Privacy.

This site.

If you say yes to the cookie notice, this site loads Meta's pixel. It tells Meta when someone visits the site or sends the enquiry form, so mission:media's ads can be shown to people more likely to want them, and so it is possible to tell whether an ad worked. Meta sets its own cookies to do that and is responsible for its own use of them, under Meta's privacy policy.

Say no and nothing from Meta loads. You can change your answer at any time with the Cookies link at the bottom of every page.

The enquiry form.

The form asks a few questions about your business, then your name, your business's name, a phone number and an email address. They go to mission:media's Notion and are used to call you back, to talk through what would suit you, and to quote if you want one. They are not sold and not used for a mailing list.

When one arrives, a short alert with your business's name and your answers, but not your phone number or email, goes to Olly's phone through a notification service.

If nothing comes of it, your details are deleted within twelve months, or sooner if you ask.

The client calendar.

Clients are sent a private link to their own month. The link is the key, so anyone holding it can see that month. There is no password and nothing else is reachable from it.

That page holds the posts planned for a client, the video and images for each one, and whatever they write when they ask for a change. It is kept in Notion for as long as the client is working with mission:media, and removed within thirty days of them asking or of the work ending.

Connected Instagram and TikTok accounts.

A client can connect their Instagram or TikTok account so that a post they have already approved goes out at the time it is meant to, and so the results come back to the same page.

Connecting stores an access token for that account, encrypted, on the server that runs the calendar. The token is used for two things and nothing else: publishing a post the client has approved, and reading the numbers for posts that have already gone out.

The numbers kept are views, reach, likes, comments, saves and shares for each post, along with the post's id on that platform. No follower list, no messages, no contact details and no audience data are read or stored.

Nothing from a connected account is sold, shared with anyone else, used to advertise to anyone, or used to train anything.

Disconnecting and deleting.

An account can be disconnected at any time from Instagram or TikTok directly, under the settings for apps and websites. Doing that stops mission:media reaching the account immediately.

To have what is held deleted as well, email olly@missionmedia.uk from the address linked to the account, or ask through the client calendar link. The stored token is destroyed and the post ids and numbers are removed within thirty days, and confirmation is sent when it is done.

Deleting this data does not remove posts already published. Those are on the client's own account and only they can take them down.

Where it is held.

Planning and post data, and enquiries from the website form, are held in Notion. The form is received by, and access tokens are held on, a server run by Fly.io in London. Video and images are held in object storage provided by Cloudflare. Email is Google.

Those suppliers process data on mission:media's instruction. Nobody else is given access.

Your rights.

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Email olly@missionmedia.uk and it will be dealt with inside thirty days.

If you are not happy with how that is handled you can complain to the Information Commissioner's Office at ico.org.uk.