Privacy Policy

We ask that you read this privacy notice carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and on how to contact us and supervisory authorities in the event you have a complaint.

Who We Are

Forbidden Marketing Limited (“Forbidden”, “we”, “us” or “our”) collects, uses and is responsible for certain personal information about you. 

We are registered with the Information Commissioner’s Office (“ICO”) under registration number ZB848976. 

When we do so, we are regulated under applicable data protection law in the United Kingdom, including the UK General Data Protection Regulation and the Data Protection Act 2018. For the purposes of those laws, we are the controller of your personal information unless we are processing personal data solely on behalf of a client, in which case that processing will be governed by our agreement with that client. 

The Personal Information We Collect and Use

Information Collected By Us

In the course of our business, we may collect and use personal information that you provide to us, including: 

- your name; 

- company name; 

- job title or role; 

- contact details, including postal address, email address and telephone number; 

- communication history; 

- enquiry details; 

- meeting notes; 

- call notes; 

- call recordings and transcripts, where applicable; 

- project-related information; and 

- any other information you choose to provide to us. 

We may collect this information when you: 

- visit or interact with our website; 

- register on our website; 

- contact us directly by email, telephone, live chat, contact form or any other medium; 

- enquire about our services; 

- engage us in relation to a project, partnership or service enquiry; 

- attend a meeting, discovery call, consultation or review session with us; or 

- otherwise communicate with us in the course of our business activities. 

We will only collect personal information that is reasonably necessary for the relevant purpose. 

Information Collected From Other Sources

We may also obtain personal information from other sources, including: 

- information you have made available publicly, such as on company websites or professional networking platforms; 

- information provided to us by our suppliers, partners or referrers where you have authorised them to share it with us; 

- information from CRM, marketing, lead generation, enrichment or prospecting tools; 

- information from website analytics, cookies and related technologies; and 

- information provided by clients or colleagues in connection with projects, introductions or service delivery. 

How We Use Your Personal Information

We may use your personal information to: 

- provide you with products or services you have requested; 

- respond to your enquiries; 

- manage and administer our relationship with you; 

- provide you with information about Forbidden, our services, events or content that we believe may be relevant to you; 

- notify you about changes to our services; 

- manage projects, service delivery and internal administration; 

- maintain records of meetings, calls, communications and actions; 

- analyse enquiries, opportunities and business relationships; 

- support sales, marketing and prospecting activities; 

- improve our services, internal processes and operational efficiency; 

- protect our business, systems and users; and comply with legal and regulatory obligations. 

Use of CRM, Transcripts and AI Tools

We use business systems, including CRM, communications, transcription and business-grade AI tools, to support the delivery of our services and our internal business operations. 

This may include the use of platforms such as HubSpot and ChatGPT Business for purposes such as: 

contact and relationship management; 

sales and prospecting activity; 

follow-up and task management; 

note-taking and summarising meetings; 

processing call or meeting transcripts; 

analysing business communications; 

preparing internal drafts, summaries and recommendations; and 

improving operational efficiency and service delivery. 

The information used in these systems will generally be limited to what is reasonably necessary for those purposes. This may include name, company name, email address, telephone number, job title, communication history, notes, meeting records, transcripts, action points and related business content. 

Where we use ChatGPT Business, we do so as a business service for internal purposes. By default, OpenAI does not use ChatGPT Business customer content to train its models. 

We do not use such tools casually or without controls. We take steps to limit access, minimise unnecessary personal data, and use appropriate contractual, technical and organisational safeguards. 

Call Recordings and Transcripts

Some calls, video meetings or other communications may be recorded, transcribed and summarised for purposes such as record-keeping, training, quality assurance, internal analysis, service delivery, follow-up, and business development. 

Where recording or transcription is used, we will seek to make this clear at the time. If you do not want a call or meeting to be recorded or transcribed, please let us know and we can arrange, where appropriate, for the call or meeting to continue without recording. 

Not all calls are recorded, and recording will depend on the platform, settings and circumstances of the communication. 

Who We Share Your Personal Information With

We may share personal information with trusted third-party service providers who support the delivery of our services and our internal business operations. This may include providers of: 

- website hosting; 
- CRM systems;
- communications platforms;
- analytics services; 
- project management systems; 
- transcription services; 
- business-grade AI tools; 
- professional advisers; and 
- other software or technology services used in connection with our business. 

We require such providers to process personal information only on our instructions where applicable, to keep it secure, and to comply with applicable data protection law. 

