PRIVACY POLICY
Privacy Policy
How we use your information, keep it secure and help you exercise your privacy rights.
LAST UPDATED · 20 OCTOBER 2026
Magnetic London Creative Services Ltd is responsible for the personal information described in this policy.
ON THIS PAGE
Who is responsible for your information
What we collect
Why we use it
Who receives your information
International access and transfers
How long we keep it
Your choices and rights
Information handled for clients and policy changes
Who is responsible for your information
Coconut is a trading name of Magnetic London Creative Services Ltd, company number 07508375. We are the controller of personal information used to run Coconut's website, enquiries, accounts and business relationships. Our registered office is Studio 123, Brickfields Business Centre, 37 Cremer Street, London, E2 8HD. For privacy questions, requests or complaints, email hello@magnetic-london.co.uk or write to that address, marked for the privacy contact.
What we collect
We collect the information you provide in forms, accounts, briefs and correspondence. This can include your name, work contact details, business information, chosen services, billing details, messages, uploaded content and feedback. Where you authorise access to a business channel or advertising account, we receive information needed to deliver that service.
Our website and its providers also process technical information such as your IP address, device and browser details, page visits and interactions. Optional analytics and advertising technologies are described in our Cookie Policy. Payment providers process your payment-card details; we receive transaction information needed to manage your order. Do not send full card details through our forms or messages.
Information comes from you, colleagues acting for your business, connected platforms and payment or website providers. Only supply others' information if entitled to do so, and tell them about this policy. Our services are not directed at children. Please do not send sensitive personal information in ordinary enquiries or briefs.
Why we use it
Purpose
Our basis for using the information
Answer enquiries, prepare proposals and deliver services
Steps towards, or performance of, a contract where you are the customer; otherwise our legitimate interest in communicating with your organisation and providing its service.
Manage accounts, payments and customer support
Contract where you are the customer; otherwise our legitimate interest in administering the business relationship.
Keep financial records and meet legal duties
Legal obligation.
Keep systems secure, prevent misuse and deal with disputes
Our legitimate interests in protecting people, information and the business, and legal obligation where applicable.
Send optional marketing messages
Your consent. You can unsubscribe at any time. Service messages about an order are separate.
Measure website use with optional analytics, or measure and personalise advertising
Your consent through our cookie controls.
We consider your rights when relying on legitimate interests. Without essential contact, billing or brief information, we may be unable to help or deliver the service. Marketing consent is optional.
Who receives your information
Our authorised team, contractors and providers receive information needed for website hosting, forms, accounts, payments, email, cloud storage, project delivery and professional advice. Wix supplies our website and business features. Google Analytics and Meta receive website information when you consent to the relevant tracking, as described in our Cookie Policy.
Providers acting for us must protect information under appropriate contracts. Payment and advertising platforms also have their own responsibilities and privacy notices. We may disclose information when legally required or needed for legal claims. We do not sell your personal information.
If you contact us through WhatsApp or another social platform, that platform also handles information under its own privacy terms. If an automated assistant is used, we will identify it and provide a way to contact a person. Do not share sensitive information in chat. We do not use solely automated decisions that have legal or similarly significant effects on you.
We use reasonable technical and organisational measures to protect information, including access controls and secure systems. No online service can be guaranteed completely secure. Please protect your account details and tell us promptly if you suspect unauthorised access.
International access and transfers
Our team and suppliers may access or process information outside the UK when delivering services, hosting systems or providing support. This can include access by our international team in Türkiye and the United Arab Emirates and processing by technology providers in the EEA, Israel and the United States.
For a transfer restricted by UK data protection law, we require a relevant UK adequacy arrangement or approved contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to EU standard contractual clauses, together with any additional measures needed. Contact us for details of the safeguards relevant to your information and how to obtain a copy. Access is limited to the people who need it for their work.
How long we keep it
We keep information only as long as needed for its purpose, then delete it or make it anonymous. Our usual periods are:
- Enquiries that do not lead to work: up to 12 months after the last meaningful contact.
- Contracts, invoices and records needed for accounting or legal claims: normally six years after the relevant financial year ends, or longer if a particular legal duty or live dispute requires it.
- Creative working files and routine project correspondence: up to 12 months after the work ends, unless a different handover or retention arrangement is agreed. This is not a backup or storage service for clients.
- Marketing contact details: until you unsubscribe or after a review following 24 months without meaningful engagement. We keep a minimal suppression record where needed to honour an opt-out.
- Cookie and tracking identifiers: for the periods described in our Cookie Policy. A cookie's lifetime is separate from how long a provider retains associated information.
We retain limited consent, complaint and rights-request records where needed to demonstrate how we handled them. Longer retention for an exception is restricted to that purpose.
Your choices and rights
Depending on the circumstances, you can ask to see your information, correct it, delete it, restrict its use or receive a portable copy. You can object where we rely on legitimate interests and withdraw consent at any time. Withdrawing consent does not change the lawfulness of earlier use.
You can object to direct marketing at any time. Use the unsubscribe option or email us. Change website tracking choices through Cookie settings. We may need to verify your identity before responding to a rights request. We normally respond within one month and will explain any lawful extension.
To raise a privacy complaint, email or write to us using the details above. We will acknowledge it within 30 days, investigate and tell you the outcome without undue delay. You may also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. You do not lose that right by contacting us first.
Information handled for clients and policy changes
When handling customer or audience data on a client's instructions, the client's privacy notice and our data-processing agreement apply. We update this policy when our practices change, highlight material changes where appropriate and seek fresh consent where needed.