This policy explains how LARA handles personal information connected with this corporate website and direct communications about our agency, media and technology services.
1. Controller and contact details
LARA MEDIA GROUP LTD, trading as LARA Media Group (LARA, we, us or our), is the controller of personal information handled through laramediagroup.com.
Privacy enquiries, rights requests and data-protection complaints can be sent to [email protected] or by post to LARA Media Group, 167–169 Great Portland Street, London W1W 5PF, United Kingdom.
2. Scope and separate notices
This policy covers LARA’s corporate Website and communications sent directly to LARA about our services.
Our owned publications, platforms and other digital products may collect different information for different purposes and should provide their own privacy notices. This policy also does not replace data-processing terms agreed with a client for a particular project.
At the date of this policy, the corporate Website has no user account, checkout or online enquiry form and does not intentionally load analytics or advertising scripts. Clicking an email link opens your own email service; we receive the information you choose to send.
3. Information we collect and where it comes from
Depending on how you interact with us, we may process:
- your name, employer, role and professional contact details;
- the contents of enquiries, proposals, correspondence and meeting notes;
- information needed to manage a client, supplier, publisher or professional relationship;
- marketing preferences and records of objections or opt-outs;
- limited technical and security information generated when the Website is requested, such as an IP address, browser or device type, requested page, time and diagnostic information;
- professional information provided by a colleague, referral partner, professional-networking service or public business source; and
- information required to comply with legal obligations or establish, exercise or defend legal claims.
Where information comes from someone other than you, we provide the relevant privacy information within the period required by law unless an exception applies.
It is generally optional to contact us. We may be unable to answer an enquiry or prepare a proposal if you do not provide the information reasonably needed to understand and respond to it.
4. Purposes and lawful bases
- Operating, delivering and securing the Website: our legitimate interests in providing a reliable and secure corporate website.
- Responding to enquiries and discussing potential work: steps requested before entering a contract and, where that basis does not apply, our legitimate interests in communicating with prospective clients and partners.
- Preparing proposals and managing client, supplier and partner relationships: performance of a contract, steps before a contract, our legitimate interests in running the business and applicable legal obligations.
- Maintaining business and financial records: contractual necessity, legitimate interests and legal obligations.
- Protecting our rights and handling misuse, disputes or complaints: legitimate interests and, where relevant, legal obligations.
- Sending relevant business communications: legitimate interests where permitted and consent where the law requires it.
Our legitimate interests include operating and protecting the business, responding to people who contact us, developing appropriate professional relationships and keeping accurate records. We consider whether those interests are proportionate and whether your rights override them.
We do not sell personal information. We do not use information collected through this corporate Website to make decisions based solely on automated processing that produce legal or similarly significant effects.
5. Sensitive information
Please do not send special-category or other sensitive personal information unless it is genuinely necessary and we have agreed an appropriate way to receive it. If a project requires this information, we identify a valid lawful basis and any additional legal condition, minimise what is collected and apply suitable access controls.
6. Sharing and service providers
We may share information only where reasonably necessary with:
- authorised staff and contractors working with LARA in the United Kingdom, Portugal, Japan and the United States;
- hosting, email, communications, storage, security and other IT providers;
- accountants, lawyers, insurers and other professional advisers;
- clients, suppliers or production partners where needed for an enquiry or agreed project;
- regulators, courts, law-enforcement bodies or public authorities where required or permitted by law; and
- a prospective purchaser, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality protections.
Service providers acting for us may use the information only for the agreed service and must protect it appropriately.
7. International transfers
LARA works internationally, and authorised personnel or service providers may access personal information from countries other than the one in which it was collected.
Where a transfer is restricted by UK or EU data-protection law, we use a legally recognised mechanism, such as an applicable adequacy decision or approved contractual safeguards. Where required, we assess the protection available in the destination country and apply additional measures. You may contact us for information about the mechanism relevant to your information.
8. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.
- Enquiry and prospective-client information is kept while a potential relationship is active and for a proportionate follow-up period, taking account of the nature of the request and the likelihood of further contact.
- Client, supplier and project records are kept for the relationship and the period needed to meet accounting, contractual and legal requirements or resolve a dispute.
- Security logs are kept for the shortest period reasonably required for security, diagnostics and abuse prevention.
- A minimal suppression record may be kept for as long as needed to honour a marketing objection.
Information is deleted or anonymised when it is no longer required. You may contact us for the retention criteria relevant to a specific record.
9. Business marketing
We send business-to-business marketing only where applicable data-protection and electronic-communications rules permit it. Rules can differ for corporate contacts, sole traders and individual subscribers. Where consent is required, we ask for it before sending the message.
Every direct-marketing message provides a clear way to opt out. You have an absolute right to object to direct marketing at any time. We may keep the minimum information needed to make sure your objection continues to be honoured.
10. Cookies and similar storage or access technologies
At the date of this policy, the corporate Website does not intentionally use analytics, behavioural-advertising or social-media tracking technologies.
The hosting environment may use technologies that are necessary for security, content delivery, load balancing or remembering a privacy choice. If we introduce analytics, advertising or another non-essential storage or access technology, we will update this policy and provide a consent control before it is used where the law requires one.
11. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or disclosure. Access is limited to people and providers who need it for an authorised purpose. No electronic transmission or storage system can be guaranteed completely secure.
12. Your rights
Depending on the law and circumstances, you may have the right to:
- request access to your personal information;
- correct inaccurate or incomplete information;
- request erasure or restriction of processing;
- object to processing, including an absolute right to object to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time where processing relies on consent; and
- complain about how we use your information.
These rights are not absolute, and an exemption may apply. We may request proportionate information to confirm your identity or authority before acting on a request.
Email [email protected] to exercise a right.
13. Data-protection complaints
Send a complaint to [email protected] with the subject “Data Protection Complaint”. Please include enough information for us to understand the concern and identify the relevant records.
We will acknowledge a complaint within 30 days, take appropriate steps to investigate it, make any necessary enquiries and respond with the outcome without undue delay. If the investigation is still in progress, we will provide an appropriate update.
You may also complain to the UK Information Commissioner’s Office. If EU data-protection law applies, you may complain to the supervisory authority where you live, work or believe an infringement occurred. In Portugal, this is the Comissão Nacional de Proteção de Dados.
14. Children
The corporate Website is intended for business and professional audiences and is not directed at children. We do not knowingly seek personal information from children through this Website.
15. Changes and contact
We may update this policy when our practices, suppliers, services or legal obligations change. We will publish the revised version here and change the date shown at the top of the page.
For privacy questions, rights requests or complaints, email [email protected] or write to the London postal address in section 1.