Legal
Privacy Policy
At a glance
We collect your name, business name, email address, mobile number, and campaign URL when you place an order or make an enquiry. We use it to fulfil your order and communicate with you. We keep it for two years. We don't sell it.
1. Who We Are
Tabletop Media is a trading name of Rivium Ltd. We are the data controller for the personal data collected through this website and our services. Our ICO registration reference is ZC168410. Contact us at: hello@tabletopmedia.co.uk
2. What Data We Collect
When you place a campaign order, we collect your name, business name, email address, mobile number, campaign destination URL, and any optional notes you provide.
When you submit a venue enquiry (venues@tabletopmedia.co.uk), we collect your name, venue name, email address, phone number, venue type, and any additional information you provide.
When you visit our website, we may collect anonymised IP address, pages visited, time on site, general location (country/region only), and device/browser type via Google Analytics.
3. How We Use Your Data
We use your data to process and fulfil campaign orders, send campaign confirmations and metric reports, respond to venue enquiries, communicate with you about your account, and improve our website via anonymised analytics. We do not sell your data. We do not use it for unrelated marketing without your explicit consent.
4. Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Fulfilling your campaign order | Contract performance |
| Responding to venue enquiries | Contract performance (pre-contractual) |
| Sending campaign metric reports | Contract performance |
| Website analytics | Legitimate interests |
| Retaining order records for tax | Legal obligation |
| Email marketing (if applicable) | Consent |
5. Cookies and Analytics
Our website uses Google Analytics with IP anonymisation enabled. Full IP addresses are never stored by us or passed to Google in identifiable form. Analytics data retention is configured to 26 months.
You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. We do not use advertising cookies or third-party tracking pixels.
6. Data Retention
We retain your personal data for up to two years from the date of your last order or enquiry, after which it is securely deleted. Order and financial records may be retained for up to six years where required by law.
7. Third-Party Processors
| Processor | Purpose | Outside UK? |
|---|---|---|
| Stripe | Payment processing | Yes — SCCs in place |
| Vercel | Payment API infrastructure | Yes — SCCs in place |
| QR.io | QR tracking | No personal data shared |
| Google Analytics | Anonymised analytics | Yes — SCCs in place |
| Brevo | Email delivery | Yes — SCCs in place |
Where data is transferred outside the UK, appropriate safeguards including standard contractual clauses are in place.
8. Your Rights
Under UK GDPR you have the right to access, correct, delete, object to, and port your personal data, and to withdraw consent at any time. To exercise any right, email hello@tabletopmedia.co.uk. We will normally respond within one month. For complex requests we may extend by up to a further two months and will notify you within one month explaining the reason.
9. Data Security
We take reasonable technical and organisational measures to protect your data. Payment data is handled exclusively by Stripe and never stored on our systems. Mobile numbers are used solely for order communication and are not shared with third parties except as listed above.
10. Complaints
Please contact us first at hello@tabletopmedia.co.uk. We will acknowledge all complaints within 5 working days and aim to resolve them within 30 days. If you remain unsatisfied, you may contact the ICO at ico.org.uk or on 0303 123 1113. Our ICO registration reference is ZC168410.
11. Changes to This Policy
The current version will always be published at tabletopmedia.co.uk/privacy. We will notify existing customers of any material changes by email.