Privacy policy

Working draft, prepared for review. It has not yet been checked by a person and is not presented as legal advice. Bracketed items are completed before launch.

Who we are

Mossy Marketing makes short vertical videos for UK brands to run as ads on their own accounts. For data protection purposes the controller is Mossy Marketing, a trading name of Moez Anwar, sole trader (address for service to be confirmed).

For anything about your data, email contact@mossymarketing.agency. That address is read by the people who run the business, not a support queue.

The short version

• We collect what you type into the contact form, and ordinary email if you write to us.
• We hold basic business contact details for a small number of UK brands we may email. The section on prospect data below explains where those come from and how to be removed at once.
• This site sets no cookies and runs no analytics or tracking of any kind.
• We never sell personal data, and we share it only with the named providers that run our form and email.

The contact form

The form asks for your name, work email, brand name, brand website, what you sell, a rough timeline, and anything else you want to add. We use it to reply about your project and for nothing else. It is not added to a marketing list.

Lawful basis: legitimate interests, responding to a business enquiry you chose to send. If we ever ask for anything optional beyond that, it runs on consent and is never pre-ticked.

How long: if you do not become a client, your enquiry is deleted no later than 12 months after our last exchange. If you do, records we must keep for tax or legal reasons are kept for as long as the law requires, normally six years, and no longer.

Prospect data: if we emailed you first

If you have had a cold email from us, this section exists for you, and the email you received links straight to it. UK GDPR Article 14 says we must tell you what we hold and where it came from. Here is that, in plain English:

• What we hold: your name, role, business email address and company name, and sometimes the company website and Companies House number.
• Where it came from: public sources: your company’s own website, public business profiles, and the Companies House register. We do not buy marketing lists.
• Why: legitimate interests. We write, individually, to a small number of UK brands whose products fit the work we make. It is business-to-business contact about your role, not consumer marketing.
• How long: if you never reply, your details are deleted within 12 months of our first email.
• How to be removed: reply with the word remove, or email contact@mossymarketing.agency. We delete your details and add your address to a suppression list so they stay deleted. This happens promptly and without argument: the right to object to direct marketing is absolute.

The website itself

Cookies and storage: the site sets no cookies. If you pick light or dark with the theme control, that choice is kept in your browser’s local storage under one key (mm-theme); picking auto, the default, clears it. It never leaves your device, identifies nobody, and can be cleared in your browser settings.

Analytics: none. No Google Analytics, no pixels, no fingerprinting.

Server logs: the site is served by Vercel, which processes standard technical logs (IP address, time, page requested) to run and secure the service, on legitimate interests, kept briefly and automatically.

Who we share data with

Only these processors, each acting on our instructions:

• form service to be confirmed before launch, which delivers contact form submissions to our inbox. We require a UK or EU data region.
• email provider to be confirmed before launch, which handles mail to and from contact@mossymarketing.agency.
• Vercel, which serves the site and its technical logs.

No data is sold, rented or swapped, to anyone, ever.

International transfers

The site is served by Vercel from a global edge network, so technical server logs may be processed outside the UK and EEA under Vercel’s standard data protection terms, which incorporate the recognised transfer safeguards. For the form and email providers we are still choosing, we require a UK or EU data region, and this policy will name them before they are switched on.

Your rights

Under UK GDPR you can, at any time:

• ask for a copy of what we hold about you (access)
• have mistakes corrected (rectification)
• have your data deleted (erasure)
• limit what we do with it (restriction)
• take it away in a usable format (portability)
• object to processing based on legitimate interests (objection)
• object to direct marketing, which is absolute: we stop, full stop, no balancing test

We make no automated decisions about anyone. To use any right, email contact@mossymarketing.agency. We respond within one month.

Complaints

We would appreciate the chance to fix things first, but you can complain directly to the regulator at any time: the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: ico.org.uk.

Changes

If this policy changes, the date below changes with it, and material changes will be flagged plainly at the top of the page.

Last updated: 1 September 2026.