Privacy Policy

Last updated: 21 August 2026

1. Who We Are

Blue Ocean Social Ltd
Company number: 15021733
Office 5589, 182-184 High Street North, East Ham, London, England, E6 2JA
Email: privacy@blueoceansocial.co.uk

Controller: Blue Ocean Social Ltd (no Data Protection Officer)
EU Representative: Arne Habbestad, Øvre Korskirkeallmenningen 3, 5017 Bergen, Norway

2. What This Notice Covers

We are a marketing agency for small businesses. This notice explains how we handle personal data when you visit this website, when you contact us, and when you or your business work with us. It also covers the business correspondence, call recordings, and records we keep for our own administration, quality, security, or legal purposes, which we hold as an independent controller.

When we deliver services to a client, we usually process personal data on that client’s behalf as a processor, under the Data Processing Agreement that forms part of our client contracts. That processing is governed by our contract with the client and by the client’s own privacy information, and this notice does not replace either.

3. What We Collect

• Contact and enquiry details: your name, business, email address, phone number, and what you write to us, including messages sent by email or WhatsApp.
• Client relationship records: contracts, purchase orders, invoices, approvals, and the correspondence around them.
• Call recordings and transcripts: video calls may be recorded and transcribed using AI note-taking tools so we can capture details accurately. We always tell participants before recording and explain the purpose, and anyone who prefers not to be recorded can ask us not to record the call, or communicate with us by email instead.
• Website visit data: our analytics tool stores visit data on our own server and is designed to work without following you across other websites. We also use Google’s advertising tag to measure whether our own Google Ads bring visitors here (see Cookies below).

4. Why We Use It (Legal Bases)

• Responding to you and delivering our services: performance of a contract, or steps you ask us to take before one.
• Keeping business records, correspondence, and recordings for administration, quality, and security: our legitimate interests in running the business well.
• Keeping accounting and tax records: legal obligation.
• Advertising measurement and any marketing: your consent, which you can withdraw at any time.

5. Who We Share It With

We use carefully chosen service providers who process data under contract with us: Microsoft (email and file storage), Dropbox (file storage and content delivery), IONOS (hosting for this website), Krystal Hosting Ltd (UK server hosting), and Anthropic and OpenAI (AI tools, under business terms configured so that our data is never used to train their models). Google processes advertising measurement data where you consent to it. We also share information with professional advisers where needed, and with authorities where the law requires it. We never sell personal data.

6. International Transfers

Some providers may process data in the US or other countries. For every transfer of personal data out of the UK, we make sure an appropriate legal transfer mechanism is in place before the transfer happens, such as the UK-US Data Bridge where the recipient is certified under it, or the UK International Data Transfer Agreement or UK Addendum, so each transfer is lawful under UK GDPR.

7. How Long We Keep It

We keep personal data only as long as it is needed. Enquiry correspondence is deleted when it is no longer needed. Client records are kept for the life of the relationship and afterwards for as long as the law requires, for example for accounting purposes. Call recordings and transcripts are kept only while they serve the purpose we explained when recording, then deleted. Backup copies expire automatically as backups rotate.

8. Cookies and Website Tracking

We ask for your consent through the cookie banner before any non-essential cookies are set. Essential cookies keep the website working. With your consent, Google’s advertising tag measures whether our own advertising brought you here. You can change your choices at any time in the cookie banner or your browser settings.

9. Our Client Portal

As our client portal becomes available, it may include an AI assistant. Conversations with the assistant may be reviewed by our team for quality and used in anonymised form, with personal data removed, to improve the platform.

10. Your Rights and Complaints

You have the right to access your personal data, to have mistakes corrected, to ask for deletion, to receive a copy of data you provided, to object to processing based on legitimate interests, and to withdraw consent at any time. Email privacy@blueoceansocial.co.uk and we will help.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU or EEA, you can also complain to your local data protection authority.

11. Changes to This Notice

When this notice changes, we update it here and change the date at the top. Where a change genuinely matters for our clients, we tell them directly.