Privacy Policy

Last updated: 27/07/2026

This privacy policy explains how Rinni Limited (“Rinni”, “we”, “us” or “our”) collects, uses, stores and protects your personal information when you:

• visit our website at https://rinni.co.uk;
• contact us about our services;
  
• submit an enquiry or complete a form;
  
• become a client, supplier, contractor or collaborator;
• subscribe to our marketing communications; or
  
• otherwise interact with us through email, social media, events or other business activities.
  

Rinni Limited is the controller responsible for the personal information described in this policy.

If you have any questions about this policy or how we use your personal information, please contact us at:
‍
Rinni Limited
Email: erin@rinni.co.uk
Registered office: 67 Taverham Road, Norwich, United Kingdom, NR8 6SE
Company number: 16301738

1. Information we collect

We may collect personal information that you provide directly to us, including:

• your name;
• business or organisation name;
  
• job title;
  
• email address;
• telephone number;
  
• billing or postal address;
  
• information submitted through our contact or enquiry forms;
  
• information about your project, services required, budget and timescales;
  
• correspondence between you and Rinni;
  
• payment, invoicing and transaction information;
  
• social media account information where you engage us to manage or create content for an account;
  
• photographs, videos, audio or other content supplied as part of a project; and
  
• any other information you voluntarily provide to us.
  

We may also collect limited technical information automatically when you use our website, including:

• your IP address;
• browser and device type;
  
• operating system;
  
• referring website;
• pages visited;
  
• dates and times of visits;
  
• interactions with the website; and
  
• cookie and analytics information.
  

This information does not usually identify you directly, but it may be treated as personal information where it can be linked to you.

2. How we collect your information

We may collect your information:

• when you contact us by email, telephone, website form or social media;
• when you request a proposal, quotation or consultation;
  
• when you enter into a contract with us;
  
• when you subscribe to an email list;
• when you attend an event, meeting or content shoot;
  
• through our website, cookies and analytics tools;
  
• through publicly available professional or business sources; and
  
• through referrals, clients, partners, suppliers or collaborators.
  

Where a client provides us with personal information relating to another person, the client is responsible for ensuring they have an appropriate basis for sharing that information with us.

3. How we use your information

We may use your personal information to:

• respond to enquiries;
• discuss, quote for and provide our services;
  
• manage client relationships and projects;
  
• create social media strategies, content and campaigns;
• schedule, publish and monitor social media content;
  
• communicate about meetings, shoots, deadlines and deliverables;
  
• manage contracts, invoices and payments;
  
• maintain business and accounting records;
  
• provide customer support;
  
• manage relationships with suppliers, contractors and collaborators;
  
• improve our website, services and marketing;
  
• understand how visitors use our website;
  
• send relevant marketing communications where permitted;
  
• protect our business, website and systems;
  
• prevent fraud, misuse or security incidents;
  
• establish, exercise or defend legal claims; and
  
• comply with legal, regulatory, tax and accounting obligations.
  

We will not use your personal information for purposes that are incompatible with those described above unless permitted or required by law.

4. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following lawful bases:

Contract

We may process your information where it is necessary to:

• provide services under a contract;
• take steps at your request before entering into a contract;
  
• manage a project, retainer or booking; or
  
• administer payments and invoicing.

Legitimate interests

We may process your information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.

These interests may include:

• responding to business enquiries;
• developing and improving our services;
  
• managing client and supplier relationships;
  
• promoting Rinni’s services;
• maintaining the security of our website and systems;
• keeping appropriate business records; and
• establishing or defending legal claims.

Consent

We may rely on your consent where:

• you opt in to receive certain marketing communications;
• you consent to non-essential cookies;
  
• you agree to a particular use of photographs, video or other identifiable content; or
  
• consent is otherwise the most appropriate lawful basis.

You may withdraw your consent at any time by contacting us. Withdrawing consent will not affect processing that took place before consent was withdrawn.

Legal obligation

We may process your information where necessary to comply with a legal or regulatory obligation, including tax, accounting and record-keeping requirements.

5. Marketing communications

We may send you marketing communications where:

• you have given us your consent;
• you have previously purchased or enquired about similar services and the law permits us to contact you; or
  
• another lawful basis applies.
  

You can unsubscribe at any time by:

• clicking the unsubscribe link in an email; or
• contacting us at erin@rinni.co.uk.
  
• another lawful basis applies.
  

6. Cookies and website analytics

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that may help the website operate, remember preferences, understand website usage and measure marketing activity.

We may use:

• strictly necessary cookies required for the website to function;
• analytics cookies that help us understand website performance and visitor behaviour;
  
• preference or functionality cookies; and
  
• advertising or marketing cookies used to measure campaigns or deliver relevant content.
  

Where required, we will ask for your consent before placing non-essential cookies on your device.

You can manage your preferences through our cookie banner and your browser settings. Disabling certain cookies may affect how the website functions.

More detailed information should be provided in our Cookie Policy or cookie preference tool.

7. Who we share your information with

We may share your personal information with carefully selected third parties where necessary for the operation of our business or the delivery of our services.

These may include:

• website hosting and website management providers;
• cloud storage and file-sharing providers;
  
• email and communications platforms;
  
• project management and scheduling software;
  
• social media platforms;
  
• social media management and analytics tools;
  
• content production and editing platforms;
  
• accountants, bookkeepers and payment providers;
  
• professional advisers, including legal advisers;
  
• photographers, videographers, designers, freelancers and other subcontractors;
  
• analytics, advertising and marketing providers;
  
• IT and cybersecurity providers;
  
• insurers; and
  
• regulators, courts, government bodies or law enforcement agencies where legally required.
  

