Privacy policy
1. Who we are
Noetic is a trading name of Noetic by Casey Wishart Ltd, a brand-journalism studio. We are the data controller for the personal data described in this policy.
- Company number
- 16729738
- Registered office
- 69 Clapham Common West Side, London SW4 9AU
- office@noetic.ltd
- ICO registration
- ZC071825
This policy covers people who visit our website, contact us, attend our events or work with us as clients and business contacts. If you work for us as an employee, freelancer or contractor, you are given our separate privacy notice when you join, which sets out how we handle your data in more detail.
2. What data we collect
What we collect depends on your relationship with us.
If you visit our website. We use essential cookies and, with your consent, Google Analytics. Our cookie policy lists every cookie we set, what it does and how long it lasts, and explains how to give or withdraw consent. We do not use advertising cookies, and we do not sell data collected through cookies.
If you contact us. Your name, email address and the content of your message. We use this only to answer your enquiry.
If you are a client or business contact. Name, job title, email address, phone number and meeting notes.
If you attend one of our events. Name, email address, organisation, dietary requirements and accessibility needs. We often film and photograph at our events. We make this clear at registration and on the day, display signage at filming locations, and provide an opt-out. Our event code of conduct sets out how this works.
If you work with us. Name, contact details, bank details for payment, emergency contacts, right-to-work documentation, National Insurance number and records relating to your engagement.
3. Why we collect it, and our lawful basis
Under the UK General Data Protection Regulation (UK GDPR) we must have a lawful basis for processing your data. Ours are:
- Contract – to deliver our services, pay you and manage your engagement
- Legal obligation – tax reporting, right-to-work checks, health and safety records
- Legitimate interests – maintaining client relationships, improving our services and administering events. Where we rely on this, we document our assessment and satisfy ourselves it does not override your rights
- Consent – analytics cookies, mailing lists, and using your image in promotional material. Where we rely on consent you may withdraw it at any time, without affecting anything done before you withdrew it
4. Who we share it with
We do not sell personal data. We share it only where necessary:
- payroll and accounting providers, to pay employees and freelancers
- technology providers – cloud storage, email, analytics and CRM – each under a data processing agreement
- clients, where you are named as a contributor or crew member, with your knowledge
- regulators or law enforcement, where we are legally required to
5. International transfers
Some of our technology providers process data outside the UK. Where that happens we put appropriate safeguards in place – normally the International Data Transfer Agreement (IDTA), or the UK Addendum to the European Commission’s standard contractual clauses, as approved by the Information Commissioner.
6. How long we keep it
We keep personal data only as long as we need it. Our schedule:
| What | How long | Why |
|---|---|---|
| Analytics data | 14 months | Google Analytics retention setting |
| Email enquiries | 12 months, unless an ongoing relationship begins | The enquiry is answered |
| Client and business contact data | Reviewed annually, deleted when no longer needed | Kept current, not indefinitely |
| Event attendee data | 12 months after the event, unless you opt in to further contact | The event is over |
If you work for us as an employee, freelancer or contractor, the retention periods for your records are set out in the privacy notice you are given when you join.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- request deletion where there is no ongoing legal basis for keeping it
- object to processing based on legitimate interests
- restrict processing while a question about your data is resolved
- receive your data in a portable format
- withdraw consent at any time, where consent is the basis for processing
To exercise any of these rights, email office@noetic.ltd. We will respond within one month.
8. Automated decision-making
We do not make decisions about you by automated means alone, and we do not profile you.
9. How to complain
If you are unhappy with how we have handled your data, contact us first and we will do our best to put it right. If you are still dissatisfied you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. When we do, we will change the date below. We will not materially reduce your rights without telling you.
Last updated: September 2026