Privacy Statement
1. Who we are and what this policy covers
The following sets out the privacy policy of use of the Magenta Associates website. Magenta Associates respects your privacy and is committed to protecting it. We provide this Privacy Statement to inform you of our Privacy Policy and practices and of the choices you can make about the way your information is collected online and how that information is used.
This policy covers visitors to our website and people who contact us, subscribe to our updates or apply for a role with us. It explains what we collect, why, and what you can ask us to do about it. If you work for Magenta as an employee, worker or contractor, the information we hold about you is covered by our separate Employee Data Notice, which is provided to you directly.
This website is not intended for children and we do not knowingly collect data relating to children.
Magenta Associates Limited (company number 07545021), Sussex Innovation Centre, University of Sussex, Science Park Square, Brighton BN1 9SB, is the controller of the personal data described in this policy. This means we are responsible for deciding how it is held and used, and we are required under data protection law to give you the information set out below. Magenta Associates Limited is a single company, wholly owned by Magenta Associates EOT Trustee Limited as trustee of the Magenta Employee Ownership Trust.
2. The personal data we collect about you
Personal data means any information about an individual from which that person can be identified. We collect a limited amount, grouped as follows:
- Identity Data – your name, job title and the organisation you work for.
- Contact Data – your email address and telephone number.
- Technical Data – the internet protocol (IP) address of the device you use to visit our website, recorded in our server logs.
- Marketing and Communications Data – your preferences about receiving updates from us.
- Recruitment Data – where you apply for a role, your CV, covering letter and the information you give us during the application process.
We do not collect payment or financial information through this website, and we do not create user accounts or profiles.
Our web server records the domain and IP address of visitors automatically, as part of its normal operation and security logging. This identifies the device used to view the website rather than you as an individual, and we do not link it with personal data about specific individuals or use it to analyse individual browsing behaviour.
3. How your personal data is collected
We collect data in three ways. You give it to us directly when you complete a form on our website, subscribe to our updates, apply for a role, or contact us by email, phone or post. Our web server collects Technical Data automatically as described above. And we may collect Identity and Contact Data from publicly available sources such as Companies House, LinkedIn or an organisation’s own website, where we are researching an organisation we may work with.
4. How we use your personal data
When you request information through this website, we may need to know some personal information about you. When emailing us, or subscribing for free news or information we need your e-mail address, name and other limited personal identifiers, typically name and contact number.
Your personal data will be processed to provide information, goods, products and services you request in the form that you require.
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
- Where we need to perform the contract we have entered into with you.
- Where we need to comply with a legal obligation.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where you have given your consent, which you can withdraw at any time.
The table below sets out what we use your personal data for, which data is involved, and the legal basis we rely on in each case.
| Purpose | Type of data | Legal basis |
| To respond to an enquiry or request for information | Identity, Contact | Legitimate interests (to respond to people who contact us and to run our business), or performance of a contract where you are or become a client |
| To send you our newsletter and insights | Identity, Contact, Marketing and Communications | Consent, which you can withdraw at any time using the unsubscribe link in any message |
| To manage our relationship with you, including telling you about changes to this policy or our terms | Identity, Contact | Performance of a contract, and legitimate interests (to keep our records accurate) |
| To consider your application for a role with us | Identity, Contact, Recruitment | Legitimate interests (to assess candidates), and to take steps at your request before entering into a contract |
| To run, secure and troubleshoot our website | Technical | Legitimate interests (to keep our website available, secure and working properly) |
Where we rely on legitimate interests, we consider the impact on you before we process your data, and we do not process it where our interests are overridden by that impact.
Marketing and how to opt out
You will only receive marketing emails from us if you have asked to receive them. You can stop them at any time using the unsubscribe link in any message, or by emailing info@magentaassociates.co. We will never share your personal data with a third party for that third party’s own marketing purposes. If you opt out, we may still contact you about something you have specifically asked us about.
