Privacy policy

1 Introduction

The Bright Media Agency and Food & Drink Wholesale UK (“we”, “us”, “our”) are committed to protecting and respecting your privacy.

This privacy policy explains how we collect, use, store and protect personal data when you:

  • Visit the Wholesale News magazine website
  • Subscribe to Wholesale News magazine or email communications
  • Download content or complete forms
  • Contact us about advertising opportunities
  • Book commercial advertising
  • Contact us about or to supply us with editorial content for potential publication
  • Engage with our content or services

We process personal data in accordance with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2 Who we are (data controllers)

The Bright Media Agency Limited
Registered address: The Stables, Dovecote Court, Pingle Lane, Potters Marston, LE9 3JR
Email: hello@thebrightmediaagency.com
Telephone: 0116 296 0200

Food & Drink Wholesale Limited
9a Gildredge Road, Eastbourne, BN21 4RB
Telephone: 01323 724952

We are the data controllers responsible for your personal data.

3 Personal data we collect 

3.1 Information you provide

Advertising enquiries and bookings

When individuals or businesses approach us about advertising, editorial content or book campaigns, we may collect:

  • Name
  • Job title
  • Company name
  • Agency name
  • Business email address
  • Business phone number
  • Billing and transaction details
  • Advertising requirements
  • Areas of professional interest
  • Communications history

Magazine and email subscriptions

  • Name
  • Email address
  • Company name (if provided)
  • Postal address (for print)
  • Preferences and engagement data

General enquiries and forms

  • Name
  • Contact details
  • Message content
  • Any information voluntarily submitted

3.2 Information collected automatically

When you use our website we may collect:

  • IP address
  • Browser type and version
  • Device identifiers
  • Pages visited
  • Time and date of visit
  • Referring URL
  • Interaction data

This includes data collected via cookies and analytics tools.

4 How we use personal data and lawful bases

We only process personal data where permitted under UK GDPR.

4.1 Advertising enquiries and client management

Purpose

  • Respond to advertising enquiries
  • Negotiate and manage bookings
  • Deliver advertising services
  • Maintain business relationships
  • Invoice and administer accounts

 Lawful basis

  • Legitimate interests
  • Performance of a contract
  • Legal obligation

Legitimate interests assessment (summary)

We have a legitimate interest in processing business contact details to:

  • Respond to commercial enquiries
  • Promote relevant advertising opportunities
  • Manage B2B relationships

We have assessed that this processing is expected by business contacts, has minimal privacy impact, and individuals can object at any time.

4.2 Editorial and PR

Purpose

  • Receive and review press releases and story submissions
  • Source industry news, product information and commentary
  • Request images, statements and supporting materials
  • Maintain and update media and PR contact lists
  • Plan, produce and publish relevant editorial content
  • Communicate about potential editorial opportunities
  • Manage ongoing professional media relationships

This processing supports the creation of timely, accurate and relevant trade journalism.

Lawful basis

Our lawful basis for this processing is legitimate interests under Article 6(1)(f) UK GDPR. Our legitimate interests are to:

  • operate as a professional B2B trade publisher
  • produce relevant editorial content for our readership
  • maintain effective relationships with PR professionals and industry contacts
  • ensure the accuracy, timeliness and quality of our journalism
  • support the commercial sustainability of our publication

Maintaining professional media contact databases is standard practice within the publishing sector.

Legitimate Interests Assessment (summary)

We have carried out a Legitimate Interests Assessment and concluded that this processing is lawful because:

  • the data relates to individuals acting in a professional capacity
  • the processing is necessary for trade journalism and editorial production
  • such contact is reasonably expected within the B2B media environment
  • the privacy impact on individuals is low
  • we only use relevant business contact details
  • individuals can request removal or object at any time
  • appropriate safeguards and data minimisation measures are in place

We believe our legitimate interests are not overridden by the rights and freedoms of the individuals concerned.

Data sources

We may obtain editorial and PR contact details from:

  • information provided directly by individuals or their organisations
  • press releases and media enquiries
  • publicly available professional sources
  • industry events and networking
  • referrals from third parties within the sector

4.3 Magazine and email communications

Purpose

  • Send newsletters and editorial updates
  • Deliver print magazines
  • Provide industry insights
  • Manage subscriptions

Lawful basis

  • Consent (email marketing where required)
  • Legitimate interests (B2B communications where permitted)
  • Contract (paid subscriptions)

You may unsubscribe at any time via the email footer or by contacting us.

4.4 CRM management (HubSpot)

We use HubSpot as our customer relationship management (CRM) platform.

