Privacy Policy 2026

Privacy Policy 2026

Last Updated: 4th January 2026

1. Introduction

This Privacy Policy explains how Communication Works Publishing Group Limited (“CWPG”, “we”, “us”, “our”) collects, uses, shares, and protects personal data. We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

Our Core Data Principles:

  • No Third-Party Collection: We do not collect personal information on behalf of other parties or third-party organizations.
  • Manual & Portal Subscriptions: Subscriptions to our publications are collected and registered via manual paper forms and our secure, CWPG-owned online portals.
  • Total Advertiser Confidentiality: We only ever communicate with our subscribers on behalf of our advertisers. We will never share, sell, or disclose any of your personal data or contact information to these advertisers. All such communications are managed and dispatched directly by us.

This policy applies to:

  • Visitors to our website at www.cwpg.com (“Site”)
  • Subscribers to our publications (whose data is collected via manual paper forms or our online portals)
  • Recipients of our business-to-business marketing and outreach communications
  • Business contacts whose data we process for sales and partnership purposes

Our contact details for data protection matters:

Communication Works Publishing Group Limited, 6th Floor, Capital House, 25 Chapel Street, London NW1 5DH

Company Number: 15427710

Email: datateam@cwpg.com

If you have any questions about this policy or wish to exercise your data protection rights, please contact us at datateam@cwpg.com.

2. Who This Policy Covers

We process personal data relating to several different groups of individuals, and the way we process data depends on which group you fall into. Please read the section relevant to your relationship with us.

  • Section 4 applies to website visitors.
  • Section 5 applies to subscribers to our publications (registered via manual paper forms or our online portals).
  • Section 6 applies to business contacts who receive our outreach emails (including recipients of cold business communications).
  • Section 7 applies to clients and prospective clients who engage with us about our services.
  • Sections 8 onward apply to all individuals.

3. Data Controller

Communication Works Publishing Group Limited is the sole data controller for personal data processed under this policy. We do not act as a data processor for third parties, and we do not collect or process personal data on behalf of any other parties or third-party controllers.

4. Information We Collect from Website Visitors

When you visit www.cwpg.com, we may collect:

  • Technical data: IP address, browser type, operating system, device information, referring URL, pages visited, time on site
  • Cookie data: as described in our Cookie section below
  • Information you submit: name, email address, company, message contents if you complete a contact form
  • Legal basis: Legitimate interest (operating and improving our website, security, analytics) and consent (for non-essential cookies).
  • Retention: Technical and analytics data is retained for 26 months. Contact form submissions are retained for 24 months unless they form the basis of an ongoing business relationship.

5. Information About Subscribers

When you subscribe to one of our publications, we collect:

  • We collect fields of information that include but are not limited to Name, postal address, email address, job title, employer
  • Subscription preferences and consent records
  • Engagement data (whether emails are opened, links clicked)
  • Source: To deliver the publication you subscribed to and to send communications related to that publication. We may occasionally send you promotional communications on behalf of our advertisers, but we will never share, sell, or disclose your personal information to these advertisers. All such emails or mailings are sent directly by us.
  • Retention: For the duration of your subscription plus six months following cancellation, or until you request deletion.

You can unsubscribe at any time using the link in any email or by contacting datateam@cwpg.com. We will action unsubscribe requests within 24 hours.

6. Information About Business Contacts (Including Cold Outreach Recipients)

This section applies if you have received an unsolicited business communication from us.

6.1 What data we process

For business outreach purposes, we process limited business contact data:

  • Full name
  • Business email address
  • Job title and role
  • Employer name
  • Publicly available professional information relevant to your role
  • Engagement data (whether you opened or replied to our emails)

We do not process special category data, financial data, or personal (non-business) contact details for outreach purposes.

6.2 Where we obtained your data

UK GDPR requires us to tell you where we obtained your data when we did not collect it directly from you. We obtain business contact data from the following sources:

  • Licensed B2B contact databases: Apollo, ZoomInfo, Lusha, RocketReach. These providers compile business contact data from publicly available sources, corporate websites, professional networking platforms, and their own data partnerships. Each provider warrants to us that the data they supply has been lawfully collected.
  • LinkedIn Sales Navigator: We use this tool for professional research to identify roles and companies relevant to our services. Email addresses are not collected directly from LinkedIn.
  • Publicly available business sources: Company websites, professional directories, conference attendee lists, and trade publications.

If you would like to know specifically which source provided your data to us, please contact datateam@cwpg.com.

6.3 Why we process this data

We process business contact data to:

  • Identify organisations that may benefit from our custom publishing, video production, and content marketing services
  • Send relevant business-to-business communications to individuals in roles likely to have an interest in our services
  • Manage ongoing professional relationships with business contacts who engage with us
  • Maintain accurate records of our outreach activities and the consent or objection status of recipients

6.4 Legal basis for processing

We rely on legitimate interest as our legal basis for processing business contact data for outreach purposes, in accordance with UK GDPR Article 6(1)(f).

