Privacy Policy

Privacy & Data Protection Policy

Fruitcake Media is a trading name of D13 Group Ltd. References in this policy to “Fruitcake Media”, “Fruitcake”, “we”, “us” or “our” refer to D13 Group Ltd, the legal entity responsible for providing our services and for the handling and protection of personal data in accordance with this policy.

D13 Group Ltd (“Fruitcake Media”, “we”, “us” or “our”) respects the privacy of its customers, prospective customers, staff, suppliers, website visitors and other contacts. We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

D13 Group Ltd is registered in England and Wales under company number 07863907.

For enquiries relating to privacy or data protection, please contact us at enquiries@fruitcakemedia.co.uk or telephone 01625 724284.

Personal data

Fruitcake Media may store and process personal data relating to customers, prospective customers, staff, suppliers, contractors, website users and other business contacts.

Personal data we process may include a person’s name, postal address, telephone number, email address, job title, organisation, billing information, communications with us and other information provided in connection with our services.

We may also collect technical information relating to the use of our websites and services, such as IP address, browser and device information, website usage information and information collected through cookies and similar technologies.

We only collect and process personal data where we have a lawful basis for doing so.

Depending on the circumstances, our lawful basis may include processing necessary for the performance of a contract or to take steps before entering into a contract, compliance with a legal obligation, our legitimate interests or your consent.

Where we rely on legitimate interests, these may include operating and improving our business, responding to enquiries, promoting our services where permitted by law, providing and supporting our services, maintaining customer and supplier relationships, administering our systems and protecting the security of our services. Where required, we consider whether those interests are proportionate and whether they are overridden by the rights and interests of the individuals concerned.

We may process personal data in order to:

• Provide and manage our website, hosting, design, development, support, marketing and related services.
• Respond to enquiries and requests for quotations.
• Set up and administer customer accounts.
• Provide technical and customer support.
• Process payments and administer subscriptions.
• Communicate with customers about their services.
• Maintain, secure and improve our systems and services.
• Fulfil contractual, accounting, regulatory and legal obligations.
• Communicate with prospective customers and business contacts about our services where permitted by applicable law.

We take reasonable steps to ensure that personal data held by us is accurate and kept up to date.

Access to personal data held within our systems is restricted to authorised personnel who require access for legitimate business purposes.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including satisfying contractual, legal, accounting and regulatory requirements. Different categories of information may therefore be retained for different periods.

Customer websites and data

Fruitcake Media designs, develops, hosts and supports websites and online services on behalf of its customers.

Where personal data is submitted through a customer’s website, for example through a contact form, enquiry form, account or other online functionality, the Fruitcake Media customer will normally be the data controller and D13 Group Ltd will normally act as a data processor on that customer’s behalf.

In these circumstances, the customer determines why the personal data is collected and how it is used. Requests from individuals relating to such data should normally be directed to the relevant customer in the first instance.

Authorised Fruitcake Media personnel may have technical access to information held within customer websites and systems where this is necessary to provide hosting, maintenance, development, troubleshooting, security or customer support services. We do not use customer-controlled personal data for our own unrelated purposes.

Sharing personal data

Fruitcake Media does not sell personal data.

We may make personal data available to trusted service providers where this is necessary to operate our business or provide our services. Depending on the service being provided, these may include hosting and infrastructure providers, email and communications providers, analytics providers, payment processors and other technology suppliers.

Where a third party processes personal data on our behalf, we take appropriate steps to ensure that suitable contractual and data protection arrangements are in place.

We may also disclose personal data where required by law, regulation, court order or another lawful authority, or where reasonably necessary to establish, exercise or defend legal rights.

Some third-party services may process information outside the UK. Where this involves a restricted transfer of personal data, we take appropriate steps to ensure that an appropriate lawful transfer mechanism and safeguards are in place.

Marketing and communications

We may use contact information provided to us to respond to enquiries and communicate with existing or prospective customers about our products and services.