HubSpot may store and process:

  • Contact details
  • Communication history
  • Advertising enquiries
  • Sales and account information
  • Website interaction data (where tracking is enabled)

Purpose

  • Manage relationships with advertisers and prospects
  • Track enquiries and bookings
  • Improve service delivery
  • Support marketing communications (where permitted)

Lawful basis

  • Legitimate interests
  • Contract (where applicable)
  • Consent (where required for marketing)

HubSpot processes data on our behalf under a data processing agreement.

4.5 HubSpot website tracking and behavioural data

We may use HubSpot tracking technologies on our website to help us understand how visitors engage with our content and to improve our marketing and customer experience.

What HubSpot tracking does

Where enabled and consent is provided (where required), HubSpot may:

  • Track pages you visit on our website
  • Record interactions with forms
  • Associate website activity with a known contact where you have submitted your details
  • Track email engagement (opens and clicks)
  • Place cookies on your device
  • Build a profile of your interactions with our brand

This helps us to:

  • Improve website performance
  • Understand content effectiveness
  • Manage advertising enquiries more effectively
  • Tailor communications where lawful to do so
  • Support our legitimate business interests in growing our publication and advertising services

Lawful basis

We rely on:

  • Consent — for non-essential cookies and tracking technologies
  • Legitimate interests — for limited B2B relationship management where permitted by law

We have conducted a legitimate interests assessment and concluded that our use of HubSpot tracking is proportionate, expected in a B2B publishing context, and does not override individuals’ rights.

When tracking becomes identifiable

If you:

  • Complete a form
  • Subscribe to emails
  • Enquire about advertising
  • Or otherwise provide your details

we may link your website activity to your contact record in HubSpot.

Your choices

You can:

  • Decline analytics and tracking cookies via our cookie banner
  • Adjust your cookie preferences at any time
  • Unsubscribe from marketing emails
  • Object to processing (see Your Rights section)

4.6 Email marketing (Campaign Monitor)

We use Campaign Monitor to send email newsletters and communications.

Campaign Monitor processes:

  • Email address
  • Name
  • Engagement data (opens, clicks)
  • Subscription preferences
  • Technical delivery data

Purpose

  • Send requested communications
  • Measure engagement
  • Improve content relevance
  • Maintain suppression lists

Lawful basis

  • Consent (where required)
  • Legitimate interests (B2B communications where permitted)

Campaign Monitor acts as our data processor.

4.7 Website analytics (Google Analytics)

We use Google Analytics to understand website usage and improve performance.

Google Analytics may collect:

  • IP address (anonymised where configured)
  • Device and browser information
  • Behavioural data
  • Traffic source data

Lawful basis

  • Consent (via cookie banner for non-essential cookies)
  • Legitimate interests (for strictly necessary analytics where configured appropriately)

4.8 Website security and administration

We process data to:

  • Maintain site security
  • Prevent fraud or misuse
  • Diagnose technical issues

Lawful basis: Legitimate interests.

5 Marketing communications and PECR

We comply with the Privacy and Electronic Communications Regulations (PECR).

We may send marketing emails where:

  • You have provided consent; or
  • You are a corporate subscriber or business contact and the communication is relevant to your role (soft opt-in where applicable).

You can opt out at any time.

6 Sharing personal data

We may share data with trusted processors including:

  • HubSpot (CRM)
  • Campaign Monitor (email delivery)
  • Google (analytics)
  • IT and hosting providers
  • Printers and mailing houses
  • Payment processors
  • Professional advisers

All processors are contractually required to protect personal data.

We do not sell personal data.

7 International transfers

Some providers (including HubSpot, Campaign Monitor and Google) may process data outside the UK.

Where this occurs we ensure appropriate safeguards such as:

  • UK adequacy regulations
  • Standard Contractual Clauses
  • Additional technical safeguards where required

8 Data retention

We retain personal data only as long as necessary.

Typical periods:

  • Advertising client records: up to 6 years
  • Subscriber data: until unsubscribe plus suppression period
  • CRM prospect data: typically reviewed every 24 months
  • Analytics data: per Google Analytics settings

9 Your rights

Under UK GDPR you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request erasure
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent

To exercise rights, contact:

hello@thebrightmediaagency.com

We will normally respond within one month.

10 Complaints

If you have concerns, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113

11 Data security

We implement appropriate technical and organisational measures including:

  • Access controls
  • Secure hosting
  • Encryption where appropriate
  • Staff confidentiality obligations
  • Processor due diligence

12 Third-party links

Our website and magazine may contain links to third-party websites. We are not responsible for their privacy practices.

13 Changes to this policy

We may update this policy from time to time. The latest version will always appear on our website.