Last updated: 27th July, 2026

This privacy policy explains how Yellow collects, uses and protects personal information.

We have written it to be clear, practical and easy to understand. If anything is unclear, or you want to ask how we use your information, you can contact us using the details below.

Who we are

Yellow is a brand, marketing and growth agency.

Company name: We Are Yellow Ltd
Trading names: Yellow, Yellow Agency
Company number: 14300060
Registered address: 98 Theobalds Road, London, England, WC1X 8WB
Email: hello@weareyellow.agency
Website: https://www.weareyellow.agency

For the purposes of UK data protection law, We Are Yellow Ltd is the controller of the personal information described in this policy. This means we decide how and why that information is used.

What information we collect

We may collect and use the following types of personal information.

Contact and enquiry information

This may include your name, job title, company name, email address, phone number, information you submit through forms on our website, and details of the service, project or opportunity you contact us about.

Client, supplier and business contact information

This may include your name, business email address, phone number, company name, job title, billing and payment details, notes from calls, meetings or emails, and details of projects, proposals, contracts and previous work.

Marketing information

This may include your name, business email address, company name, job title, marketing preferences, whether you have opened, clicked or interacted with our emails where this tracking is enabled, and whether you have unsubscribed or objected to marketing.

Website and analytics information

When you visit our website, we may collect information such as pages viewed, forms submitted, traffic source, approximate location, device and browser information, IP address, and interactions with our website and content.

We use HubSpot analytics to help us understand how people find and use our website.

Paid advertising and tracking information

We may use paid advertising platforms and tracking technologies to understand the performance of our campaigns, improve our website and show relevant advertising.

This may include information collected through cookies, tracking pixels or similar technologies.

Where required, we will ask for your consent before using non-essential cookies or similar technologies.

How we collect information

We may collect information when you contact us through our website, submit a form, sign up to receive emails, book a call or meeting, become a client or supplier, communicate with us by email, phone, social media or messaging platforms, interact with our marketing emails, visit our website, engage with our paid advertising, or have previously worked with us or had a business relationship with us.

We may also receive business contact information from public sources, referrals, events, LinkedIn, CRM records, email correspondence or previous commercial relationships.

How we use your information

We use personal information to respond to enquiries and requests, provide our services, manage client relationships, manage projects, prepare proposals, manage contracts, send relevant business-to-business marketing, manage email preferences and unsubscribes, improve our website and marketing, measure campaign performance, keep business records, protect our systems, and meet our legal obligations.

We only use your information where we have a lawful basis to do so.

Depending on the situation, we may rely on one or more of the following lawful bases:

Contract

We may use your information where it is necessary to provide services to you, take steps before entering into a contract, manage a project, or deliver work we have agreed to provide.

Legitimate interests

We may use your information where it is necessary for the legitimate interests of our business, provided those interests are not overridden by your rights and freedoms. This may include managing client relationships, responding to business enquiries, improving our services, keeping business records, protecting our systems, and sending relevant B2B marketing to appropriate business contacts.

Consent

We may rely on your consent where this is required, such as for certain types of email marketing, cookies, analytics, tracking or advertising activity.

Legal obligation

We may use your information where we need to comply with a legal or regulatory obligation, including tax, accounting, record-keeping or data protection requirements.

B2B marketing and legitimate interests

We may contact business contacts about Yellow’s services, content, events, updates and marketing insights where we believe the information is relevant to their role or organisation.

This may include people who have worked with Yellow before, made an enquiry, had a previous business relationship with us, work for a company or organisation that may reasonably be interested in our services, or have asked to receive updates from us.

When we rely on legitimate interests for B2B marketing, we consider whether the contact is relevant, whether the message is proportionate, and whether the person would reasonably expect to hear from us.

We do not want to send unwanted emails. Every marketing email includes a way to unsubscribe, and you can also contact us directly to ask us to stop.

PECR and email marketing

For corporate business contacts, such as people at limited companies, LLPs, public bodies or other corporate organisations, we may send relevant B2B marketing emails without prior consent where PECR allows this.

For individual subscribers, including consumers, sole traders and some partnerships, we will only send marketing emails where we have consent or where another PECR-compliant route applies.

You can unsubscribe from marketing emails at any time.

Unsubscribing and suppression lists

If you unsubscribe or ask us not to contact you for marketing, we will stop sending you marketing emails.

We may keep a limited record of your details on a suppression list so we can make sure we do not contact you again by mistake.

Cookies, analytics and tracking

Our website may use cookies and similar technologies to make the website work properly, understand how visitors use the website, improve content and performance, measure marketing activity, and support paid advertising and retargeting.

Some cookies are essential. Others, such as analytics, advertising or tracking cookies, may require your consent.

Where required, we will ask for your consent before placing non-essential cookies or similar technologies on your device.

You can manage your cookie preferences through our cookie banner or browser settings.

HubSpot

We use HubSpot for CRM, website forms, email marketing and analytics.

This means information you provide through our website, emails or other contact points may be stored in HubSpot and used to manage our relationship with you, respond to enquiries, send relevant communications and understand how people interact with our website and marketing.

Who we share information with

We may share personal information with trusted suppliers who help us run our business, website, CRM, email marketing, analytics, advertising, accounting, legal or IT systems.

This may include CRM and marketing platforms, including HubSpot, website hosting and development providers, analytics providers, paid advertising platforms, email and productivity tools, professional advisers, payment and invoicing providers, accounting providers, IT providers, security providers and backup providers.

We only share information where there is a valid reason to do so, and we expect our suppliers to protect personal information properly.

We may also share information if required by law, regulation or legal process, or where needed to protect our rights.

International transfers

Some of the platforms and suppliers we use may process personal information outside the UK.

Where this happens, we take steps to make sure appropriate safeguards are in place. This may include using suppliers that rely on recognised transfer mechanisms, such as adequacy regulations or standard contractual clauses.

How long we keep information

We only keep personal information for as long as we need it.

We usually keep enquiry information for up to 2 years after the last meaningful interaction.

We usually keep client and project records for up to 7 years after the end of the relationship, where this is needed for tax, accounting, legal or business record purposes.

We usually keep prospect and B2B marketing contact information for up to 2 years after the last meaningful interaction, unless there is a clear reason to keep the relationship active.

We keep marketing subscriber information until you unsubscribe, object, or we decide the information is no longer relevant.

We keep suppression list records for as long as needed to make sure we do not contact you again by mistake.

We keep website analytics data according to the settings in our analytics and marketing platforms.

We usually keep supplier records for up to 7 years after the end of the relationship, where this is needed for tax, accounting, legal or business record purposes.

We review the information we hold and remove or anonymise it when it is no longer needed.

Your rights

You have rights over your personal information.

Depending on the circumstances, you may have the right to ask for a copy of the personal information we hold about you, ask us to correct inaccurate information, ask us to delete your information, ask us to restrict how we use your information, object to how we use your information, withdraw consent where we rely on consent, ask for your information to be transferred to another organisation, or complain to the Information Commissioner’s Office.

You have an absolute right to object to direct marketing. If you ask us to stop using your personal information for direct marketing, we will stop.

To make a request, contact us at:
hello@weareyellow.agency

We may need to confirm your identity before responding.

Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.

You can also complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://www.ico.org.uk

Changes to this policy

We may update this privacy policy from time to time.

When we make changes, we will update the date at the top of this page.