Privacy and cookies

Who we are

This website, citrus-media.co.uk, is run by Citrus Media Ltd, a company registered in the UK with company number 04366841. Our registered office is [registered office address]. For UK data protection law, we are the controller of the personal information described here.

What information do we collect?

When you send an enquiry or request the Worldspace Remote deck, we collect your name, email address, organisation and anything you choose to tell us about your project.

By default, Google Analytics collects information about how you use the site, such as the pages you visit, how long you stay, the type of device and browser you use, and your approximate location based on your IP address. Google Analytics does not give us your name or contact details.

How do we use it?

We use your enquiry details to reply to you and to discuss your project. Our lawful basis is legitimate interests: responding to people who contact us. If you become a client, we also use your details to deliver the work under our contract with you.

We use analytics information to produce aggregate statistics about how the site is used, so we can understand which pages are useful and improve the site. Our lawful basis for this is the 'statistical purposes' exception to the Privacy and Electronic Communications Regulations (PECR), introduced by the Data (Use and Access) Act 2025: analytics cookies are set by default, used only for our own aggregate statistics, and you can turn them off at any time.

We do not sell your information or use it for marketing lists.

Who do we share it with?

We use a small number of trusted services to run the site and handle enquiries: our web host, our form and email providers, and Google, which provides Google Analytics. Google may process analytics data outside the UK, under safeguards approved for international transfers. [List form and email providers here.]

How long do we keep it?

We keep enquiry details for [retention period, for example two years] after our last contact, unless you become a client, in which case we keep them for as long as needed for the work and our legal obligations. Google Analytics data is kept for [14 months, or the retention period set in your Google Analytics account].

What are your rights?

Under UK GDPR you can ask to see, correct or delete the information we hold about you, object to how we use it, or ask us to restrict its use. You can turn off analytics cookies at any time using Cookie settings at the bottom of every page. To make a request, use our contact form.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).

Which cookies do we use?

Analytics: Google Analytics 4 sets cookies called _ga and _ga_ to distinguish visitors and sessions. They last for up to two years. These are set automatically when you visit, under the UK's 'statistical purposes' exception to the cookie rules (PECR), introduced by the Data (Use and Access) Act 2025 — this lets us use analytics cookies without asking first, provided they're used only for our own aggregate statistics, visitors are told clearly, and they can object in one step.

We use Google Analytics only to see which pages are useful and to improve this website. We don't use it for advertising, and we've switched off Google Signals and ad personalisation, so it isn't linked to any Google advertising profile.

We also use two entries in your browser's local storage, not cookies: cm_analytics_notice_dismissed, so we don't show the analytics notice again once you've seen it, and cm_analytics_optout, which is set if you turn analytics off.

You can turn analytics off at any time using Cookie settings at the bottom of every page. This stops Google Analytics completely and deletes the _ga cookies already set. You can also block or delete cookies in your browser settings.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.