Skip to main content

Legal

Privacy Policy

1. Who we are

Campfire is a creative-led influencer marketing agency. When this policy says "Campfire", "we", "us" or "our", it means Campfire Group Ltd, a company registered in England and Wales under company number 11778284. Our registered office is Anchorage 1 Anchorage Quay, Salford, England, M50 3YL.

Campfire is the controller of the personal information described in this policy. That means we decide how and why it's used. If you have a question about this policy or your information, email us at contact@campfire.co.uk.

2. What we collect

We only collect what we need for the reason we're collecting it.

  • When you get in touch: your name, work email, company, job title, and what you tell us in your message.
  • When you sign up to our newsletter: your email address.
  • When you register for one of our events: your name, job title, company, contact details and anything else the registration asks for, such as access or dietary needs.
  • When you apply for a job: your CV, contact details and anything else you send with your application.
  • If you're a business contact or prospective client: your name, job title, company and work contact details. These come from you, your company, publicly available business sources, or business data providers such as Apollo.io.
  • If you're a creator we work with or are considering for a campaign: your contact details, social handles and public content, plus your address, contract and payment details if we work together, which we use to run the campaign and share as needed with the brand involved.
  • When you use our website: information about your device and browser, your IP address and the pages you visit. Cookies collect some of this, and only with your consent where the law requires it (section 10).

3. How we use it

  • To reply to your enquiry and talk to you about working together
  • To send you our newsletter, if you've asked for it
  • To run our events and keep you updated about ones you've registered for
  • To consider your job application
  • To run campaigns for the brands we work with
  • To manage our relationships with clients and business contacts
  • To understand how our website is used, so we can improve it
  • To meet our legal, tax and accounting obligations

We don't sell your personal information, and we don't use it to make decisions about you that are based solely on automated processing.

4. Our lawful bases

UK data protection law says we need a lawful basis for each use of your information.

  • Replying to enquiries and managing business relationships: legitimate interests, which means running and growing our business.
  • Contacting prospective clients: legitimate interests, and consent where the law requires it for electronic marketing.
  • Sending our newsletter: consent, which you can withdraw at any time.
  • Running events: contract, or legitimate interests where you register on behalf of your company.
  • Recruitment: legitimate interests, and steps you ask us to take before an employment contract.
  • Working with creators: contract, and legitimate interests when we're considering creators for a campaign.
  • Website analytics cookies: consent.
  • Keeping financial and legal records: legal obligation.

Where we rely on legitimate interests, we've weighed our interests against yours. You can object at any time (section 9).

5. Who we share it with

We use trusted service providers to run our business. They process personal information on our behalf, only under our instructions, and under contracts that require them to keep it secure. In data protection terms, they are our data processors.

Google. Campfire's data is stored and managed in Google Workspace, provided by Google. That covers our email, documents, files and calendars, so any personal information you send us is held there. Google acts as our data processor under Google's Cloud Data Processing Addendum, which sets out its security and data protection commitments to business customers. You can read how Google handles information more generally in the Google Privacy Policy.

Other providers we use:

  • Webflow, which hosts our website
  • HubSpot, our customer relationship management system, which receives the forms you submit on our website and holds our records of clients, prospects and enquiries
  • HubSpot and Mailchimp, which send our newsletter
  • Google Analytics, which tells us how our website is used, only if you accept analytics cookies
  • TermsFeed, which manages your cookie choices on our website
  • Apollo.io, a business data provider we use to find work contact details for prospective clients
  • CharlieHR, which we use to manage job applications and employee records

We also share information when we need to:

  • With brands we run campaigns for, where you're a creator on that campaign
  • With professional advisers, such as our lawyers, accountants and auditors
  • With investors or a buyer, if all or part of our business is sold or restructured, under confidentiality terms
  • With the police, regulators or courts, where the law requires it

6. Transfers outside the UK

Some of our providers, including Google, may store or process personal information outside the UK, for example in the United States. Where that happens, we make sure the transfer is protected in a way UK law approves. That means either the country has been recognised as giving adequate protection, or the provider has signed standard contractual clauses approved for UK transfers. Contact us if you'd like more detail.

7. How long we keep it

We keep personal information for as long as we have a business or legal reason to. For enquiries, business contacts and event registrations, that means we keep records while they're useful for managing our relationships with clients and the wider industry, and we review them regularly, deleting those we no longer need. Reviewed every year.

  • Enquiries, business contacts and event registrations: while useful for our business relationships, reviewed regularly.
  • Newsletter subscribers: until you unsubscribe.
  • Job applications: 6 months after the role is filled, unless you agree to us keeping it longer.
  • Creator contracts and payment records: 6 years after the end of the financial year they relate to.
  • Website analytics data: as set in Google Analytics.

8. Keeping it secure

We limit access to personal information to the people at Campfire who need it for their work. We hold it in systems that protect it with access controls and encryption, and we choose service providers who meet recognised security standards. [Confirm with IT] No system is completely secure, so if a breach puts your information at risk, we'll tell you and the regulator where the law requires us to.

9. Your rights

Under UK data protection law, you have the right to:

  • Access the personal information we hold about you
  • Correct anything that's wrong or incomplete
  • Delete your information, where we no longer have a good reason to keep it
  • Restrict how we use it while a concern is looked into
  • Object to us using it, including at any time for direct marketing
  • Move information you gave us to another organisation, where it's held on the basis of consent or contract
  • Withdraw consent at any time, where we rely on it. This doesn't affect anything we did before you withdrew it.

To use any of these rights, email contact@campfire.co.uk. We'll reply within one month. We may need to confirm who you are first. You can unsubscribe from our newsletter at any time using the link in every email.

10. Cookies

Cookies are small files saved on your device when you visit a website. When you first visit our site, a banner asks which cookies you're happy for us to use. Only strictly necessary cookies are set before you choose. Everything else stays off unless you accept it.

  • Strictly necessary: needed for the site to work and to remember your cookie choices. These are always on.
  • Analytics: Google Analytics and HubSpot, which show us how people use our site, such as which pages they visit and how they found us. HubSpot also helps us recognise returning visitors who have been in touch with us.
  • Advertising: the LinkedIn Insight Tag, which helps us measure our LinkedIn adverts and show them to relevant audiences. LinkedIn may link this to your LinkedIn account.

You can change your choice at any time using the "Update cookies preferences" link at the bottom of every page. Our cookie banner is provided by TermsFeed.

11. Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

12. Changes to this policy

We'll update this policy when the way we use personal information changes. The date below shows when it last changed.

Last updated: 16th October 2026.

‍