Skip to content

Privacy Policy

Effective Date: October 2025
Last Updated: February 2026

1. Introduction

This Privacy Policy explains how Glass Atlas Group, incorporating Glass Atlas Limited (Company No. 06655970) and Glass Atlas X Limited (Company No. 11182861) (“Glass Atlas”, “we”, “us”, “our”), collects, uses and protects personal data when you visit www.glassatlas.com, download content, register for events, subscribe to communications or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to processing data lawfully, fairly and transparently, and in line with the principles of data minimisation, purpose limitation and storage limitation.

2. Who We Are

Glass Atlas Group is the Data Controller for personal data processed through this website.

Registered Office: Colony, Jactin House, 24 Hood Street, Manchester, M4 6WX

For any questions regarding this policy or to exercise your data protection rights, please contact:
[email protected] 

3. The Personal Data We Collect

Information You Provide

We collect personal data that you voluntarily provide, including:

  • Name
  • Email address
  • Company name and job title
  • Telephone number (where provided)
  • Information submitted via contact forms or event registrations
  • Free-text enquiry content

If you download gated content, register for webinars or events, or subscribe to our newsletter, we collect the details necessary to provide that service.

Marketing and Engagement Data

Where you subscribe to marketing communications, we collect data relating to your engagement with our emails and content, including whether emails are opened and links clicked. This helps us measure relevance and improve our communications.

Technical and Usage Data

When you visit our website, we collect certain technical information, including IP address, browser type, device type, pages visited, referring URLs and interaction data. This information is collected through cookies and similar technologies, subject to your consent where required.

Business Intelligence and CRM Data

We use customer relationship management and marketing platforms, including HubSpot, Klaviyo, Meta (Facebook), LinkedIn and Lead Forensics, to help us understand business interest in our services.

Lead Forensics operates at a company level by identifying the organisation associated with a business IP address and providing publicly available business contact information. Where you have submitted your details, website activity may be associated with your contact record within our CRM.

We do not use this data to make automated decisions that have legal or similarly significant effects.

Recruitment Data

Job applications are processed through a separate recruitment platform operated by Teamtailor. Applicants should refer to the privacy notice on that website for details of how applicant data is processed.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

Purpose Type of Data Lawful Basis
Responding to enquiries Identity & contact data Legitimate Interests
Providing gated content or event access Identity & contact data Contractual Necessity
Sending marketing communications Contact & engagement data Consent
Website analytics Technical & usage data Consent
Business development & profiling Contact & usage data Consent / Legitimate Interests
Website security and fraud prevention Technical data Legitimate Interests

Where we rely on legitimate interests, we have assessed that our interests in operating and developing our business are not overridden by your fundamental rights and freedoms.

You may object to processing based on legitimate interests at any time.

5. Marketing and Profiling

Where you have provided consent, we may analyse your interactions with our website, communications and events in order to tailor our marketing and improve our services.

This may include:

  • Analysing website behaviour
  • Measuring engagement with emails
  • Delivering targeted advertising via Meta and LinkedIn
  • Enriching company-level data within our CRM

You may withdraw consent or object to direct marketing at any time. Every marketing email includes an unsubscribe link.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website. Our website uses CookieYes as a consent management platform.

Cookies are categorised as:

  • Strictly Necessary Cookies – Required for site functionality
  • Analytics Cookies – Used to understand website performance
  • Marketing Cookies – Used for advertising and retargeting

Analytics and marketing cookies are only activated after you provide explicit consent via our cookie banner. You may update your preferences at any time using our cookie settings tool.

7. Sharing of Personal Data

We share personal data only where necessary and under appropriate safeguards.

We use third-party service providers to support website hosting, analytics, CRM, marketing automation and advertising. These providers act as data processors under contractual agreements that require them to protect personal data.

We do not sell, rent or trade personal data to third parties for marketing purposes.

Personal data may also be disclosed where required by law or in connection with a corporate transaction such as a merger or acquisition.

8. International Data Transfers

Some of our service providers, including Google, HubSpot, Klaviyo, Meta and LinkedIn, may process personal data in the United States or other countries outside the United Kingdom.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place. These safeguards typically include:

  • EU Standard Contractual Clauses (SCCs); and
  • The UK Addendum to the EU SCCs or the UK International Data Transfer Agreement (IDTA).

We assess international transfers to ensure that personal data remains protected to standards equivalent to those required under UK data protection law.

9. Guest WiFi

Where guest WiFi is provided at our premises, internet traffic data may be processed by our internet service provider for operational and security purposes. Glass Atlas does not actively monitor individual browsing activity beyond what is necessary to maintain network integrity and comply with legal obligations.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, contractual or regulatory requirements.

As a general guide:

  • Marketing contact data is retained until you unsubscribe or after three years of inactivity.
  • Enquiry and event-related data is typically retained for up to 24 months from last interaction.
  • Analytics data is retained in line with platform defaults, typically 14 months.
  • CRM records are reviewed periodically and deleted where no longer relevant to our business activities.

Retention periods may be extended where required by law.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse or disclosure. These include access controls, secure hosting environments, encryption where appropriate, and contractual safeguards with third-party processors.

Access to personal data is limited to individuals who have a business need to know.

12. Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure in certain circumstances
  • Request restriction of processing
  • Object to processing (including direct marketing and profiling)
  • Request data portability
  • Withdraw consent where processing is based on consent

To exercise your rights, please contact [email protected]. We will respond within one month.

13. Complaints

If you are concerned about how we handle your personal data, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

14. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and the “Last Updated” date will reflect any changes.