Our legitimate interest is in growing our business by informing relevant business decision-makers of services that may benefit their organisations. We have conducted a Legitimate Interest Assessment which considers:

  • The nature of the data processed (limited business contact information, not sensitive)
  • The reasonable expectations of recipients (B2B communications to professionals in relevant roles, in line with industry norms)
  • The minimal privacy impact of professional outreach to a business email address
  • Safeguards we apply, including targeted relevance, easy opt-out, suppression of those who object, and limits on contact frequency

We have concluded that our legitimate interest is not overridden by the rights and freedoms of the recipients, given the limited nature of the data, the business context, and the safeguards in place. This balance does not apply equally to all recipients. Specifically:

  • For corporate subscribers (limited companies, LLPs, public bodies), we rely on legitimate interest in line with PECR.
  • For sole traders and partnerships (treated as individuals under PECR), we will only continue to email after a positive engagement signal or where prior consent has been given.

6.5 How long we keep your data

Cold prospect contact data is retained for 24 months from the date of last meaningful contact (most recent send, open, or reply). After 24 months, data is either deleted or refreshed from source if the contact remains relevant. Data subjects who object are added to a permanent suppression list which is retained indefinitely solely to prevent re-contact.

6.6 Your rights

You have the right to object to processing of your data for direct marketing at any time. We will action all objection requests within 24 hours of receipt and add your details to a permanent suppression list across all our sales activities.

To exercise this right, you may:

  • Click the unsubscribe link present in every marketing email we send
  • Reply to any marketing email with the word “unsubscribe” or similar
  • Email datateam@cwpg.com requesting suppression
  • Write to us at the address in Section 1

Your other rights are set out in Section 11.

7. Information About Clients and Prospective Clients

When we engage in business discussions with clients or prospective clients, we process:

  • Names, business contact details, and roles of relevant individuals
  • Records of communications, meetings, and proposals
  • Contractual information once engagement begins
  • Legal basis: Legitimate interest (managing business relationships and potential engagements) and contract (where an engagement is agreed).
  • Retention: For the duration of the relationship plus seven years following its end, in line with our legal and tax obligations.

8. Cookies and Similar Technologies

Our Site uses cookies and similar technologies for functionality, analytics, and marketing.

  • Strictly necessary cookies are required for the Site to function and do not require consent.
  • Analytics and marketing cookies are used only with your consent, which you provide via our cookie banner.

You can withdraw consent at any time by adjusting your cookie preferences via your browser settings. Withdrawing consent does not affect your ability to use the Site.

9. Sharing Your Data

We share personal data strictly as described below:

  • Service providers (data processors): Companies that provide services to us such as email delivery, CRM (Pipedrive), email validation (NeverBounce), website hosting, and analytics. These processors act under written contracts requiring them to process data only on our instructions and in compliance with UK GDPR.
  • Email Service Provider: We use our email service provider for outbound communications. They process recipient email addresses solely to deliver our communications.
  • Legal and regulatory disclosures: Where required by law, court order, or to protect our rights or those of others.

What We Do Not Do with Your Data:

  • We do not collect information on behalf of other parties.
  • We do not sell personal data.
  • We do not share subscriber details with advertisers. Any promotional communications sent on behalf of advertisers are managed and sent exclusively by CWPG. No personal data is ever passed to them.
  • We do not share cold outreach contact data with third parties for their own marketing purposes.

10. International Transfers

Some of our service providers (including B2B data providers and our Email Service Provider) are based outside the UK, including in the United States and the European Economic Area.

Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, which may be:

  • An adequacy decision made by the UK government, or
  • The UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, or
  • Other lawful transfer mechanisms recognised by UK GDPR

You can request more information about the safeguards in place by emailing datateam@cwpg.com.

11. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access: To obtain a copy of the personal data we hold about you
  • Right to rectification: To correct inaccurate or incomplete data
  • Right to erasure: To request deletion of your data in certain circumstances
  • Right to restriction: To limit how we process your data in certain circumstances
  • Right to data portability: To receive your data in a portable format (where applicable)
  • Right to object: To object to processing based on legitimate interest, including all direct marketing
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
  • Rights related to automated decision-making: We do not make automated decisions with legal or similarly significant effects

To exercise any of these rights, please contact datateam@cwpg.com. We will respond within one calendar month. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive.

Right to complain to the regulator:

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

ICO contact details:

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the opportunity to address any concerns directly before you contact the ICO.

12. Data Security

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • Encryption of data in transit (TLS) and at rest (AES-256)
  • Role-based access controls
  • Regular security reviews and audits
  • Staff training on data protection
  • Incident response procedures
  • ISO 27001 aligned information security management

In the event of a personal data breach likely to result in a risk to individuals’ rights and freedoms, we will notify the ICO within 72 hours and affected individuals where required.

13. Children’s Data

Our services are intended for business and adult audiences. We do not knowingly collect data relating to children under 18. If we become aware that we have collected such data, we will delete it.

14. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this policy will reflect the date of the most recent change. Material changes will be communicated via our website or, where appropriate, by email to affected data subjects.

15. Contact

For all data protection matters, including exercising your rights, requesting information about our processing activities, or making a complaint:

  • Email: datateam@cwpg.com
  • Post: Data Team, Communication Works Publishing Group Limited, 6th Floor, Capital House, 25 Chapel Street, London NW1 5DH