Privacy Policy
Last updated: 24 August 2026.
Before real business submissions open, replace the bracketed fields below with the final operator details. Do not collect live submissions until this is done.
Who is responsible for your information?
Data controller: [LEGAL ENTITY / TRADING NAME]. Privacy contact: [PRIVACY CONTACT EMAIL]. Registered/business address: [BUSINESS ADDRESS].
What we collect
When a business submits details for a Canvas advert, we may collect the business name, contact name, email address, phone number, website, package and layout preferences, artwork and any notes you choose to provide.
Why we use it
We use this information to respond to enquiries, prepare and administer Canvas advertising, contact you about artwork or booking details, maintain appropriate business records and operate the A Million Good Reasons service.
Our lawful bases
Depending on the interaction, we expect to rely on steps taken at your request before entering a contract and performance of a contract for advertising bookings; legitimate interests for proportionate business administration, service improvement and fraud/security prevention; and legal obligation where records must be kept by law. We will document the final lawful-basis assessment before live paid submissions open.
Artwork uploads
Please submit only business artwork needed for the advert. Do not upload identity documents, card or bank information, customer lists, special-category data or other sensitive personal information. Larger source artwork may be requested separately where necessary.
Who processes the information
The website is hosted using third-party website infrastructure and form-processing services. Those providers may process submitted information on our behalf to host the site, receive form submissions and store uploaded artwork.
How long we keep information
We keep business enquiry and advertising information only for as long as it is reasonably needed to administer the advert, meet legal/accounting requirements and maintain the Canvas/archive record. Unneeded personal contact information and obsolete uploads should be removed or anonymised when no longer required.
Sharing
We do not sell personal information. Information may be shared with service providers where needed to operate the website or fulfil an advertising booking, or where required by law.
Your rights
Depending on the circumstances, UK data-protection law may give you rights over your personal information, including access, correction, erasure, restriction, portability and objection. You can contact us using the privacy contact above. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how your information is handled.
Cookies and analytics
The current site should avoid non-essential advertising or tracking cookies unless an appropriate consent mechanism is introduced. If analytics, Meta Pixel or other non-essential tracking is added, this policy and the site's consent controls will be updated before those technologies are used.
Security
We use HTTPS and reasonable technical and organisational measures appropriate to this stage of the service. No internet service can guarantee absolute security, so we deliberately minimise the personal and sensitive information requested through the site.