Privacy Policy
Last updated: 13 January 2026
This Privacy Policy explains how Morgan & Spencer (“we”, “us”, “our”) collects, uses, stores, and shares
personal data when you use https://morgan-spencer.co.uk (the “Website”), contact us, or engage with our content.
We take privacy seriously and aim to be transparent about how we handle your information.
If you have any questions, please contact us using the details in the Contact us section below.
1) Who we are (Data Controller)
The data controller for personal data processed via this Website is:
Morgan & Spencer Marketing Ltd
Registered address: 75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: info@morgan-spencer.co.uk
Where we refer to “Morgan & Spencer” on this Website, we mean Morgan & Spencer Marketing Ltd operating the Website and its marketing activities.
2) What personal data we collect
We may collect and process the following categories of personal data:
- Identity & contact data: name, email address, phone number, country/location, and any details you submit in a form.
- Communication data: messages you send us, call notes (where applicable), and your preferences.
- Technical & usage data: IP address, device and browser type, pages viewed, time on site, referral source, and similar analytics data.
- Marketing data: newsletter subscription status, consent records, and engagement metrics (e.g., opens/clicks where applicable).
We do not intentionally collect special category data (such as health, biometric, or political opinions). Please do not submit such data through the Website.
3) How we collect your data
- Directly from you when you complete forms, subscribe to updates, email us, or otherwise contact us.
- Automatically through cookies and similar technologies when you browse the Website.
- From partners/providers where you have asked us to connect you with a third party or where lawful and relevant to services you requested.
4) Why we use your data (purposes)
We use personal data for the following purposes:
- To respond to enquiries and provide requested information.
- To provide access to materials and communications you request (e.g., newsletters, briefings, reports).
- To improve the Website, user experience, and performance.
- To maintain security, prevent fraud, and protect our systems.
- To comply with legal obligations and manage our business operations.
- To market our content and services where permitted (and in line with your preferences/consents).
5) Lawful bases for processing (UK GDPR)
We process your personal data only when we have a lawful basis, including:
- Consent (e.g., where you opt-in to receive marketing communications).
- Contract (e.g., where you request services or information that requires processing to fulfil).
- Legitimate interests (e.g., running our business, improving the Website, responding to enquiries, preventing fraud), where those interests are not overridden by your rights.
- Legal obligation (e.g., record-keeping, compliance requests from regulators or authorities).
6) Marketing communications
If you subscribe to our newsletter or request updates, we may send you marketing communications.
You can opt out at any time by using the unsubscribe link in emails (where included) or by emailing
info@morgan-spencer.co.uk.
Where required by law, we will obtain your consent before sending marketing. Where permitted, we may rely on legitimate interests for business-to-business
communications, but you can object at any time.
7) Sharing your data
We may share personal data with trusted third parties only where necessary for the purposes described in this Policy, including:
- IT & hosting providers (e.g., website hosting, email delivery).
- Analytics and performance tools (to understand website usage and improve performance).
- CRM and marketing platforms (to manage enquiries, communication preferences, and newsletters).
- Professional advisers (legal, accounting, compliance) where required.
- Authorities where required by law or to protect rights, safety, and security.
If we introduce you to a third party at your request (for example, a service provider or partner), we may share the information needed to make that connection.
We will not sell your personal data.
8) International transfers
Some of our service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as contractual protections and,
where relevant, adequacy regulations) to help ensure your data remains protected.
9) Cookies and similar technologies
We use cookies and similar technologies to operate the Website, analyse performance, and (where enabled) support marketing.
You can manage cookies through your browser settings and, where available, our cookie controls.
If you have a separate Cookie Policy page, link it here:
Cookie Policy
(update or remove this link if not used)
10) Data retention
We keep personal data only as long as necessary for the purposes described in this Policy, including to meet legal, accounting, or reporting requirements.
Retention periods vary depending on the nature of the data and the reason for processing.
11) Your rights (UK GDPR)
You may have the following rights, subject to applicable law:
- Access – request a copy of your personal data.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion of your data in certain circumstances.
- Restriction – request we limit processing in certain circumstances.
- Objection – object to processing based on legitimate interests, including direct marketing.
- Data portability – request transfer of your data where applicable.
- Withdraw consent – where processing is based on consent.
To exercise your rights, contact us at
info@morgan-spencer.co.uk.
We may need to verify your identity before responding.
12) Complaints
If you are unhappy with how we handle your data, you can contact us first so we can try to resolve it.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
13) Security
We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work
to maintain appropriate safeguards and access controls.
14) Children
This Website is not intended for children and we do not knowingly collect personal data from children.
15) Links to other websites
The Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites.
Please review their policies before submitting personal data.
16) Changes to this Privacy Policy
We may update this Policy from time to time. The “Last updated” date at the top will change when we do.
If changes are significant, we may provide additional notice.
If you have any questions about this Privacy Policy or how we handle your personal data, contact:
Morgan & Spencer Marketing Ltd
Email: info@morgan-spencer.co.uk
Address: 75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
