Last updated: 6th October 2026


ABOUT THIS POLICY

This policy explains how Hidden Agency Limited, trading as Hidden Agency (“Hidden”, “we”, “us” or “our”), collects and uses personal information when you visit https://hidden-agency.com, make a purchase through our shop or contact us about our services or career opportunities.

Hidden Agency Limited is the controller responsible for the personal information described in this policy.

We are registered in England and Wales under company number 07037497. Our registered office is at 1555a London Road, London, SW16 4AD.

For privacy enquiries or to exercise your data protection rights, contact studio@hidden-agency.com.


INFORMATION WE COLLECT

WHEN YOU CONTACT US

If you contact us by email, telephone or another direct channel, we may collect your name, email address, telephone number, business details and any information you include in your message.

If we work together, we may also process information needed to manage that relationship, including correspondence, contractual details and billing information.

CAREER ENQUIRIES

If you send us a CV, portfolio or application, we process the information you provide to assess your suitability and communicate with you about your application.

Further information is provided in the APPLICATIONS section below.


WHEN YOU VISIT OUR WEBSITE

Our website and its infrastructure providers may process technical information needed to deliver and secure the site, its content and its videos. This may include your IP address, browser and device information, requested pages or files, request times, referring page and technical error information.

The website does not currently have contact forms or newsletter subscriptions.

Details of cookies, similar technologies and privacy choices are provided below.

WHEN YOU USE OUR SHOP

Our shop uses Shopify’s Storefront API and Cart API to let you browse products, create a shopping basket and proceed to Shopify checkout.

When you make a purchase, we and our commerce providers process information needed to complete and fulfil your order. This may include your name, email address, telephone number, billing and delivery addresses, items purchased, payment status and order correspondence.

Payment information is processed through the payment services available at checkout.

HOW WE USE YOUR INFORMATION

We use personal information to:
Respond to enquiries and communicate with you.
Discuss, provide and administer our services.
Assess career enquiries and applications.
Provide shopping basket and checkout functionality, process and fulfil orders, and handle order enquiries, returns and refunds.
Deliver, maintain and secure our website and video content.
Remember and apply your privacy preferences.
Maintain necessary business records.
Meet legal obligations and establish, exercise or defend legal claims.

OUR LAWFUL BASES

We rely on the following lawful bases, depending on the circumstances:
Legitimate interests: to respond to business enquiries, manage relationships with client and supplier contacts, assess applications, and operate and secure our website. We consider these interests alongside your rights and expectations.

Contract: where processing is necessary to perform a contract with you or take steps you request before entering into one, including processing and fulfilling purchases.

Legal obligation: where we must process information to comply with the law.

Consent: where we specifically ask for your permission for a particular use, including optional tracking where consent is required. You can withdraw consent through the relevant privacy controls or by contacting us.

OUR WEBSITE AND BUSINESS PROVIDERS

WE USE:

Vercel to host and deliver the website.
Mux to host and deliver video content.
Sanity to manage website content and deliver content assets.
Shopify to provide commerce functionality through its Storefront API and Cart API, and to provide checkout and order management.
Silktide Consent Manager to provide cookie preference controls and remember your choices in your browser’s local storage.

Vercel, Mux and Sanity may process technical request information as needed to provide, maintain and secure their services. This does not mean that personal correspondence, CVs or customer order information are stored in all three services.

Mux may also process playback performance and viewing information where those features are enabled. Any optional tracking requiring consent is subject to the controls described below.

Shopify processes information associated with shopping baskets, checkout and orders. Payment providers and delivery providers receive information needed to process payments and deliver purchases, as applicable.

Further information is available in these providers’ privacy notices:

Vercel: https://vercel.com/legal/privacy-policy
Mux: https://www.mux.com/privacy
Sanity: https://www.sanity.io/legal/privacy
Shopify: https://www.shopify.com/legal/privacy

We also use providers supporting our email and ordinary business operations. Information may be accessible to authorised staff, contractors and professional advisers where necessary for their work.

We do not sell your personal information or share it with third parties for their own marketing.

We may disclose information where required by law or where necessary to protect legal rights.

INTERNATIONAL TRANSFERS

Our service providers may process personal information outside the UK.
Where this happens, we use a transfer mechanism permitted under UK data protection law. Depending on the provider and destination, this may include UK adequacy regulations or approved contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can contact us for information about the safeguards applicable to your personal information.

COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small files stored on your device. Similar technologies, including local storage, may also store or access information in your browser.

We use strictly necessary technologies to support essential functions such as website security, shopping baskets, checkout and remembering your privacy preferences.

Optional analytics, advertising or other tracking technologies requiring consent are disabled until you accept the relevant category.

Technologies used for optional tracking are not treated as strictly necessary simply because they are supplied by one of our website providers.


SILKTIDE CONSENT MANAGER

We use Silktide Consent Manager to let you accept, reject or customise optional cookies and tracking technologies.

It stores your privacy choices in your browser’s local storage so they can be remembered on subsequent visits.


SHOPIFY AND CHECKOUT

Our website uses a custom storefront connected to Shopify through its Storefront API and Cart API.

