Privacy Notice
Last updated: 14 October 2026
About Us
Three Hooks is the trading name registered and operating from 49 Station Road, Polegate, East Sussex, BN26 6EA, United Kingdom.
For the purposes of applicable data protection legislation, we are the data controller of the personal information described within this notice.
Correspondence: mail@threehooks.co.uk
ICO Registration Number: ZC272457
What We Collect, Why, and For How Long
We are committed to the principles of transparency and data minimisation. The personal data we process is detailed below:
1. Business Enquiries
| Data Collected | Your name, work email address, business name, and job role |
|---|---|
| Circumstance | When we identify a relevant business contact through a company's public website or listing and reach out regarding our services |
| Lawful Basis | Our legitimate interest in offering a pertinent service to businesses. We direct our communications exclusively to business addresses, and every message contains an opportunity to opt out |
| Retention Period | Until you opt out or otherwise indicate a lack of interest, after which we retain a suppression record (containing only your email address) to ensure no further contact is made |
2. Correspondence
| Data Collected | Your name, email address, and the contents of your messages |
|---|---|
| Circumstance | When you reply to our communications or contact us directly |
| Lawful Basis | Legitimate interest in responding to your enquiry, and steps taken at your request prior to entering into a contract |
| Retention Period | Two (2) years following our most recent correspondence |
3. Purchases and Payments
| Data Collected | Your name, email address, billing address, and payment details |
|---|---|
| Circumstance | When you purchase one of our packages |
| Lawful Basis | Performance of a contract and compliance with legal obligations |
| Retention Period | Six (6) years in accordance with HMRC record-keeping requirements |
4. Project Materials
| Data Collected | Your brief, product photographs, claims evidence, and any other materials provided |
|---|---|
| Circumstance | When you complete our brief form and submit accompanying materials |
| Lawful Basis | Performance of a contract for the production and delivery of your advertisements |
| Retention Period | Ninety (90) days following final delivery |
Our Commitments
We wish to assure you that:
- We do not subject your data to automated decision-making or profiling.
- We do not sell your personal data, nor do we share it with third parties for their own marketing purposes.
Third-Party Processors
To deliver our services with the utmost care and professionalism, we engage the following trusted processors. Each has been selected with due regard to their data protection standards:
- Stripe — Payment processing. We never have access to your complete card number.
- Google (Google Forms) — Hosting of our brief form.
- Namecheap Private Email — Provision of our email services.
- Higgsfield — AI-assisted video generation. We upload only your product photographs; we do not transmit your personal details. Kindly note that AI providers may retain and utilise uploaded materials in accordance with their own terms. We therefore ask that you refrain from submitting any material you consider confidential unless prior written agreement has been reached.
- Cloudflare — Hosting of our website.
Where any of the aforementioned processors handle data outside the United Kingdom, they do so in reliance upon UK adequacy regulations, the UK International Data Transfer Agreement, or the UK International Data Transfer Addendum, as applicable.
Your Rights
In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you are entitled to exercise the following rights with respect to your personal data:
- The right to request access to a copy of the data we hold about you
- The right to request rectification of any data you consider inaccurate or incomplete
- The right to request erasure of your personal data
- The right to restrict or object to the manner in which we process your data, including the right to discontinue all marketing communications at any time
- The right to data portability, enabling the transfer of your data to another service provider
To exercise any of these rights, kindly direct your request to: mail@threehooks.co.uk
We shall respond to your request within one calendar month of receipt.
Complaints
Should you be dissatisfied with any aspect of how we have handled your personal data, we would welcome the opportunity to address your concerns directly.
Kindly direct any complaint in writing to mail@threehooks.co.uk with the subject line “Data Protection Complaint.” We shall:
- Acknowledge your complaint within thirty (30) days of receipt;
- Conduct a thorough investigation into the matters raised;
- Keep you apprised of our progress; and
- Notify you of the outcome without undue delay.
Should you remain dissatisfied, you are entitled to lodge a complaint with the Information Commissioner’s Office (ICO) at: ico.org.uk/make-a-complaint · 0303 123 1113
We would, however, be most grateful for the opportunity to resolve any matter to your satisfaction before you do so.