Last updated: 17 August 2026
This policy explains how Commotion Labs collects, uses and protects your personal information when you visit commotionlabs.agency or get in touch with us. We are committed to handling your data in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Commotion Labs is a trading division of Commotion Agency Ltd, the data controller responsible for your information.
Company: Commotion Agency Ltd (12817625)
Registered address: Commotion Agency Ltd, 3rd Floor, Old Stock Exchange, St Nicholas St, Bristol, BS1 1TG, United Kingdom
Contact for data matters: hello@commotion.agency
If you have any question about this policy or how we use your data, email us at the address above.
The information we collect
We only collect what we need to respond to you and run our business.
- Information you give us. When you complete a contact form, book a call, or email us, we collect your name, email address, company, and anything you choose to tell us in your message.
- Information we collect automatically. When you visit the site we collect limited technical and usage data, such as pages viewed, approximate location, browser type, and how you arrived at the site. This helps us understand what is useful and improve the site.
- Business contact information. As a B2B first agency we may hold business contact details for people at companies we believe could benefit from our services, gathered from public sources such as company websites, LinkedIn, and public funding records.
We do not knowingly collect special category data (such as health, ethnicity or political opinion), and we do not collect data from children.
How we use your information, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to enquiries and booked calls | To answer you and discuss working together | Legitimate interests, or steps taken at your request before entering a contract |
| Deliver services to clients | To carry out work we have agreed | Performance of a contract |
| Send occasional relevant updates | To share things we think are useful, where permitted | Consent, or legitimate interests for existing business contacts |
| Store contacts in our CRM | To keep an organised record of conversations and opportunities | Legitimate interests |
| Measure and improve the website | To understand what works and fix what does not | Consent (for non-essential cookies), otherwise legitimate interests |
Where we rely on legitimate interests, we have considered your rights and only proceed where our use is fair and expected. You can object to this at any time (see Your rights).
Who we share it with
We do not sell your data. We share it only with the service providers who help us operate, each acting under contract on our instructions:
- Twenty CRM — our customer relationship system, where we store contacts and conversation history
- Hostinger — website hosting
- Google Analytics — website usage measurement
- Plausible Analytics — privacy-friendly, cookieless website measurement
- Cal.com — call booking
- Bunny.net — video hosting
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement, so your data receives equivalent protection.
We may also disclose information if required by law, or to protect our legal rights.
How long we keep it
We keep your information only as long as we need it:
- Enquiries that do not become clients: up to 24 months, then deleted
- Client records: for the duration of our work together and for up to 6 years afterwards, to meet legal and accounting obligations
- Website analytics: retained in aggregate only
Cookies
Our site uses a small number of cookies. Essential cookies make the site work and cannot be switched off. Non-essential cookies, such as Google Analytics, are only set with your consent through our cookie banner. Plausible, which we also use, does not set cookies or track you across sites. You can change your choice at any time through the cookie settings link in the site footer, or by clearing cookies in your browser.
Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal data we hold about you
- Ask us to correct anything that is inaccurate
- Ask us to delete your data, where there is no reason for us to keep it
- Ask us to restrict or stop processing your data
- Object to processing based on legitimate interests
- Ask us to transfer your data to another provider
- Withdraw consent at any time, where we relied on it
To exercise any of these, email hello@commotion.agency. We will respond within one month. You will not usually be charged.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to put things right first.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be highlighted on this page.