top of page

Privacy policy

Chilli Flakes Agency (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller
Chilli Flakes Agency is the data controller responsible for your personal data.


Information We Collect
We may collect and process the following information:

  • Identity and contact information (such as your name, email address, phone number, business details).

  • Information relating to services you request or projects you engage us for.

  • Technical information automatically collected when you use our website (including IP address, browser type, and cookies).
     

Purposes for Processing
We use your personal data for the following purposes:

  • To respond to enquiries and provide our services.

  • To manage contracts and client relationships.

  • To communicate with you regarding our services.

  • To improve our website and services.

  • To comply with legal and regulatory obligations.
     

Lawful Basis for Processing
We process personal data under the following lawful bases as set out in Article 6 of the UK GDPR:

  • Consent (when you have given us permission).

  • Contract (when processing is necessary to perform a contract with you).

  • Legal obligation (when required to comply with the law).

  • Legitimate interests (when processing is necessary for our business purposes and does not override your rights).
     

Sharing of Data
We do not sell your personal data. We may share your information with:

  • Trusted third-party service providers who support our operations (such as IT, hosting, or payment services).

  • Legal or regulatory bodies if required by law.
     

All third parties are required to keep your data secure and process it only in line with our instructions.

International Transfers
If we transfer your personal data outside the UK, we will ensure appropriate safeguards are in place, such as the use of standard contractual clauses approved by the UK government.

Data Retention
We only retain personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

Security
We use appropriate technical and organisational measures to keep your data secure and protect it from unauthorised access, use, or disclosure.

Your Rights
Under the UK GDPR, you have the right to:

  • Access your personal data.

  • Request correction of inaccurate or incomplete data.

  • Request deletion of your data.

  • Object to processing based on legitimate interests.

  • Request restriction of processing.

  • Request transfer of your data to another provider (data portability).

  • Withdraw consent at any time (where processing is based on consent).
     

To exercise these rights, please contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled in accordance with the law. More information is available at www.ico.org.uk.

Cookies
Our website uses cookies and similar technologies to improve user experience and collect analytics. You can manage or disable cookies in your browser settings.

Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Chilli Flakes Agency
angela@chilliflakesagency.com

bottom of page