Privacy policy.

Who we are

Mambo Agency Ltd decides how your information is used, and you can reach us by email or phone.

Mambo Agency Ltd is the controller of the personal information described in this policy. This means we decide how and why it is used.

Mambo Agency Ltd, registered in England and Wales.
Company No. 07345023 · VAT No. GB995737254
Registered office: C/O Seftons, 135-143 Union Street, Oldham, Lancashire, United Kingdom, OL1 1TE

We are a branding and web design studio based in Cheshire. You can contact us about this policy or your information at info@mambo.agency or on 0800 644 8088 (9am to 5.30pm).

What we collect

What you type into our forms, what you tell us by email or phone, and basic technical details your browser sends.

When you use our forms

Our Book a discovery call form asks:

• which services you are interested in and where you are starting from;
• a rough budget and when you would like to start;
• your name and email address;
• your company name, phone number and a message, if you choose to add them;
• a tick box confirming you are happy for us to use your details to reply, as set out in this policy.

The Project enquiry form on our contact page asks for your name, email address, company, phone number, the services you need, when you would like to start, a message and the same tick box.

When you email or ring us

We receive whatever you choose to share, such as your contact details and information about your project.

When you visit the website

Like any website, your browser sends technical information, such as your IP address, browser type and the pages you request. Our hosting and security providers use it to deliver the site and keep it secure. We do not use it to identify you. If you choose Accept all in our cookie banner, we also use Google Analytics to see how people use the site, such as which pages are viewed, how visitors found us, the type of device and browser used and the town or region you are browsing from. We do not use advertising tools.

Please do not send us sensitive information, such as details about health, through our forms. We do not need it.

How we use it and why

To reply to you, quote for and do your project, keep our records and keep the site secure. We do not sell your data or send marketing you have not asked for.

The law requires us to have a lawful basis for each use. Ours are:

• To reply to your enquiry and arrange a discovery call, including sending a text alert to our team so we can reply quickly. Lawful basis: our legitimate interest in answering people who contact us about our services and, where you are asking about working with us, taking steps at your request before a contract.
• To prepare a quote and carry out work for you. Lawful basis: taking steps at your request before entering into a contract, and then performing that contract.
• To keep business, tax and accounting records. Lawful basis: our legal obligations.
• To deliver the website and protect it and our forms from spam and misuse. Lawful basis: our legitimate interest in running a secure website.
• To measure how the site is used with Google Analytics, so we can improve it, and to remember page colours in your browser for smoother page changes, only if you choose Accept all. Lawful basis: your consent, which you can withdraw at any time with the Cookie settings link at the bottom of every page.

We do not add you to a marketing mailing list unless you ask us to, we never sell your information, and we do not make decisions about you by automated means or build profiles of you.

Do you have to give us your details?

Only your name and email are needed to reply. Everything else is optional.

You do not have to give us any information. Our forms need your name, your email address and the tick box so we can reply to you. The other fields are optional. If you would rather not use the forms, you can email or ring us instead.

Who we share it with

A few trusted providers who help us run the website, receive your enquiry and reply to you. Nobody uses it for their own marketing.

We use these service providers, who handle information on our behalf under their data processing terms:

• Webflow, Inc. hosts this website, receives and stores form submissions, and emails each submission to our info@mambo.agency inbox. Webflow delivers the site using providers including Cloudflare and Amazon Web Services.
• Cloudflare, Inc. protects and delivers the website, and runs Turnstile, which checks form submissions to block spam and bots.
• Zapier, Inc. passes the details from your form to our team as text messages, using its SMS by Zapier service. The texts are delivered by mobile networks to our team's phones.
• Google supplies Google Analytics, which we use only if you choose Accept all. Google Ireland Limited provides it to us as our processor under the Google Ads Data Processing Terms, and Google LLC may process the data for it. We have turned off Google signals and advertising features, so this data is not used to show you adverts.
• Our email provider, which we use to receive and answer your messages, including the form notifications sent to info@mambo.agency.

We may also share information with our accountants and professional advisers when we need to, or with authorities where the law requires it.

