Who is responsible for your information?
OnlyModels is a strategy and growth consultancy working with creators, personal brands and businesses.
For the purposes of applicable UK data protection law, OM DIGITAL DEVELOPMENT LTD, trading as OnlyModels, is the data controller responsible for the personal information described in this policy.
- Company number: 14688313
- Registered address: 11 Turnpike Rd, Tadcaster, United Kingdom, LS24 8JS
- Privacy email: hello@onlymodels.co.uk
In this policy, “OnlyModels”, “we”, “us” and “our” refer to OM DIGITAL DEVELOPMENT LTD.
Information we may collect
The information we collect depends on how you interact with us. It may include the categories described below.
Contact and identity information
- Your name, professional name or brand name.
- Your email address, telephone number or social media username.
- Your company, professional role, location and business contact information.
Enquiry and project information
- Information submitted through our website contact form.
- Messages, enquiries and correspondence sent to us.
- Information about your business, audience, objectives and services.
- Project briefs, campaign information and materials you provide.
- Meeting notes, proposals, agreements and project communications.
Commercial and payment information
- Services you enquire about or purchase.
- Invoices, payment status and transaction references.
- Business records required for accounting and tax purposes.
We do not normally collect or store complete payment card details. Payments may be processed by a third-party payment provider, which handles payment information under its own privacy terms.
Website and technical information
- Your IP address and approximate location.
- Browser, device and operating system information.
- Pages visited, referral source and website interaction information.
- Cookie choices and website performance information.
- Security, diagnostic and server log information.
Information from social media
When you contact or interact with us through Instagram or another social platform, we may receive your public profile information, username and the content of your communication. The relevant social platform also processes information under its own privacy policy.
Sensitive information: Please do not send health, biometric, criminal offence or other sensitive personal information unless it is genuinely necessary and we have specifically requested it. Unnecessary sensitive information may be deleted.
How we collect information
We may collect personal information in the following ways:
- Directly from you when you complete a form, send us a message, attend a meeting or enter into an agreement with us.
- Through email, telephone, Instagram, WhatsApp or another communication platform you choose to use.
- Automatically when you access or interact with our website.
- From publicly available professional profiles, business websites, directories and social media pages.
- From a mutual contact, representative, agency or business partner who introduces you to us.
- From service providers supporting our website, communications, analytics, payments or business administration.
Where another person gives us information about you, they should ensure that they are permitted to do so.
How and why we use information
We only use personal information where we have an appropriate lawful basis. The basis we rely on depends on the activity involved.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to enquiries and discussing potential work | Contact, identity, enquiry and project information | Legitimate interests and taking steps before entering into a contract |
| Preparing proposals and delivering our services | Contact, project, communication and commercial information | Performance of a contract or taking requested pre-contractual steps |
| Managing client relationships and business administration | Contact, communication, project, invoice and transaction information | Contract, legitimate interests and legal obligations |
| Operating, protecting and improving our website | Technical, usage, cookie and security information | Legitimate interests and consent where consent is required |
| Sending requested updates or marketing communications | Contact details, preferences and interaction information | Consent or legitimate interests where legally permitted |
| Maintaining records and complying with legal obligations | Relevant contact, commercial, transaction and project information | Legal obligations and legitimate interests |
| Establishing, exercising or defending legal claims | Any information relevant to the dispute or claim | Legitimate interests and legal obligations |
Our legitimate interests include responding to potential clients, operating and developing our business, protecting our website, maintaining accurate business records and providing effective client service.
Where we rely on legitimate interests, we consider whether our use of the information is necessary and whether your rights or interests override ours.
Automated decision-making
Unless we tell you otherwise, we do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
Who we may share information with
We do not sell your personal information. We may share relevant information with carefully selected recipients where this is necessary to operate our business or deliver our services.
Recipients may include:
- Website hosting, form processing and content management providers.
- Email, cloud storage, communication and productivity providers.
- Analytics, security and website performance providers.
- Payment, bookkeeping, accounting and professional service providers.
- Contractors, consultants or creative professionals working on an authorised project.
- Social media and advertising platforms where you interact with us through those services.
- Regulators, law enforcement bodies, courts or other authorities where disclosure is legally required.
- A buyer, investor, lender or professional adviser involved in a potential sale, restructuring or transfer of our business.
Providers acting on our behalf may only use personal information for the agreed purpose and must protect it appropriately.