We may also disclose personal information: 

- where required by law, regulation or legal process; 
- to law enforcement or regulatory authorities where necessary; 
- to establish, exercise or defend legal claims; or in connection with the sale, restructuring or reorganisation of our business.

Whether Information Has To Be Provided By You, And If So Why

The provision of some personal information, such as your name and contact details, may be necessary to enable us to provide services to you, respond to enquiries, enter into a contract with you, or provide information you have requested. 

Where we ask for personal information, we will tell you if it is required and the possible consequences of not providing it.

How Long Your Personal Information Will Be Kept

We will not keep your personal information for longer than is necessary for the purpose for which it was collected, taking into account legal, regulatory, tax, accounting and operational requirements. 

As a general guide: 

- we will hold personal information about customers for up to 6 years from when we last supplied goods or services, unless a longer retention period is required or justified; 

- we will hold contact details and related records about prospective customers, business contacts or referrers only for so long as reasonably necessary for our business relationship, follow-up, marketing or prospecting purposes; 

- we may retain records of communications, meetings, notes and transcripts for a reasonable period where relevant to service delivery, relationship management, legal obligations or legitimate business interests; and 

- we may delete information sooner where it is no longer needed, becomes out of date, or where you validly exercise your rights.

Reasons We Can Collect and Use Your Personal Information

We must have a lawful basis for using your personal information. Depending on the circumstances, we may rely on one or more of the following: 

Contract

Where we provide goods or services to you, or take steps at your request before entering into a contract, we rely on the fact that processing is necessary for the performance of a contract with you or in order to take steps at your request before entering into a contract. 

Legitimate Interests

Where we use personal information for internal administration, relationship management, CRM management, service improvement, sales, marketing, prospecting, meeting records, call summaries, transcripts and related business operations, we generally rely on our legitimate interests, provided those interests are not overridden by your rights and freedoms. 

Our legitimate interests include: 

running and improving our business; 

responding to enquiries; 

maintaining accurate records; 

managing customer and prospect relationships; 

supporting service delivery; 

carrying out proportionate sales and marketing activity; 

developing business opportunities; and 

operating our systems efficiently and securely. 

Legal Obligation 

In some cases, we may need to process personal information in order to comply with a legal or regulatory obligation. 

Consent 

Where consent is required by law, we will rely on your consent. Where we rely on consent, you may withdraw it at any time, although this will not affect the lawfulness of any processing carried out before you withdrew it. 

Consequences of Our Use of Your Personal Information

 Where consent is required by law, we will rely on your consent. Where we rely on consent, you may withdraw it at any time, although this will not affect the lawfulness of any processing carried out before you withdrew it. 

Keeping Your Personal Information Secure

We have appropriate security measures in place to help prevent personal information from being accidentally lost, used, altered, disclosed or accessed in an unauthorised way.

We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to confidentiality obligations.

We also have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

International Transfers

 Some of our third-party service providers may process personal information outside the United Kingdom. Where this happens, we will take appropriate steps to ensure that your personal information is protected and transferred in accordance with applicable data protection law.  

Your Rights

Under data protection law, you may have rights including the right to:

- request access to your personal information;

- request correction of inaccurate personal information;

- request erasure of your personal information;

- object to processing in certain circumstances;

- request restriction of processing;

- request transfer of your personal information to you or another organisation in certain circumstances; and

- withdraw consent where processing is based on consent.

These rights are subject to legal limits and exemptions.

If you would like to exercise any of your rights, please contact us using the details below.

How To Complain

We hope that our Data Protection Officer can resolve any query or concern you raise about our use of your information.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

How To Complain

We hope that our Data Protection Officer can resolve any query or concern you raise about our use of your information.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

Use of Cookies

A cookie is a small text file which is placed onto your computer or other device when you use our website.

We may use cookies and similar technologies to collect information about how you use our website, including traffic data, location data, pages visited, referral sources and related analytics information. Some of this information may be aggregated and may not identify you directly.

You can set your browser not to accept cookies, although some website features may not function properly if you do so.

You should also refer to our cookie notice or cookie banner for more detailed information about the cookies we use and your choices.

Changes To This Privacy Notice

This privacy notice was published on 13/02/2026 and last updated on 07/04/2026.

We may change this privacy notice from time to time. When we do, we will update the version on our website.

How To Contact Us

If you have any questions about this privacy notice or the information we hold about you, please contact:

Data Protection Officer
Forbidden Marketing Limited
The Leeming Building
George Street
Leeds
LS2 7HZ