MagnifyLab Privacy Policy

MagnifyLab respects your privacy and is committed to protecting your privacy and improving your overall online experience. Our privacy policy below sets out how we collect and use personal data as both a ‘Data Controller’ and ‘Data Processor’.

Information about us

We are Magnify Lab Ltd, a registered company in England under company number 09933083. We use personal data for our own purposes such as learning about visitors who access our website (https://www.magnifylab.com/).

MagnifyLab provides digital media services to our clients. Whilst we provide a selection of digital services, one of our key services to clients is the placement of digital adverts on advertising space made available by publishers. When providing these services, our primary objective is to help our clients by providing them with digital adverts that enable them to target their customers with products and/or services. As part of the delivery of this service, we process some personal data on behalf of our clients.

When you visit our website, ask us to provide you with services or contact us, MagnifyLab is the data controller for your personal data.

When we are involved in the execution of digital adverts to you on behalf of a client, our client is the data controller and we act as our client’s data processor.

If a digital advert has been served to you on behalf of one of our clients, you should contact the client directly to gain further information as to how they process your personal data.

How does advertising work and what is MagnifyLab’s role?

In general, advertisers have the ability to target consumers on publisher websites based on a number of variables including your interests, browsing activity, device, age, and location. This all occurs during the ad serving process, which involves a sophisticated system that delivers digital advertising in milliseconds.

In order to provide you with personalised adverts, the parties involved in the ad serving process require information to be collected and processed. This information is typically collected through cookies and pixels (Google Tag Manager and Meta Pixel), which are implemented on the website you visit.

Whilst providing our services to our clients, we do not influence or determine how your personal data is processed. We only process your data on the instructions of our clients. Our clients will often have a legitimate interest in serving you targeted adverts or may have obtained your consent to certain data uses.

For the purposes of current data protection law, when we process your data on the instruction of our clients we solely act as a data processor. Our clients will always act as the data controller and may give us instructions to target you with advertising to enable the delivery of targeted digital advertisements.

What is personal data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

In simpler terms, personal data is any information about you that enables you to be identified. Personal data covers obvious information such as your name, email and number, but also other parameters such as IP address.

What are my rights?

Under GDPR law, you have the following rights about the personal data that we process about you as a data controller, which we will always work to uphold:

– The right to be informed about our collection and use of your personal data. This privacy policy should tell you everything you need to know, but you can always contact MagnifyLab to find out more information.
– The right to access the personal data we hold about you.
– The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
– The right to be forgotten.
– The right to prevent the processing of your personal data.
– The right to object to us using your personal data.

Information collected on our website

We capture personal data that you provide us through our online enquiry form. Information from this form is sent directly to MagnifyLab. Information is never shared with or sold to any other company and is only used by MagnifyLab to enable us to offer you our services.

As a data controller, the details we collect and hold about you are likely to include the following:

– Forename and surname
– Email address
– Telephone number
– Business name
– Business address
– Job title
– Service of interest

Under the Data Protection Act 1998, you may request information on the personal data we hold about you. Please contact us if you would like a copy of the information held on you.

How do I contact you?

Please feel free to contact our team should you have any questions about the information we collect and hold. We can be reached by:

Phone – 0207 205 2755
Email – [email protected]
Post – Stockley Park, 4 Longwalk Rd, Hayes, Uxbridge UB11

Information collected for our clients

As a data processor, MagnifyLab collects and processes data upon instruction from our clients (data controller). The information we collect and hold on behalf of our clients are the following:

– Forename and surname
– Telephone number
– Email address
– Service of interest

The data collected above is held within secure content management systems (CMS) that will typically be WordPress, Umbraco, Shopify or Magento. Once the information reaches the CMS platform, the client may request for your personal data to be directly forwarded to their preferred email address.

As part of our responsibilities to the Data Controller, MagnifyLab agrees to:

– Use and process the data received to perform the obligations to our client.
– Only disclose the data to MagnifyLab employees who have a need to access the information as part of their responsibilities to the client.
– Take all appropriate steps to maintain and protect the data against unauthorised access and accidental loss. This includes, but is not limited to, hosting domains on secure servers, updating core website features to avoid viruses and malware, taking monthly backups and encrypting all domains.
– Comply with obligations set out within existing Data Protection Law, and take any steps to ensure the client (Data Controller) remains fully compliant with their obligations under Data Protection Law.

How do you use my personal data?

Under the GDPR, we must always have a lawful basis for collecting and processing your personal data. As a data controller, we only use the personal data you provide us for the purpose of contacting you to understand how we can help your business through our digital advertising services. As a data processor for our clients, we do not use your personal data for our benefit or sell your data to any third party.

Retention Period

We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

The applicable retention periods will always be linked to our purposes for processing your personal information. This means that the retention periods will vary according to the type of personal information.

How do you keep my personal data safe?

We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical and electronic procedures to safeguard the personal data you provide us online.

Compliance failure

Should MagnifyLab discover a failure with compliance or suspected breach, then it will:

– conduct an immediate investigation of the breach;
– take stock of all the details of the incident;
– supply the client with an initial assessment of the breach within 24 hours;
– provide the necessary support to the client to establish all events that led to the data breach.