International data transfers
Some service providers we use may process information outside the United Kingdom. This can include providers of website hosting, analytics, cloud storage, communications and social media services.
Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is used. Depending on the destination and provider, this may include:
- A UK adequacy regulation.
- An approved international data transfer agreement or contractual addendum.
- Other safeguards permitted under applicable data protection law.
You may contact us for further information about safeguards relating to a particular transfer.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting, contractual and reporting requirements.
Our normal retention approach is:
- General enquiries: normally retained for up to 24 months after the last meaningful communication.
- Client and project records: normally retained for the duration of the relationship and for up to six years afterwards where required for contractual, accounting or legal purposes.
- Invoices and financial records: retained for the period required by applicable tax and accounting rules.
- Marketing information: retained until you unsubscribe, withdraw consent or we determine that it is no longer accurate or useful.
- Website and security information: retained for the period reasonably required for analytics, security, troubleshooting and fraud prevention.
We may retain limited information after an unsubscribe request so that we can record and respect your preference.
Information may be retained for longer where there is a complaint, dispute, legal claim, regulatory requirement or security investigation.
Cookies and similar technologies
Our website may use cookies, scripts, pixels, local storage and similar technologies to operate correctly, remember choices, understand website performance and measure how visitors use the website.
Essential technologies
Some technologies are required for core website functionality, security, network management, form processing or the storage of privacy preferences.
Analytics and optional technologies
Where enabled, analytics technologies help us understand matters such as visitor numbers, traffic sources, page performance and general website interactions.
Where consent is legally required, optional technologies should not be activated until you have made a choice through the website's cookie controls.
You can change your preferences through any cookie settings control made available on the website. You can also restrict or delete cookies using your browser settings, although doing so may affect parts of the website.
The exact technologies used may change as the website develops. The website's cookie banner or cookie settings should provide current information about active optional technologies.
Marketing communications
We may send information about our services, relevant updates or opportunities where you have requested them, provided consent or where we are otherwise legally permitted to do so.
You can stop receiving marketing communications at any time by:
- Using the unsubscribe option included in the communication.
- Replying to the communication and asking us to stop.
- Contacting us using the details at the end of this policy.
Opting out of marketing will not prevent us from sending essential service messages relating to an active enquiry, agreement, transaction or project.
How we protect information
We use proportionate organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
These measures may include:
- Access controls and password protected accounts.
- Multi-factor authentication where supported.
- Secure website connections and reputable service providers.
- Access to project information on a need-to-know basis.
- Data minimisation, record management and deletion procedures.
- Appropriate confidentiality obligations for contractors.
No internet transmission or storage system can be guaranteed to be completely secure. You should avoid sending highly sensitive information through an ordinary website form or social media message.
Your data protection rights
Depending on the circumstances and applicable law, you may have the right to:
- Request access to the personal information we hold about you.
- Ask us to correct incomplete or inaccurate information.
- Ask us to erase personal information in certain circumstances.
- Ask us to restrict how we use your information.
- Object to processing based on legitimate interests.
- Object at any time to the use of your information for direct marketing.
- Receive certain information in a structured, commonly used and machine-readable format.
- Withdraw consent where we rely on consent, without affecting use made before withdrawal.
- Make a complaint to a data protection regulator.
These rights are not absolute and may be subject to legal limitations or exemptions.
To exercise a right, contact us using the details below. We may need to request reasonable information to confirm your identity and understand your request.
Complaints
We would appreciate the opportunity to address your concern directly. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection matters.
You can visit the Information Commissioner's Office complaints page for further information.
Third-party websites and platforms
Our website may contain links to Instagram or other third-party websites and services. Following a link or interacting with a third-party service may allow that organisation to collect or receive information about you.
We do not control third-party privacy practices. You should review the privacy information provided by the relevant organisation before submitting personal information.
Information relating to children
Our services are intended for people aged 18 and over. We do not knowingly seek to collect personal information from children through this website.
If you believe that a child has submitted personal information to us, please contact us so that we can review and, where appropriate, delete it.
Changes to this policy
We may update this Privacy Policy to reflect changes to our services, website, providers, business practices or legal obligations.
The latest version will be published on this page and identified by the last updated date near the top.
Where a change materially affects how we use personal information, we may take additional reasonable steps to bring it to the attention of affected individuals.
Contact us about your privacy
Contact us with any questions, concerns or requests relating to this Privacy Policy or the way we handle personal information.