Privacy Policy

Last updated: 20 October 2026

We are transparent about how we collect and use your personal data and this privacy notice exists to tell you how we do this.

This notice applies wherever we decide why and how we process personal data (and therefore act as a Data Controller under data protection law). It covers the personal data we process when you use our services.

Our privacy notice tells you the journey of your personal data from the moment it enters our systems up until when it's removed, as well as the stops it makes along the way.

The different ways we process personal data

When you hire us for a project

What personal data do we collect, why do we collect it, and what legal basis do we rely on?

Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

When you first contact us with an idea, we'll need some information about you, such as your name, email address, geolocation and production information and we rely on Article 6(1)(b) - Contract and Article 6(1)(f) of the GDPR - Legitimate Interests when doing so.

While we partner on a project with you, in order to fulfil our contract we will need to process your financial information and will rely on Article 6(1)(b) of the GDPR - Contract when doing so.

Where do we store it?

Your data will be stored in a few systems, such as:

• Google Drive - Our document database, which we use to store information. Google is based in the EEA/USA and you can find more about them here.

• HubSpot - Our CRM database, which we use to store information. HubSpot is based in the USA and you can find more about them here.

• Apollo - Our sales prospecting database, which we use to store information. Apollo is based in the USA and you can find more about them here.

• Synergist - Our agency management system, which we use to store information. Synergist is based in the UK and you can find more about them here.

How long do we keep it for?

We keep the personal data mentioned for the duration of your contract with us and for 6 years after, in line with statutory retention periods.

When you work with us as a freelance artist

What personal data do we collect, why do we collect it, and what legal basis do we rely on?

Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

When you work with us as a freelance artist, we need some information about you in order to work with you - such as your name, email address, phone number, financial information, location and your portfolio information. The legal basis we rely on for this is Article 6(1)(b) of the GDPR - Contract and Article 6(1)(f) of the GDPR - Legitimate Interests.

We may sometimes need to process your passport data to ensure we can fulfil our contract. When we do this, the legal basis we rely on are Article 6(1)(b) of the GDPR - Contract and Article 9(2)(a) of the GDPR - Explicit Consent.

Where do we store it?

Your information will be stored in a few systems, such as:

• Google Drive - Our document database, which we use to store information. Google is based in the EEA/USA and you can find more about them here.

• Raindrop - Our freelance management system. Raindrop is based in the USA and you can find more about them here.

• Synergist - Our agency management system. Synergist is based in the UK and you can find more about them here.

How long do we keep it for?

We keep the personal data mentioned for the duration of your contract with us. We'll keep a record of your assignments for 6 years after you left us, in line with statutory retention periods for contractual disputes.

When you apply for a job with us

What personal data do we collect, why do we collect it, and what legal basis do we rely on?

Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

When you apply for a job with us, we need some information about you in order to see if we'd be a good fit - such as your name, email address, employment history and anything you share with us on your application. The legal basis we rely on for this is Article 6(1)(f) of the GDPR - Legitimate Interests.

Where do we store it?

Your information is stored in Google Drive, our document database, which we use to store information. Google is based in the EEA/USA and you can find more about them here.

How long do we keep it for?

We'll retain your personal information for 12 months if you are unsuccessful in your application, in line with statutory retention periods.

When you visit our website

Our website uses cookies and other similar technologies of which you should be aware.

What cookies do we collect, why do we collect them, and what legal basis do we rely on?

Cookies are text files placed on your hard drive by a web page server when you visit a website and are saved in your browser's history. They allow the website to recognise your device and store some information about your preferences or past actions. Cookies cannot be used to run programs or deliver viruses to your computer; they are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

When you use our website, the cookies that can be stored on your device are either first party cookies, which are placed and read by us directly while you are using our website or third party cookies, which are set by other third parties we have partnered with.

Below is a list of the types of cookies we use.

Necessary cookies: Required to enable core site functionality and to remember user preferences and choices, such as language preferences or customized settings.We rely on our legitimate interests (Article 6(1)(f)) to use these, as the site cannot work properly without them.

Performance and analytical cookies: These cookies provide quantitative measures of website visitors. With the usage of these cookies we are able to count visits and traffic sources to improve the performance of our site. We only set these if you accept them, and we rely on your consent (Article 6(1)(a)) to do so.

Advertising cookies: These cookies are used by advertising companies to serve ads that are relevant to your interests. 

Framer  (website platform)

Necessary: crumb - Purpose: To prevent cross-site forgery Retention: Session Third-Party: Framer (previously listed as Squarespace)

[NEW] Necessary: framerCookiesConsentMode - Purpose: Remembers your cookie choices Retention: Persistent (Local Storage)  Third-Party: Framer

Google Analytics

Performance & Analytical: _ga - Purpose: Calculates visitor, session and campaign data and keeps track of site usage for analytics reports. Retention: 2 years Third-Party: Google

Performance & Analytical: _ga_[ID] - Purpose: Keeps track of your session for analytics reports. Retention: 2 years Third-Party: Google

Performance & Analytical: _gid - Purpose: Stores information on how visitors use a website, while also creating an analytics report of the website's performance. Retention: 1 day Third-Party: Google

Performance & Analytical: _gat - Purpose: Set by Google to distinguish users. Retention: 1 minute Third-Party: Google

Hotjar

Performance & Analytical: _hjSessionUser_[ID] - Purpose: Recognises you across visits so Hotjar can group your sessions. Retention: 1 year Third-Party: Hotjar

Performance & Analytical: _hjSession_[ID] - Purpose: Holds data about your current visit. Retention: 30 minutes Third-Party: Hotjar