5. Cookies
Cookies are small files placed on your device when you visit a website. We only use cookies that are strictly necessary to make our site work, for example to keep it secure and to remember choices you make as you move between pages. Strictly necessary cookies do not require your consent under the Privacy and Electronic Communications Regulations 2003. We do not use analytics, advertising or social media cookies, we do not track you across other websites, and we do not share information about your visit with third parties for their own purposes. You can block or delete cookies through your browser settings, although parts of the site may then not work as intended.
6. Who we share your personal data with
We do not sell your personal data and we do not pass it to anyone outside Magenta Associates except as set out here. We share it with the third parties who provide the systems we run our business on: our website host, our email and document systems, our email marketing platform and our IT support provider. We may also share it with our professional advisers, or where we are required to do so by law or by a regulator. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow them to use it for their own purposes, and they may only process it on our instructions.
7. International transfers
Some of the providers we use may store or process personal data outside the UK. Where that happens, we make sure a similar degree of protection applies, either because the country is covered by UK adequacy regulations, or because we have put in place an approved transfer mechanism such as the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses.
8. Data security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We also limit access to your personal data to those of our people and suppliers who have a business need to know, and they are subject to a duty of confidentiality.
9. How long we keep your personal data
We only keep your personal data for as long as we need it. In practice that means we keep enquiry correspondence for as long as we are in contact with you, and then for a further period in line with our retention schedule, which reflects our record-keeping, accounting and legal obligations. Subscriber details are kept until you unsubscribe. Job applications are kept until the recruitment process is complete and for a period afterwards, so that we can answer any questions about our decision. Server logs are kept only as long as we need them for security.
10. Your legal rights
Under data protection law you have the right to:
- request access to your personal data, commonly known as a subject access request, so you can receive a copy of what we hold and check we are processing it lawfully;
- request correction of anything incomplete or inaccurate;
- request erasure of your personal data where there is no good reason for us to keep processing it;
- object to processing where we rely on legitimate interests. You also have an absolute right to object to direct marketing at any time;
- request restriction of processing, for example while we check the accuracy of data you have challenged;
- request transfer of your personal data to you or another organisation, in a structured, commonly used and machine-readable format; and
- withdraw consent at any time where we rely on it. This does not affect anything we did before you withdrew it.
To exercise any of these rights, please email info@magentaassociates.co or write to Magenta Associates Limited, Sussex Innovation Centre, University of Sussex, Science Park Square, Brighton BN1 9SB.
We will respond within one month of receiving your request. If your request is particularly complex, or you have made several requests, it may take us longer, in which case we will tell you within that month and keep you updated. We may ask you for information to confirm your identity before we respond, as a security measure. We may charge a reasonable fee, or refuse to act, only where a request is clearly unfounded, repetitive or excessive – and if we do, we will explain why and tell you how to complain.
11. Who to contact, and how to complain
We are not required to appoint a statutory Data Protection Officer under Article 37 of the UK GDPR and we have not done so. Our Managing director is our data protection lead and oversees compliance with this policy. If you have any questions about this policy, or about how we handle your personal data, please email info@magentaassociates.co, call +44 (0) 20 3773 3622, or write to us at the address above.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would be grateful for the chance to put things right first, and the ICO will expect you to have raised it with us before it looks at your complaint.
12. Your choices
You can unsubscribe from our updates at any time, either by using the link in any message we send you or by emailing info@magentaassociates.co. You can also tell us at the point we collect your details that you would prefer not to hear from us.
13. Third-party links
The Magenta Associates website may provide links to third-party websites for your convenience and information. If you access those links, you will leave the Magenta Associates website. Magenta Associates does not control those websites or their privacy practices, which may differ from that of Magenta Associates. We do not endorse or make any representations about third-party websites. The Magenta Associates Privacy Statement does not cover the personal data you choose to give to unrelated third parties. We encourage you to review the privacy policy of any company before submitting your personal information.
14. Changes to this policy
We keep this policy under review and may update it at any time. Where we make a substantial change we will say so on this page. It is also important that the information we hold about you is accurate, so please tell us if your contact details change.
This policy reflects the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
This policy was last updated in August 2026.