Privacy Policy
This Privacy Policy explains how EP Media LTD, trading as EP+ EntrepreneurPlus ("EP+", "we", "us", "our"), collects, uses, stores, and protects your personal data when you visit entrepreneurplus.co.uk or interact with our services.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), the Data (Use and Access) Act 2025 (DUAA), and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who We Are
Data Controller: EP Media LTD, trading as EP+ EntrepreneurPlus Website: entrepreneurplus.co.uk Contact: [email protected]
2. What Personal Data We Collect
Data you provide directly:
- Name and email address (newsletter subscriptions and account creation)
- Company name, job title, and website (directory submissions)
- Any information included in correspondence with us
Data collected automatically:
- IP address and approximate location
- Browser type, version, and device type
- Pages visited, time on site, and referring source
- Operating system
Data from third parties:
- Analytics data from Google Analytics 4
- Cookie and tracking data (see our Cookie Policy)
We do not collect sensitive personal data (special category data) unless you voluntarily provide it.
3. How We Use Your Personal Data
| Purpose | Lawful Basis |
|---|---|
| Sending the EP+ Brief newsletter | Consent |
| Processing directory submissions | Contractual necessity |
| Responding to enquiries | Legitimate interest |
| Improving our website and content | Legitimate interest |
| Analytics and performance measurement | Legitimate interest |
| Complying with legal obligations | Legal obligation |
| Detecting and preventing fraud or abuse | Recognised legitimate interest (DUAA 2025) |
We will never sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or significant effects on individuals.
4. Newsletters and Marketing
If you subscribe to the EP+ Brief or any other EP+ newsletter, we will use your email address to send you editorial content and relevant updates. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting [email protected].
We do not send unsolicited marketing emails. Any sponsored or paid content within our newsletter is clearly labelled as such.
5. Directory Submissions
When you submit your startup to the EP+ Startup Directory, the information you provide may be published on our website as part of your directory listing. By submitting, you confirm that the information is accurate, you have the right to submit it on behalf of the company, and you consent to EP+ publishing the approved listing.
You may request removal of your listing at any time by contacting [email protected]. Removal requests will be processed within 30 days.
6. Cookies
We use cookies and similar technologies on our website. For full details, please see our Cookie Policy. Under the DUAA 2025, certain essential cookies no longer require prior consent. Analytics and advertising cookies continue to require your consent, which you can manage via our cookie consent tool.
7. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Ghost Pro (Fastly) | Website and newsletter hosting | ghost.org/privacy |
| Google Analytics 4 | Website analytics | policies.google.com/privacy |
| Airtable | Directory database | airtable.com/privacy |
| Tally.so | Directory intake forms | tally.so/privacy |
| HubSpot | CRM management | legal.hubspot.com/privacy-policy |
| Cloudflare | Security and performance | cloudflare.com/privacypolicy |
All third-party processors are subject to data processing agreements and are required to handle your data in accordance with UK GDPR.
8. International Data Transfers
Some of our third-party service providers are based outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the ICO.
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Newsletter subscriber data | Until unsubscription + 12 months |
| Directory submission data | Duration of listing + 24 months |
| Enquiry and correspondence | 3 years |
| Analytics data | 26 months |
| Financial and transaction records | 7 years (legal requirement) |
10. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data in certain circumstances
- Right to restriction — request we limit how we process your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent at any time
- Right to complain — from 19 June 2026, you have the right to lodge a complaint directly with us; we will acknowledge within 30 days
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. If unsatisfied, you may contact the ICO at ico.org.uk or call 0303 123 1113.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, access controls, regular security reviews of third-party processors, and staff data protection awareness. In the event of a breach likely to risk your rights, we will notify the ICO within 72 hours and you without undue delay.
12. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect data from children. If you believe we have done so inadvertently, contact [email protected] immediately.
13. Journalistic Exemption
As a digital media publication, EP+ may rely on the journalistic and editorial exemption under Part 5, Schedule 2 of the Data Protection Act 2018 where data is processed for journalistic purposes and compliance would prevent or seriously impair publication.
14. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated to subscribers by email. The date of the most recent update is shown at the top of this page.
15. Contact
EP Media LTD — Data Controller Email: [email protected] Website: entrepreneurplus.co.uk
This Privacy Policy is governed by the laws of England and Wales.