Introduction

SD Media and Marketing (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.sdleafletdistribution.co.uk (the “Website”) or use our leaflet distribution services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Website.

Data Controller

SD Media and Marketing is the data controller for the purposes of data protection law. Our registered address is:

SD Media and Marketing

Dainton Storage

Yalberton Industrial Estate

Alders Way

Paignton TQ4 7QL

Information We Collect

Personal Data You Provide

We may collect and process the following personal data:

• Contact Information: Name, email address, telephone number, postal address
• Business Information: Company name, job title, business address
• Service Requirements: Details about your leaflet distribution requirements, target areas, campaign preferences
• Communication Records: Records of correspondence and communications with us
• Payment Information: Billing address and payment details (payment card information is processed securely by our payment providers and not stored by us)

Information Automatically Collected

When you visit our Website, we may automatically collect:

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform
• Usage Data: Information about how you use our Website, products and services
• Marketing and Communications Data: Your preferences in receiving marketing communications and your communication preferences

Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies. Please see our Cookie Policy for detailed information about the cookies we use and how you can manage your cookie preferences.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To perform our contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: For our legitimate business interests, including:
• Providing and improving our services
• Marketing our services to existing customers
• Preventing fraud and ensuring security
• Consent: Where you have given specific consent for certain processing activities
• Legal Obligation: To comply with our legal and regulatory obligations

How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery
• To provide leaflet distribution services
• To communicate with you about your orders and services
• To process payments and manage billing
• To provide customer support
• Business Operations
• To manage our business operations
• To improve our Website and services
• To conduct data analysis and research
• To ensure security and prevent fraud
• Marketing and Communications
• To send you marketing communications about our services (where you have consented or we have legitimate interests)
• To personalise your experience on our Website
• To conduct customer satisfaction surveys
• Legal and Compliance
• To comply with legal obligations
• To establish, exercise, or defend legal claims
• To protect our rights, property, or safety

Sharing Your Information

We may share your personal data with:

Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Payment processing
• Website hosting and maintenance
• Email marketing services
• Data analytics
• Customer relationship management
• Distribution network partners
• Legal Requirements

We may disclose your information where required by law, regulation, legal process, or governmental request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Consent

We may share your information with third parties where you have given your explicit consent.

International Transfers

We primarily process data within the UK and European Economic Area (EEA). Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard Contractual Clauses approved by the UK authorities
• Other approved transfer mechanisms
• Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Customer Data: Retained for the duration of our business relationship and up to 7 years after termination for legal and accounting purposes

Marketing Data: Retained until you withdraw consent or object to processing

Website Data: Technical data is typically retained for 12 months

Payment Data: Retained in accordance with legal and regulatory requirements

Your Rights

Under UK data protection law, you have the following rights:

Right of Access

You can request copies of your personal data and information about how we process it.

Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can ask us to limit how we use your personal data in certain situations.

Right to Data Portability

You can request transfer of your personal data to another organisation in certain circumstances.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have rights relating to automated decision-making and profiling.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against:

• Unauthorised access, use, or disclosure
• Accidental loss, destruction, or damage
• Unlawful processing

Security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Staff training on data protection
• Access controls and authentication procedures
• Children’s Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Third-Party Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:

• Posting the updated policy on our Website
• Sending you an email notification (where we have your email address)
• Other appropriate means of communication

The updated policy will be effective from the date of publication unless otherwise stated.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

SD Media and Marketing

Dainton Storage

Yalberton Industrial Estate

Alders Way

Paignton TQ4 7QL

Email: bookings@sdmediaandmarketing.com

Telephone: 01803 394772

Data Protection Authority

You have the right to lodge a complaint with the UK’s data protection supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

This Privacy Policy was last updated in November 2025 and is effective immediately.