Last updated: 29 October 2026

1. Who we are

Velvet Riot provides marketing strategy, marketing management, content creation, campaign support and related services to businesses.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Business name: Velvet Riot
Business owner / legal name: Michelle Reece
Email: 8 Elm Tree Drive, Wingerworth, Chesterfield S42 6QD
Website: www.velvet-riot.co.uk

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services or work with us.

2. Information we collect

Depending on how you interact with Velvet Riot, we may collect the following information:

• Contact information: your name, business name, email address, telephone number and business address.
• Enquiry information: information you provide through contact forms, emails, telephone calls, discovery calls or other communications.
• Client information: information required to provide our services, manage projects, communicate with clients, issue invoices and maintain business records.
• Website usage information: technical information such as your IP address, browser type, device information and how you interact with our website, where collected through cookies or similar technologies.
• Marketing preferences: your preferences regarding communications from Velvet Riot and any consent you provide.

Please do not submit sensitive personal information through our website unless it is genuinely necessary and we have an appropriate reason to collect it.

3. How we use your information

We may use your personal information to:

• Respond to enquiries and requests for information.
• Discuss your business needs and recommend appropriate marketing services.
• Prepare proposals, quotations, contracts and invoices.
• Deliver and manage our marketing services.
• Communicate with clients about projects, deadlines and ongoing work.
• Maintain business, financial and accounting records.
• Improve our website, services and customer experience.
• Send relevant marketing communications where we are legally permitted to do so.
• Protect our business, prevent misuse and comply with applicable legal obligations.

We only collect and use information where we have an appropriate lawful basis and the information is necessary for the relevant purpose.

4. Our lawful bases for processing

Depending on the circumstances, Velvet Riot may rely on the following lawful bases:

Contract and steps before entering into a contract: to respond to requests for services, prepare proposals and quotations, enter into agreements and deliver services to clients.

Legitimate interests: to respond to general business enquiries, manage our business relationships, maintain appropriate records and improve our services, where these interests are not overridden by your rights and interests.

Legal obligation: to maintain records and meet applicable tax, accounting and other legal requirements.

Consent: where consent is required, for example for certain marketing communications or non-essential cookies and tracking technologies.

We determine the appropriate lawful basis for each processing activity before using personal information.

5. Marketing communications

We may provide information about Velvet Riot's services, insights and updates where we are legally permitted to do so.

You can opt out of marketing emails at any time by using the unsubscribe link provided or contacting us directly.

We will not treat an enquiry or purchase as automatic permission to send every type of marketing communication. Where consent is required, we will ask for it separately.

We will continue to send essential service-related communications where necessary to manage an enquiry, agreement or existing client relationship.

6. Cookies and website analytics

Our website may use cookies and similar technologies to support its operation, understand website performance and improve the visitor experience.

Some cookies may be necessary for the website to function. Where required, we will seek your consent before using non-essential cookies, such as certain analytics or advertising cookies.

You can manage your cookie preferences through the controls provided on our website and through your browser settings.

The specific cookies used will depend on the website platform and any third-party tools or integrations installed. Further information should be provided through our cookie notice or cookie settings where applicable.

7. How we share your information

Velvet Riot does not sell your personal information.

We may share relevant information with trusted third-party service providers where necessary to operate our business and provide our services. These may include:

• Website hosting and website platform providers.
• Email and business communication providers.
• Contact form, booking and customer relationship management tools.
• Cloud storage and document management providers.
• Accounting, invoicing and payment service providers.
• Website analytics providers, where used.
• Professional advisers, where necessary.
• Regulators, public authorities or other parties where required by law.

We only share information that is reasonably necessary for the relevant purpose. Where a provider processes personal data on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.

If information is transferred outside the UK, we will ensure that any transfer complies with applicable data protection requirements.

8. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include appropriate account security, access controls, secure service providers and limiting access to information to those who need it.

However, no method of electronic storage or transmission can be guaranteed to be completely secure.

9. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting and reporting requirements.

Retention periods depend on the type of information and our relationship with you. For example:

• Enquiries: retained for a reasonable period to respond, manage follow-up and maintain appropriate business records.
• Client and project records: retained for the duration of the relationship and for an appropriate period afterwards.
• Financial and accounting records: retained for the periods required by applicable legal and tax obligations.
• Marketing preferences: retained while relevant to our marketing activities and to maintain records of consent or opt-outs.
• Website and analytics information: retained in line with the settings and retention periods of the relevant tools.

When information is no longer required, we will securely delete it or anonymise it where appropriate, unless we have a lawful reason to retain it for longer.

10. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request the deletion of your personal information.
• Ask us to restrict how we use your information.
• Object to certain types of processing, including processing based on legitimate interests.
• Request a copy of certain information in a portable format.
• Withdraw consent where we rely on consent to process your information.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain information to comply with legal obligations.

To exercise your rights, contact us at [Insert your business email address]. We may need to verify your identity before responding.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are concerned about how your personal information is handled.

ICO website: https://ico.org.uk/

11. Third-party websites and services

Our website may contain links to third-party websites or use third-party tools and integrations.

We are not responsible for the privacy practices of external websites. We recommend reviewing the privacy policies of any third-party services you visit or use.

Where you interact with third-party booking, payment or other services, those providers may process your information under their own privacy notices.

12. Children's information

Velvet Riot's services are intended for businesses and adults. Our website is not designed to collect personal information from children, and we do not knowingly seek to collect children's personal information through our marketing enquiries.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology or legal requirements.

Any updated version will be published on this page with a revised “Last updated” date.

14. Contact us

If you have any questions about this Privacy Policy or how Velvet Riot handles your personal information, please contact:

Velvet Riot
Email: ellereece@velvet-riot.co.uk
Website: www.velvet-riot.co.uk

We will do our best to respond to your query promptly.