The custom storefront and Shopify checkout may use different cookies and similar technologies. These may support shopping baskets, checkout, security and, where enabled, analytics or other optional features.

Further information about technologies used by Shopify is available at https://www.shopify.com/legal/cookies. The technologies used on our particular website and checkout are identified in the list below.

MANAGING YOUR PREFERENCES

You can accept, reject or customise optional technologies through our consent banner.

You can change your choices or withdraw consent at any time using [insert location of Cookie Settings link or icon].

When you withdraw consent, we stop the relevant consent-based tracking. Withdrawal does not affect processing that took place lawfully before you withdrew consent.

Any additional privacy controls presented at Shopify checkout apply to the technologies used there.

You can also manage or delete cookies and local storage through your browser settings. Blocking essential technologies may affect website or shopping functionality.


TECHNOLOGIES USED AND THEIR DURATION

We use browser local storage to remember your shopping basket and cookie preferences. The entry hidden_cart_id stores your Shopify basket identifier without a fixed browser expiry. It is removed when the website detects that the basket is no longer available, or when you clear your browser storage.

Silktide Consent Manager uses stcm.hidden-v1.hasConsented, stcm.hidden-v1.consent.essential and stcm.hidden-v1.consent.analytics to record your cookie choices. These choices are valid for up to 180 days and are reset when you next visit after that period. The entry stcm.hidden-v1.updatedAt records when your preferences were last saved. It has no fixed browser expiry and is overwritten when you save a new choice, or removed when you clear your browser storage.

If you accept analytics cookies, we use Google Analytics to understand visits and navigation on our website. Its cookies, _ga and _ga_G1PEW23LW1, distinguish visitors and maintain visit and session information. They are configured to last for up to 180 days. If you withdraw analytics consent through our cookie settings, the website disables Google Analytics and attempts to remove these cookies.

Shopify checkout may use additional cookies to support checkout, security and payment functionality. Further information is available in Shopify’s Cookie Policy at https://www.shopify.com/legal/cookies.


HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as necessary for the purpose for which it was collected.

We determine retention periods by considering:

Whether an enquiry, application, order or business relationship is ongoing.

Whether the information remains relevant to that purpose.

Applicable legal and accounting requirements.

The need to resolve disputes or establish, exercise or defend legal claims.

For technical logs, the time needed to operate, secure and troubleshoot the services, taking account of provider retention settings.

We retain order and transaction records as needed to fulfil purchases, manage returns and refunds, and meet applicable accounting and legal obligations.

Retention of application information is explained in the APPLICATIONS section below.


SECURITY

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Access is limited to people and providers who need it for the purposes described in this policy.


YOUR RIGHTS

Depending on the circumstances, you may have the right to:

Request access to your personal information.

Have inaccurate or incomplete information corrected.

Request deletion of your information.

Restrict how your information is used.

Receive certain information in a portable format.

Withdraw consent where processing relies on consent.

You also have the right to object to processing based on legitimate interests, including processing described in this policy.

These rights are subject to conditions and exceptions under data protection law.

To make a request, contact studio@hidden-agency.com. We normally respond within one month, subject to any lawful extension. We may need information to verify your identity.


COMPLAINTS

If you have concerns about how we handle your information, please contact us at studio@hidden-agency.com.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator:

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113


EXTERNAL WEBSITES

Our website may contain links to other websites. Their operators are responsible for their own privacy practices. Please review their privacy policies before providing personal information.


CHANGES TO THE POLICY

We may update this policy to reflect changes to our website, services or data handling practices. The current version will appear on this page with an updated date. Where required, we will notify you of significant changes.


APPLICATIONS

Hidden Agency Limited is responsible for the personal information we receive when you apply to work with us.

If you apply by email, we collect the information you provide, which may include your name, contact details, CV, portfolio, employment history and covering message. We may also collect information you provide during subsequent correspondence and interviews.


HOW WE USE YOUR INFORMATION

We use your information to assess your suitability for the role, communicate with you and manage the recruitment process.

We process this information on the basis of our legitimate interests in recruiting suitable employees and collaborators. Where applicable, we also process information to take steps at your request before entering into a contract, or to meet legal obligations.


WHO CAN ACCESS YOUR INFORMATION

Access is limited to people who need your information for recruitment purposes. Our email and IT service providers may also process it on our behalf.

Details of our service providers and any international transfers are covered elsewhere in this Privacy Policy.


HOW LONG WE KEEP YOUR INFORMATION

For unsuccessful applications, we retain your information for six months after the recruitment process ends, then securely delete it, unless a longer period is necessary to meet a legal obligation or establish, exercise or defend legal claims.

If we would like to retain your application for future opportunities, we will explain this separately and ask for your permission.

If your application is successful, relevant information will form part of your employment or contractor records and be handled under the applicable privacy notice.


YOUR RIGHTS

Depending on the circumstances, you may ask to access, correct or delete your information, restrict its use, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time.

To ask a question or exercise your rights, contact studio@hidden-agency.com.

You also have the right to complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.