Website Privacy Notice – March 2024

The following policy sets out how we, Flag Communication Ltd (company registration number 1783513) (hereafter referred to as ‘we’ ‘us’ or ‘our’), collect, store and use information about you when you use or interact with our website, flag.co.uk.

We respect your privacy and are committed to protecting your personal data; by using this website, you are signifying your acceptance of this policy. From time to time, changes may be made to this policy following review; in the case of alterations, this policy will be updated, and date stamped accordingly.

For clarification of some of the terms used within this policy, please refer to the glossary.

How to contact us

If you wish to make an enquiry regarding your data, our Data Protection Representative can be contacted via the following details:

info@flag.co.uk
+44 (0)20 4526 5959
31-35 Kirby Street, London EC1N 8TE, UK.

The type of personal information we collect

Contact information

When you communicate with us through either the contact form or the contact details provided on the website, your contact details will be retained in accordance with your enquiry. This will include any information you provide, such as your name, contact details and company name.

Job applications

If you chose to submit a CV to us, the personal information provided therein (such as, but not limited to, your contact information, address and DOB) will be retained in order to process your application.

CVs of unsuccessful candidates will be retained for six months from the date of application, unless you agree a different term with the hiring manager.

Business enquiries

All business enquiries will be forwarded to the relevant team and processed accordingly; your personal details will be retained to enable us to process your query.

Furthermore, these contact details may be used for future marketing purposes; you may opt out of these communications at any time by emailing info@flag.co.uk.

Cookies

The cookies that we collect during the use of this website are predominantly for statistical and analytical purposes and are necessary to ensure the functionality of this website.

Alongside this, we also utilise cookies for marketing purposes. These cookies are designed to enhance your browsing experience, analyse website traffic and tailor content to your preferences.

At present, the following cookies are collected:

Cookie name	Purpose	Expiry
_cf_bm	This cookie is used to distinguish between humans and bots	1 day
_cfruid _cfuvid	Set by Cloudflare and used for load-balancing, deliverance of website content and serving DNS connection	Session
_gcl_au	Used by Google AdSense for experimenting with advertisement efficiency across websites using their services	3 months
_hssc	Identifies if the cookie data needs to be updated in the visitor’s browser	1 day
_hssrc	Used to recognise the visitor’s browser upon re-entry to the website	Session
_hstc hubspotutk	Sets a unique ID for the session	180 days
_ptq.gif	Sends data to Hubspot about the visitor’s device and behaviour	Session
Aka_debug	Used by Vimeo to track usage of the embedded video player	Session
CookieConsent	Stores the user’s cookie consent state for the current domain	1 year
IDE	Used by Google AdSense to track user’s interaction with adverts	1 year
LAST_RESULT_ENTRY_KEY nextld requests YtldbMeta#databases	Used to track user’s interaction with embedded content	Session
td	Registers statistical data on user’s behaviour on the website	Session
Yt-player-headers-readable	Used to determine the optimal video quality based on the visitor’s device and network settings	Persistent
yt-remote-cast-available yt-remote-cast-installed yt-remote-fast-check-period yt-remote-session-app yt-remote-session-app	Stores the user’s video player preferences using embedded YouTube video	Session
yt-remote-connected-devices yt-remote-device-id	Stores the user’s video player preferences using embedded YouTube video	Persistent

Server logs

IP addresses associated with visits to this website are stored in server logs for less than 30 days and are only used for the purposes of detection and prevention of fraud, unauthorised access or other malicious activity.

How we use your information

We use your information in order to contact you in response to your enquiry, to process your job application and/or to improve our business and website.

Your information is never sold to third parties.

Lawful grounds for processing data

Please refer to the below table in which we have determined the ways we plan to use your data, and the legal basis for doing so.

Purpose/activity	Type of data	Lawful basis for processing
To store cookies	Technical	Necessary for our legitimate interests (for the purposes of ensuring network and information security) Consent
To store web server log information	Technical	Necessary for our legitimate interests (for the purposes of ensuring network and information security)
To administer and protect our business and this website, including troubleshooting, support and hosting of data	Technical	Necessary for our legitimate interests (running our business, network security and to prevent fraud)
Disclosure of your information to service providers (internal and external third parties)	Contact	Necessary for our legitimate interests (to perform a contract and/or take steps at your request prior to entering into a contract, running and managing our business effectively)
Storage of your contact information (including, but not limited to, telephone, email, CV as applicable)	Contact	Necessary for our legitimate interests (for the purposes of running our business effectively)
Marketing communications	Contact	Necessary for our legitimate interests (to communicate with existing and potential clients)

How we retain your information

We only retain your information for as long as is strictly necessary in line with our requirements and any applicable legal obligations.

There are appropriate safeguards in place to protect the integrity of your information; for example, storing it on secure servers, only granting access to it where necessary, and only to authorised personnel.

Your rights

In accordance with the Data Protection Act (DPA) 2018, you have the following rights in relation to the personally identifying information we may hold on you, namely:

to access your information and to receive information about its use
to have your information corrected and/or completed
to have your information deleted
to restrict the use of your information
to receive your information in a portable format
to object to the use of your information
to withdraw your consent to the use of your information
not to have significant decisions made about you based solely on automated processing of your information, including profiling
to complain to a supervisory authority.

Your right to complain

As a data subject, if you believe your data has been mismanaged, you have the right to make a complaint at any time to the UK supervisory authority for data protection, the Information Commissioner’s Office (ico.org.uk). We would, however, appreciate the opportunity to deal with any concerns prior to this, so please contact us in the first instance.

Links to third-party websites

This website may include links to third-party websites and applications. Clinking on those links may allow third parties to collect or share your data; we do not control these third-party websites and are not responsible for their privacy controls.

Glossary
Personally identifiable (PI) information	Any information that may be used to identify an individual, directly, or indirectly; for example, an IP address, bank details or surname.
Data subject	An individual whose PI is collected.
Data controller	A person or entity that collects and/or processes data; by storing your details, we act as data controller.
Website cookies	Cookies are small files that are stored on your device by your browser when you visit a website; necessary cookies help make a website useable by enabling basic functions such as page navigation, and the website cannot function correctly without them. Statistics cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. Cookie collection can be disabled within your browser settings.
Internal third parties	Third parties that work under the scope of the Flag Communication Group and may have access to your data; for example, ESG Communications, a subsidiary of Flag Communications.
External third parties	External third parties that may have access to your data in the scope of the services provided by us; for example, our website hosting provider.
Contractual fulfilments	Acts that are required in order to fulfil contractual obligations; for example, in the provision of work for our clients.