HubSpot

Performance & Analytical: __hstc - Purpose: Tracks visits and links them to enquiries. Retention: 6 months Third-Party: HubSpot

Performance & Analytical: hubspotutk - Purpose: Recognises you so form submissions can be linked to your visits. Retention: 6 months Third-Party: HubSpot

Performance & Analytical: __hssc - Purpose: Counts page views within a session. Retention: 30 minutes Third-Party: HubSpot

Performance & Analytical: __hssrc - Purpose: Detects when you restart your browser. Retention: Session Third-Party: HubSpot

Apollo

Performance & Analytical: __apolloid - Purpose: Identifies the businesses that visit our site so our sales team can follow up. Retention: 12 months Third-Party: Apollo

Vimeo

Performance & Analytical: vuid (previously "void") - Purpose: Collects tracking information by setting a unique ID to embed videos on the website. Retention: 2 years Third-Party: Vimeo

What these tools do

• Google Analytics counts visits, traffic sources and the pages people view, so we can improve our site. Google is based in the USA.

• Hotjar shows us how visitors use our pages (clicks, scrolling and mouse movement) through heatmaps and session recordings. Text typed into fields is masked so Hotjar does not capture it. Hotjar is based in Malta (EU).

• HubSpot records which pages you view and, if you fill in a form or use our chat, links that activity to your enquiry so we can follow up. HubSpot is based in the USA.

• Apollo identifies which businesses visit our site and links that activity to our sales records so we can follow up with relevant companies. Apollo is based in the USA.

• Vimeo plays videos embedded on our site. Vimeo is based in the USA.

Managing your cookie choices

• We do not set any performance, analytical or advertising cookies until you accept them on our cookie banner.

• Our banner offers "Accept all" and "Reject all" on its first screen, shown equally.

• If you reject cookies, we will not set any non-essential cookies on that visit or later visits.

• You can change your mind at any time using the "Cookie settings" link at the bottom of every page. Withdrawing consent does not affect anything collected before you withdrew it.

• Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out and will not set non-essential cookies.

• You can also adjust your browser settings to block or delete cookies.

If you are a US resident

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Depending on the state you live in, you may have the right to know what personal information we hold about you, and to ask us to correct or delete it. We honour Global Privacy Control signals as a valid opt-out request. To make a request, email dpo@acrossthepond.com. We will not treat you differently for exercising these rights.

Children's privacy

Our website and services are intended for businesses and adults. They are not aimed at children under 16, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child has given us personal data, please email dpo@acrossthepond.com. We will delete it promptly.

International transfers

Some of the providers named in this notice (Google, HubSpot, Apollo, Raindrop and Vimeo) are based in the USA. Where your personal data is transferred outside the UK, we make sure it is protected by UK adequacy regulations (including the UK-US Data Bridge where the provider is certified) or by the ICO's approved International Data Transfer Agreement or Addendum. 

What are your rights?

[UPDATED] Our Site is owned and operated by Across the Pond Group Ltd, a limited company registered in England under company number 06935403, whose registered office is at 45 Gerrard Street, London W1D 5QQ. Your personal data is yours and you have rights in relation to it granted by the UK GDPR, which include:

The right to be informed

You have the right to be informed about the collection and use of your personal data, the purposes for processing, retention periods for that personal data and who it will be shared with. We have set this information out in this privacy notice.

The right of access

You have the right to ask us for copies of the data we hold about you. If you ask us, we'll confirm whether we're processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details).

The right to object

You have the right to ask us to stop processing your personal information in some circumstances, such as when we are relying on our own (or someone else's) legitimate interests to process your personal information, when we are processing your personal information for direct marketing or when we are processing your personal information for research.

The right to rectification

You have the right to ask us to rectify the personal information you think is inaccurate or to complete information you think is incomplete. When you ask us to rectify your information, if we've shared your personal information with others, we'll let them know about the rectification where possible.

The right to erasure

You have the right to ask us to erase your personal information, in some circumstances, such as where we no longer need it or you withdraw your consent (where applicable).

The right to restrict processing

You have the right to ask us to restrict the processing of your personal information for a period of time in some circumstances, such as where you contest the accuracy of that personal information or object to us processing it. This right is separate from the right to object and will only stop us from using your personal information further, not from processing it. If we've shared your personal information with others, we'll let them know about the restriction where possible.

The right to data portability

You have the right to ask us to give you the personal information you provided to us, or to send it to another organisation, in a commonly used, machine-readable format. This applies where we process it with your consent or to fulfil a contract, and by automated means.

The right to withdraw consent

Where we rely on your consent (for example, for analytical cookies or passport data), you can withdraw it at any time. This does not affect processing carried out before you withdrew it.

You don't have to pay anything in order to exercise your rights. Please contact us by sending an email to dpo@acrossthepond.com if you wish to make a request under your rights; we have a calendar month to get back to you with a response.

How you can complain

If you have any concerns about our use of your personal information, please let us know by:

• Emailing us at dpo@acrossthepond.com, or

• Writing to us at FAO FAO DPO, Across the Pond Group Ltd, 45 Gerrard Street, London W1D 5QQ

If you are not satisfied with our response or you are unhappy with how we have used your data, you can complain to the Information Commissioner's Office (ICO). You can find the ICO contact details below:

ICO Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, Helpline number: 0303 123 1113.

ICO Website: https://www.ico.org.uk

Changes to this notice

We review this notice at least once a year and whenever our use of personal data changes. When we update it, we change the "Last updated" date at the top. Previous versions are available on request from dpo@acrossthepond.com.