Privacy Policy

Retail Media Revolution Ltd ("RMR", "we", "us") operates the website at retailmediarev.com and demo.retailmediarev.com and provides retail and experience media services to brands, agencies and place partners. For the purposes of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU GDPR, we are the data controller of the personal data described in this policy.

Registered office: [registered address to be confirmed]. Company number: [to be confirmed]. ICO registration number: [to be confirmed].

Privacy queries: privacy@retailmediarev.com or hello@retailmediarev.com.

We only collect the data we need to run this website and respond to you. Depending on how you interact with us, this may include:

• Contact enquiries: your name, email address, company, job role and the content of your message when you use our contact or advertiser forms.
• Newsletter: your email address and the date and time you subscribed.
• Site feedback: comments you leave via the on-page feedback tool, the page and position they relate to, and any name you choose to give.
• Technical data: IP address, browser type and version, device type, pages visited and referring URLs, processed in server logs for security and to keep the site running.
• Cookie choices: the consent preferences you set in our cookie banner (stored in your browser, not on our servers).

We do not knowingly collect special category data (such as health, ethnicity or political opinions) and ask that you do not include it in free-text fields.

UK GDPR requires us to have a lawful basis for every use of your personal data. These are set out below.

Where we rely on legitimate interests we have balanced those interests against your rights and freedoms. You can object at any time (see "Your rights").

We do not sell your personal data. We share it only with service providers who process it on our behalf under written contracts (data processing agreements), and only as far as necessary:

• Hosting and backend: Lovable (website hosting and content delivery) and its underlying cloud database provider, used to store form submissions, feedback and newsletter sign-ups.
• Fonts and maps: Google LLC (Google Fonts, and Google Maps only if you enable functional cookies).
• Professional advisers and authorities: where required by law, regulation or to protect our legal rights.

Some of these providers are located outside the UK and EEA (for example in the United States). Where that is the case we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, to make sure your data receives an equivalent level of protection.

At the end of the retention period we delete or irreversibly anonymise the data.

Under UK GDPR you have the right to:

• Access the personal data we hold about you (a "subject access request").
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where there is no compelling reason for us to keep it.
• Restrict processing in certain circumstances.
• Data portability: receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal.
• Not be subject to solely automated decision-making with legal or similarly significant effects. We do not carry out any such decision-making.

To exercise any of these rights email privacy@retailmediarev.com. We will respond within one month (extendable by two further months for complex requests, in which case we will tell you). We may need to verify your identity before acting on a request. There is normally no fee.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

We only send our newsletter to people who have opted in. Every email includes an unsubscribe link, and you can also unsubscribe at any time by emailing hello@retailmediarev.com. When you unsubscribe we add your address to a suppression list so you are not contacted again by mistake.

Where we contact business contacts about our services on a legitimate-interests basis (for example following a meeting or enquiry), we will always tell you where we obtained your details and give you a simple way to opt out.

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest in our database, row-level access controls so that data is only readable by authorised systems, restricted staff access on a need-to-know basis, and server-side validation of every form.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms we will notify the ICO within 72 hours and, where the risk is high, notify you directly.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent, which you can change at any time via "Cookie settings" in the footer.

Our website and services are directed at businesses and are not intended for children under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. The "last updated" date at the top of the page shows when it last changed. Material changes will be highlighted on the site or, where we hold your email address and the change affects you, communicated to you directly.