Privacy Policy

AGENCY Bristol Ltd, trading as AGENCY Medical Marketing, is a healthcare demand generation consultancy registered in England and Wales (Company No. 13595584). Our registered office is 94 Whiteladies Road, Bristol, BS8 2QX. We can be contacted at hello@agencybristol.com. We are the data controller for personal data collected through this website and through our commercial activities.

Most of this policy covers people who come to us. This section covers the opposite case. You received an email or a LinkedIn message from us, you had never heard of us, and you want to know where we got your details. It explains that, why we used them, and how to stop us. Who we contact and why. We contact people who lead marketing, commercial or growth at healthcare organisations: medical device manufacturers, diagnostics and digital health companies, and the clinics and providers who serve them. We contact them about healthcare marketing, our published guides and our events. We only ever use a work address at the organisation that employs you. We do not contact personal or free email accounts, and we do not contact sole traders or unincorporated partnerships. Where we get your details. From sources that are already public: your own LinkedIn profile, your employer's website, its news and careers pages, trade press, conference and exhibitor listings, and industry directories. We do not buy or rent marketing lists, and we do not take your details from data brokers. The first message we send you names the specific source we used for you. Our lawful basis. We rely on legitimate interests, under Article 6(1)(f) of the UK GDPR. Our interest is reaching the small number of healthcare organisations that would benefit from what we do. Your interest is being told about it, in your professional role, at your work address. We have weighed the two and concluded that a professionally relevant message sent to a business address, no more than twice on any channel, with an easy and permanent way to stop it, does not override your rights and freedoms. We have recorded that assessment in writing and we will send you a summary of it if you ask. What we hold about you. Your name and job title. Your work email address, and your LinkedIn profile where we contact you there. Your employer's name and publicly available information about it. The source we took your details from, and the date. A record of the messages we have sent you and any reply. We hold no health data and no other special category data about you. We do not build a behavioural profile of you, and no decision about you is made automatically. We do not put tracking pixels in these messages and we do not track the links in them, so we do not know whether you opened one or what you clicked. How long we keep it. If you do not reply, we delete your record twelve months after the last message we send you. If you do reply, your details become a contact enquiry and are kept for three years from our last contact, as set out under "How long we keep your data" below. If you tell us to stop, we keep the minimum needed to make sure we never contact you again, which is your email address or profile link and the fact that you objected. We keep that indefinitely, because it is the only way to honour your objection. Who helps us do this. We use an email delivery platform, a LinkedIn outreach tool, an email verification service, and our own customer relationship management system, which is hosted for us by a cloud hosting provider. Each of them acts only on our written instructions and none of them may use your data for its own purposes. Where your data goes. Some of these providers are based outside the United Kingdom, or store data outside it. Where that happens we rely on the safeguards UK data protection law provides for international transfers. Ask us and we will tell you which applies to a particular provider and provide a copy of it. If you want us to stop, see "Your right to object to marketing" immediately below.

You have the right to object to us using your personal data for direct marketing. This right is absolute. You do not have to give a reason, we do not weigh it against anything, and once you object we have to stop. There are two ways to use it. Reply to any message we send you and say so, in whatever words you like. Or email hello@agencybristol.com and ask us to stop. Either one works. You do not need to find a particular link, and you do not need to use a particular phrase. We act on it as soon as we see it and we add you to a permanent suppression record, so that no future campaign can pick you up again. If you hear from us after telling us to stop, tell us and we will treat it as a complaint. You also have the other rights set out under "Your rights" below, including access, correction, deletion, and the right to complain to the Information Commissioner's Office at ico.org.uk. To use any of them, email hello@agencybristol.com.

In addition to the prospect data described above, we collect the following categories of personal data through this website: Contact data: name, email address, telephone number, job title, company name. Collected when you submit an enquiry, book a triage call, or download a resource. Usage data: pages visited, time on site, referral source. Collected automatically via analytics tools (see Cookies section below). Communication data: content of emails and messages you send to us, and our responses. We do not collect special category data (health data, financial data, or similar sensitive personal data) through this website.

We use your personal data to: Respond to enquiries and triage call requests Deliver resources, guides, and downloads you have requested Send commercial communications where you have consented or where we have a legitimate interest Improve the website and understand how it is used Our legal basis for processing contact data is legitimate interests (responding to enquiries you initiate), or consent where you have given it for a specific purpose. Where we contact you first, our basis is legitimate interests, as set out under "If we contacted you out of the blue" above.

We do not sell personal data. We share data only with: Service providers who support our operations (email delivery, CRM, scheduling tools), each acting only on our written instructions Professional advisors (lawyers, accountants) where required Regulatory bodies or law enforcement where legally required Every processor acts only on our written instructions. Where a provider is based outside the United Kingdom, or stores data outside it, we rely on the safeguards UK data protection law provides for international transfers. Ask us and we will tell you which applies to a particular provider and provide a copy of it.

Prospect records where you have not replied: twelve months from the last message we sent you, then deleted. See "If we contacted you out of the blue" above. Contact enquiries: retained for 3 years from last contact, then deleted. Active client data: retained for the duration of the engagement plus 7 years for legal and compliance purposes. Newsletter and marketing contacts: retained until you unsubscribe or ask us to delete your data. If you object to marketing we keep your email address on a suppression record indefinitely, so that we never contact you again. Website analytics: aggregated and anonymised after 26 months.

We use the following cookies and analytics tools: Essential cookies: required for the website to function. No consent required. Google Analytics 4: aggregate analytics to understand how the site is used. It sets cookies and is opt-in. It only runs after you accept analytics cookies in our consent banner, and we use Google Consent Mode v2 so no analytics cookies are set until you opt in. We do not enable Google advertising cookies. Microsoft Clarity: aggregate heatmaps and anonymised session replay to improve page layout. Clarity runs in consent mode and, for visitors in the UK, EEA and Switzerland, does not set cookies without consent. It is not used for advertising. We do not use advertising or retargeting cookies. Full detail, including how to change your choice, is in our Cookie Policy.

Under UK GDPR you have the right to: Access a copy of your personal data Correct inaccurate data Request deletion of your data Object to processing based on legitimate interests Withdraw consent at any time (where consent is the legal basis) Lodge a complaint with the ICO (ico.org.uk) To exercise any of these rights, email hello@agencybristol.com. We will respond within one month.

We may update this policy when our practices change. Material changes will be notified via email to active contacts. The date at the top of this page shows when it was last updated.