Examples of platforms we may use include: Google Workspace, Dropbox, Notion, Canva, CapCut, Meta, Instagram, Facebook, TikTok, Pinterest, LinkedIn, Sprout Social, SEMrush, Xero, GoCardless, Adfin and Webflow.

Third-party providers may process personal information under their own privacy policies. Where a provider processes information on our behalf, we seek to use providers that offer appropriate data-protection safeguards.

We may also disclose personal information:

• in connection with a potential sale, restructuring or transfer of all or part of our business;
• to enforce a contract;
  
• to protect the rights, property or safety of Rinni, our clients or others; or
  
• where disclosure is required by law.
  

We do not sell your personal information.

8. Client social media accounts and content

Where you engage Rinni to manage social media accounts or create content, we may be given access to:

• social media profiles and business pages;
• account usernames or access permissions;
  
• messages, comments and audience interactions;
  
• performance and analytics information;
  
• content libraries;
  
• photographs, videos and audio;
  
• names and contact details of employees, customers, creators or collaborators; and
  
• campaign, advertising or customer information.
  

We will only use this information to provide the agreed services, administer the client relationship, comply with legal obligations and protect our legitimate business interests.

Clients should avoid sending us passwords by unsecured methods. Where possible, account access should be provided using official platform permissions, partner access or password-management tools.

Where Rinni processes personal information solely on a client’s instructions, the client may be the controller and Rinni may act as a processor. Relevant responsibilities may be addressed in the client contract or a separate data-processing agreement.

9. Photographs, videos and event content

Our services may involve creating photographs, videos, audio recordings and social media content in which individuals are identifiable.

Responsibility for obtaining permission may depend on the project and the relationship between Rinni and the client.

Unless agreed otherwise in writing:

• clients are responsible for ensuring that employees, customers, guests, models and other participants have been appropriately informed about filming or photography;
• clients must obtain any necessary releases, consents or permissions;
  
• clients must tell us about individuals who should not be photographed or recorded; and
  
• Rinni will use the resulting content only for the agreed project and any separately agreed portfolio or promotional use.
  

Where Rinni wishes to use identifiable client content in its portfolio, website, case studies or social media channels, we will rely on the permissions set out in our contract or obtain separate agreement where appropriate.

10. International transfers

Some service providers and social media platforms may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place where required. These may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
  
• the UK Addendum to the European Commission’s standard contractual clauses; or
  
• another legally recognised transfer mechanism.
  

Some third-party platforms determine independently how they process personal information. You should review their privacy policies for further details.

11. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax and reporting requirements.

Retention periods may vary depending on the type of information and our relationship with you.

As a general guide:

• enquiry information may be retained for up to 24 months after the last communication;
• client contracts, invoices and financial records may be retained for up to six years after the end of the relevant financial year, or for another period required by law;
  
• project files and deliverables may be retained for 6 months after completion;
  
• marketing information may be retained until you unsubscribe or object; and
  
• cookie and analytics data will be retained in line with the settings of the relevant platform and our Cookie Policy.
  

We may retain information for longer where necessary to establish, exercise or defend legal claims or comply with a legal obligation.

When information is no longer required, we will delete it, anonymise it or securely restrict further access.

12. How we protect your information

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• password protection;
• multi-factor authentication where available;
  
• restricted account and file access;
  
• secure cloud-storage providers;
  
• device security;
  
• software updates;
  
• secure backup procedures; and
  
• confidentiality obligations for relevant suppliers and contractors.
  

However, no internet transmission or digital storage system can be guaranteed to be completely secure.

You are responsible for using secure methods when sharing sensitive account access or confidential information with us.

13. Children’s information

Our website and services are primarily intended for businesses and people aged 18 or over.

We do not knowingly collect personal information directly from children through our website.

However, photographs or videos of children may sometimes be included in client content. In these circumstances, the client is generally responsible for obtaining appropriate permission from a parent or guardian unless otherwise agreed in writing.

If you believe a child’s personal information has been provided to us without appropriate permission, contact erin@rinni.co.uk.

14. Your data-protection rights

Depending on the circumstances, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
  
• request deletion of your personal information;
  
• request restriction of processing;
  
• object to processing based on legitimate interests;
  
• object to direct marketing;
  
• request transfer of information you provided to us;
  
• withdraw consent where processing is based on consent; and
  
• raise a complaint about how we use your information.
  

These rights are subject to legal conditions and exemptions.

To exercise a right, contact us at erin@rinni.co.uk. We may need to ask for information to verify your identity before responding.

You will not usually be required to pay a fee. However, the law may allow us to charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive.

15. Complaints

Please contact us first if you have concerns about how we handle your personal information, so that we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

16. Third-party websites

Our website and communications may contain links to websites, platforms or services operated by third parties.We are not responsible for the privacy practices, content or security of third-party services. You should review the privacy policy of each third-party website or platform you use.

17. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes to:

• our services;
• our website or technology;
  
• the third parties we use;
  
• our data-processing activities; or
  
• applicable legal and regulatory requirements.
  

The current version will be published on our website with an updated revision date.

We encourage you to review this policy periodically.

18. Contact us

For questions about this privacy policy, your personal information or your data-protection rights, contact:
‍
Rinni Limited
Email: erin@rinni.co.uk
Registered office: 67 Taverham Road, Norwich, United Kingdom, NR8 6SE
Company number: 16301738