1. Introduction
Do Good PR recognises the importance of good data governance and is committed to protecting your privacy. We comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

This privacy policy sets out how Do Good PR uses and protects any information that you provide when you use this website. We do not routinely collect information on users. However, should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

Since our primary activity is public relations and communications, this policy also focuses on how we obtain, use and store journalists’ and bloggers’ professional contact details.

We collect personal data primarily when you communicate with us, for example by email, telephone or through our contact forms, and when we work with you as a client, supplier or media contact.

We may also receive personal data about you from your organisation, from commercial media databases and from publicly available sources, such as professional websites and social media profiles.

In some cases, we process children’s personal data in connection with client work or case studies, as explained further below.

‍2. Who we are
Do Good PR is the data controller responsible for the personal data processed in accordance with this privacy policy.

If you have any questions about this privacy policy or how we process personal data, or if you wish to exercise your rights, please contact heather@dogoodpr.co.uk

3. Website use
3.1 What we collect
When you interact with us, including by email, telephone, social media or via this website, we may collect and process the following categories of personal data:
‍
- Identity data, including your name and job title.
- Contact data, including email address, telephone number and postal address where provided.
- Technical data, such as IP address, browser type, device information and website usage information when you use our website.
- Marketing and communications data, including your preferences regarding communications from us.
- Any information you voluntarily provide through contact forms, enquiries, surveys or other interactions with us.

3.2 What we do with the information we gather:
We may use your information:
‍
- To respond to enquiries and provide our services.
- For internal record keeping and administration.
- To improve our services and website.
- To carry out customer research and understand how our services are used.
- To send marketing communications where permitted by law or where you have provided consent.
- To customise website content and improve user experience.

We will only send marketing communications where permitted under applicable law, and you can opt out at any time.

4. Lawful basis for processing
Under UK GDPR, we process personal data using one or more of the following lawful bases:
‍
- Contract – where processing is necessary to provide our services or to take steps at your request before entering into a contract (for example, providing a quote or delivering PR services under a client agreement).
- Legitimate interests – where processing is necessary for the operation, development and promotion of our business (for example, responding to enquiries, managing client and supplier relationships, maintaining media contact lists, and improving our services), provided your interests and fundamental rights do not override those interests.
- Consent – where you have provided clear permission for us to process your data for a specific purpose (for example, certain types of email marketing or the use of your information in a case study). You can withdraw your consent at any time by contacting us.
- Legal obligation – where processing is necessary to comply with legal or regulatory requirements (for example, financial record-keeping and compliance with data protection laws).

Where we process special category personal data, including health-related information about children in connection with client work or case studies, we rely on explicit consent under Article 9(2)(a) UK GDPR and, where the child is not able to give valid consent, we will obtain consent from a person with parental responsibility where appropriate. In addition, we apply suitable safeguards to protect this information and limit access to it.

5. Security
We are committed to ensuring that your information is secure.

We take proportionate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include secure systems, password protection, access controls, encryption where appropriate and regular reviews of our security practices.

While we take reasonable steps to protect personal data, no method of transmission over the internet can be guaranteed to be completely secure.

6. Cookies
We use Google Analytics, a third-party analytics service provided by Google, to collect information about how visitors use our website. This involves the use of cookies or similar technologies for analytics purposes. This may include information such as how users arrive at our site, which pages are visited, how long users spend on the site and general usage patterns. This information is used to help us improve our website and services.

We only use non-essential cookies (such as analytics cookies) where you have given your consent through our cookie banner or settings. You can withdraw your consent or change your cookie preferences at any time by adjusting the cookie settings on our website.

Google may process this data in accordance with its own privacy policy: https://www.google.com/policies/privacy/

‍We also link to third-party websites and social media platforms, including LinkedIn and Instagram. These websites operate their own privacy and cookie policies.

LinkedIn Cookie Policy: https://www.linkedin.com/legal/cookie-policy

Instagram Privacy Policy: https://privacycenter.instagram.com/policy/

7. Sharing personal data
‍We do not sell your personal information.

We may share personal data with trusted third-party service providers who help us operate our business, including website hosting providers, analytics providers, IT service providers and professional advisers. Where we do so, we ensure suitable contractual and security measures are in place.

Where we use commercial media databases, the providers of those databases may act as independent data controllers and are responsible for their own compliance with data protection laws.

We also share information with clients and partners where this is necessary for the delivery of PR campaigns or case studies, including where those campaigns relate to children, and only where appropriate safeguards are in place.

We may also disclose information where required by law or regulatory obligation.

8. International data transfers
Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we take the necessary steps to ensure suitable safeguards are in place. These may include transfers to countries that the UK government has recognised as providing an adequate level of protection, or the use of approved contractual protections such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. 

9. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting and regulatory obligations.

Retention periods vary depending on the type of information and the purpose for which it was collected.

For example, we typically keep:

- Enquiry correspondence for up to 2 years after our last contact;
- Client and supplier records (including contracts and billing information) for up to 7 years after the end of the relationship, to comply with legal and accounting obligations; and
- Media contact details for as long as they remain relevant for our PR activities and are kept up to date, unless you ask us to delete them or we become aware that they are no longer accurate.

In some cases, we may retain anonymised data for statistical or reporting purposes, in which case it can no longer be associated with an individual.

10. Your rights
Under UK GDPR, you have the right to:
‍
- Access your personal data.
- Request correction of inaccurate personal data.
- Request deletion of your personal data in certain circumstances.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Request portability of your personal data where applicable.
- Withdraw consent where processing is based on consent.

Exercising your rights is free of charge, although we may charge a reasonable fee or refuse requests that are manifestly unfounded, repetitive or excessive. 

Where we rely on consent to process special category data about children, you have the right to withdraw that consent at any time. We will then stop processing the relevant information unless we have another lawful basis to continue.

11. Complaints
If you have any concerns or complaints about how we handle your personal data or our services, you can contact us at: heather@dogoodpr.co.uk

We will aim to acknowledge complaints promptly and respond as soon as reasonably possible.

If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk

12. Links to other websites
Our website may contain links to other websites of interest. Once you leave our website, we do not have control over the privacy practices of other websites and are not responsible for their content, privacy notices or policies.

You should review the privacy policies of any third-party websites you visit.

13. Media contact details
‍13.1 What we collect​
As part of our public relations activities, we use commercial subscription-based media databases and publicly available sources to obtain professional contact details for journalists and other media professionals. This includes freelance and employed journalists and other media professionals, including bloggers.

These details may include:
- Names.
- Job titles.
- Email addresses.
- Telephone numbers.
- Professional social media profiles.

We seek to ensure that the databases we use have adequate data protection safeguards in place and we periodically review their suitability for our use.

13.2 How we use media contact details
We use professional contact information for legitimate public relations activities, including:

- Sharing relevant press releases and story opportunities.
- Responding to media enquiries.
- Building and maintaining professional media relationships.

13.3 Controlling your information
Journalists, bloggers, influencers and media outlets may contact us at any time to:

- Request information about the professional contact details we hold.
- Request corrections or updates.
- Request deletion of their information from our systems.

If you no longer wish to receive PR-related communications from us, you can object at any time and we will remove your details from our media lists (subject to any minimal information we may need to keep to record your request).

For any enquiries relating to media contact data, please contact heather@dogoodpr.co.uk

14. Changes to this policy
We may update this privacy policy from time to time by updating this page.

We encourage you to review this page periodically to ensure you remain informed about how we protect your information.

Last updated June 2026.