PRIVACY POLICY
Last updated: 15th July 2026
Who we are
School Marketing Works is a trading name of Illicit Media Ltd, a company registered in England & Wales (company number 07677395), registered office 15 Sheldon Road, London NW2 3AJ. For the purposes of UK data protection law, Illicit Media Ltd is the data controller responsible for your personal data.
You can contact us about privacy at [email protected] or on 020 8830 7831.
We are registered with the UK Information Commissioner's Office (ICO), registration number ZB491903.
The personal data we collect
When you contact us — if you email or call us, we collect the details you give us: typically your name, role, school, email address, phone number and the content of your enquiry.
When you browse this website — our hosting provider records technical data needed to serve and secure the site (such as IP address, browser type and pages requested). If you accept analytics or advertising cookies, we also collect usage data as described in the Cookies section below.
When you work with us — if your school becomes a client, we collect the business contact details needed to deliver the work and manage our relationship, and we act under a separate agreement covering any data we process on your school's behalf.
We do not knowingly collect personal data from children through this website.
How we use your data, and our lawful bases
To respond to your enquiry and discuss our services — legitimate interests (responding to a business enquiry you have made).
To deliver services under a contract with your school — performance of a contract.
To keep records we are legally required to keep (accounting, tax) — legal obligation.
To improve our website and market our services (analytics, advertising cookies) — your consent, given via the cookie banner, which you can withdraw at any time.
To send occasional marketing about our services to business contacts — legitimate interests; every message includes an easy way to opt out, and we stop immediately if you ask.
We do not sell your personal data.
Cookies and online advertising
Essential cookies keep the website working and secure. These don't require consent.
[DELETE THIS BLOCK IF LAUNCHING WITHOUT ANALYTICS/PIXELS] With your consent, we also use:
Google Analytics 4 — to understand how visitors use the site (pages visited, how you found us). Data is aggregated; we do not use it to identify you.
Meta Pixel (Facebook/Instagram) and Google advertising tags — these let us show our advertising to people who have visited this website (often called retargeting) and measure whether our advertising works. This means that if you visit our site, you may later see our ads on Facebook, Instagram or Google services. Meta and Google act as separate data controllers for some of this processing — see the Meta Privacy Policy and Google Privacy Policy for details.
You choose whether to allow these cookies via the banner when you first visit, and you can change your mind at any time via [Cookie Settings] in the footer. Refusing them does not affect your use of the site. [END OF BLOCK]
Who we share data with
Trusted suppliers who help us run the business, under contracts that protect your data: website hosting, email services, accounting software, and — if you consent to the relevant cookies — Google and Meta as described above. We share data with authorities where the law requires it. Some suppliers may process data outside the UK; where they do, we rely on UK-approved safeguards such as the UK Extension to the EU–US Data Privacy Framework or the ICO's International Data Transfer Agreement.
How long we keep your data
Enquiries: up to 2 years after our last contact, so we can pick up the conversation if you come back. Client records: for the duration of our work together plus up to 7 years, in line with legal and accounting requirements. Analytics data: per the retention settings of the tools, typically 14 months.
Your rights
Under UK data protection law you have the right to access your personal data, correct it, have it erased, restrict or object to our processing of it (including direct marketing, where we will always stop), and to data portability. Where we rely on consent, you can withdraw it at any time.
To exercise any right, email [email protected]. We'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we'd welcome the chance to put it right first.
Changes to this policy
We'll post any changes on this page and update the date at the top.