you signed up — lawful basis: consent, which you can withdraw at any time by clicking the unsubscribe link in any email.
  • To prevent spam and abuse — lawful basis: legitimate interests (Cloudflare bot management and Cloudflare Turnstile process IP and user agent for this purpose).

Who else sees your data

The shortlist of third parties (sub-processors) that handle your data when you interact with this site:

  • Cloudflare — hosts the site, runs bot protection, and routes form submissions to our inbox via Cloudflare Email Workers. Cloudflare's privacy policy.
  • Kit (formerly ConvertKit) — sends the newsletter, only if you've signed up for it. Kit's privacy policy.
  • Google Workspace — hosts our email inbox at clients@a.agency, where contact-form messages land. Google's privacy policy.

We use these tools because they're industry-standard, GDPR-compliant, and offer Standard Contractual Clauses or UK Addenda where data leaves the UK or EEA.

How long we keep it

  • Contact and landing-page enquiries: kept in our inbox for up to two years after the last contact, then deleted. If we engage you as a client, your data moves to our client-management systems and falls under the engagement contract instead.
  • Newsletter subscribers: until you unsubscribe. Once you unsubscribe, your record is purged from Kit within 30 days.
  • Cloudflare access logs: rolling 30-day retention at the edge, then aggregated.

Your rights

Under UK GDPR you have the right to:

  • Ask us what data we hold about you (right of access).
  • Ask us to correct anything that's wrong (right to rectification).
  • Ask us to delete your data (right to erasure).
  • Ask us to restrict how we process your data (right to restriction).
  • Ask for a portable copy of your data (right to data portability).
  • Object to our processing on legitimate-interests grounds (right to object).
  • Withdraw consent for the newsletter at any time (right to withdraw).
  • Complain to the Information Commissioner's Office at ico.org.uk if you think we've mishandled your data.

To exercise any of these rights, email clients@a.agency. We aim to respond within 30 days.

Cookies

This site sets the minimum number of cookies it needs to work:

  • A short-lived theme preference cookie when you toggle dark/light mode.
  • Cloudflare bot management cookies for security and abuse prevention.
  • Cloudflare Turnstile cookies on pages with forms, only when the form is loaded.

We do not use cookies for advertising, retargeting, or cross-site tracking. There is no third-party cookie banner because we don't set the kind of cookies that need consent under PECR.

Children

This site is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has submitted personal data here, email us and we'll delete it.

Changes to this policy

We update this policy when our data flows or third parties change. The "last updated" date at the top reflects the most recent material change. If a change is significant — a new sub-processor, a change in lawful basis, a change in retention — we'll flag it in our next newsletter.

Contact

For any privacy question, email clients@a.agency.