International transfers

Some providers are in the United States. Where your data leaves the UK, recognised legal safeguards protect it.

Webflow, Cloudflare, Zapier and Google are based in the United States and may process information there or in other countries. Where personal information is transferred outside the UK, it is protected by one of the safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework, where the provider is certified, or the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses included in the provider's data processing terms. Contact us if you would like more detail.

How long we keep it

Enquiries for 24 months. Client and financial records for 6 years from the end of the financial year the work finished.

• Enquiries that do not lead to work: 24 months after we were last in touch, then deleted. This includes the copy stored in Webflow, the emails in our inbox and the text alerts.
• Client and financial records: 6 years from the end of the financial year in which the work finished. This meets HMRC record-keeping rules and company law, and covers the 6-year period in which legal claims can be made.
• Technical information: kept by our hosting and security providers for a limited period under their own policies. If you choose Accept all, Google Analytics keeps visit data for 2 months and visitor-level data for up to 14 months after your last visit, then deletes it. The totals and trends in our reports do not identify anyone.
• Zapier run history: Zapier keeps a log of each text alert it sends for a limited period under its own retention settings.

Your rights

You can ask to see, correct, delete or move your information, or ask us to stop using it. Just email us.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to us using your information where we rely on our legitimate interests;
• ask for information you gave us in a portable format;
• withdraw your consent at any time, where we rely on it, without affecting anything we did before.

To use any of these rights, email info@mambo.agency or ring 0800 644 8088. We may ask you to confirm your identity. We will reply within one month, and there is usually no charge.

Children

Our website and services are for businesses and adults.

Our website and services are aimed at businesses and adults. We do not knowingly collect information from children. If you think a child has sent us their details, please contact us and we will delete them.

Keeping your information secure

The site is encrypted and only our team and the providers above can access your details.

This website uses an encrypted connection (HTTPS), and our forms are protected against spam and bots. Access to your information is limited to our team and the providers listed above, who are required to keep it secure.

Cookies and similar technologies

No advertising cookies. Only what the site needs, plus Google Analytics and page colours if you choose Accept all.

This website does not use advertising or social media cookies. It uses a small number of cookies and browser storage items. Essential items are needed for the site to work and are always on. Optional items, including Google Analytics, are only used if you choose Accept all, and nothing optional runs before you choose.

Essential

• mb-consent (browser local storage, set by us): remembers whether you chose Accept all or Essentials only, so we do not ask again. Kept until you clear your browser storage.
• mb-pt and mb-ptc (browser session storage, set by us): a short note, and the colour of the page you clicked, that let the next page finish the page change you started. Deleted as soon as the next page loads.
• _cfuvid (cookie, set by Cloudflare on www.mambo.agency): helps Cloudflare protect the website from abuse. Deleted when you close your browser.
• Cloudflare Turnstile (loaded from challenges.cloudflare.com on pages with our forms): checks that form submissions come from a person, not a bot. It processes technical information about your browser and device.

Optional (Accept all)

• _ga and _ga_8F59J76L1R (cookies, set by Google Analytics on mambo.agency): give your browser a random ID so we can count visits and tell new visitors from returning ones. Kept for up to 2 years from your last visit, or deleted straight away if you choose Essentials only.
• mb-pc and mb-hc3 (browser local storage, set by us): remember the colours of our case study pages so moving between pages looks smoother. Kept until you clear your browser storage or choose Essentials only, when we delete them.

None of these items contain your name or contact details. You can change your choice at any time with the Cookie settings link at the bottom of every page. If you switch to Essentials only, we stop Google Analytics and delete its cookies. You can also clear or block cookies and storage in your browser settings, or block Google Analytics on every website with Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.

Changes to this policy

If anything changes, we will update this page and the date at the top.

We may update this policy from time to time. The date at the top shows when it last changed.

Complaints

Talk to us first. You can also complain to the ICO.

If you are unhappy with how we have handled your information, please contact us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

• online at ico.org.uk/make-a-complaint;
• by phone on 0303 123 1113;
• by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.