Depending on the circumstances and applicable law, we may communicate by telephone, email, WhatsApp or other appropriate communication channels.

Where consent is required for direct marketing, we will obtain that consent before sending the relevant communication. In other circumstances, we may rely on our legitimate interests where permitted by UK data protection law and the Privacy and Electronic Communications Regulations (PECR).

You can ask us to stop sending marketing communications at any time by contacting us at enquiries@fruitcakemedia.co.uk or by using any unsubscribe or opt-out facility provided in the communication.

Service communications relating to an existing account, contract, payment, website or service are not treated as marketing communications where their purpose is to administer or provide that service.

Your data protection rights

Depending on the circumstances and the lawful basis on which your personal data is processed, you may have rights including:

• The right to be informed about how your personal data is used.
• The right to request access to personal data we hold about you.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request erasure of your personal data in certain circumstances.
• The right to request restriction of processing in certain circumstances.
• The right to object to certain processing, including processing based on legitimate interests and direct marketing.
• The right to data portability where applicable.
• The right to withdraw consent at any time where processing is based on consent.

These rights are subject to certain legal limitations and exemptions.

To exercise your rights, or to ask what personal data Fruitcake Media holds about you, please email enquiries@fruitcakemedia.co.uk.

We may need to request information to confirm your identity before responding to a request.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Data storage and hosting

Fruitcake Media provides its website and hosting services using professionally managed web-based software and associated hosting infrastructure.

Our primary hosting infrastructure is located within UK data centres in London.

Our systems use established web and database technologies for the storage, management and retrieval of information and are protected by technical and organisational security measures including firewalls, access controls and restrictions on administrative access.

Customer websites and associated data are backed up daily for resilience and disaster-recovery purposes.

Access to systems containing customer data is restricted to authorised users, administrators and service providers who require access for legitimate operational, maintenance or support purposes.

Cookies and similar technologies

Fruitcake Media websites may use cookies and similar technologies.

Cookies are small pieces of information stored on or accessed from a user’s device. Some cookies and similar technologies are required for a website or online service to operate correctly, while others may be used for analytics, advertising, measuring website performance or remembering user preferences.

Interactive websites, including websites where a user can sign in, may use session cookies or similar technologies that are strictly necessary to authenticate users, maintain sessions, provide security and deliver requested functionality.

We may use analytics technologies, including Google Analytics, to understand how our website is used and to help us improve its content, performance and usability.

Where analytics technologies satisfy an applicable statutory exemption for statistical purposes, they may be used without prior consent where the requirements of that exemption are met, including providing users with appropriate information and a simple means of objecting.

We may also use advertising and measurement technologies, including the Meta Pixel, to measure the effectiveness of advertising and understand interactions with our website.

Where an analytics, advertising, tracking or similar technology requires consent under PECR or other applicable legislation, it will only be activated after the required consent has been obtained.

Users can change or withdraw their cookie choices through the cookie controls made available on the relevant website where applicable.

Individual websites developed or hosted by Fruitcake Media for our customers may have their own privacy notices, cookie notices and consent controls providing more specific information about the technologies used on those websites. The relevant customer is responsible for determining the cookies and third-party technologies it chooses to use through its website.

Data security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure.

Our websites and online services use HTTPS and Transport Layer Security (TLS) to protect information transmitted between users’ devices and our servers.

Our hosting infrastructure incorporates security, resilience and backup measures. Physical security of the UK data-centre facilities is managed by the relevant infrastructure providers.

Administrative access to systems is restricted to authorised personnel and protected by appropriate access controls.

Customer data is backed up daily for resilience and disaster-recovery purposes.

No method of electronic storage or transmission can be guaranteed to be completely secure. Customers are therefore also responsible for maintaining appropriate copies or records where required by their own business continuity arrangements.

User accounts and passwords

Where a website or service includes user accounts, an initial password may be created as part of the account setup process.

Users may subsequently change their password. Passwords stored within our systems are protected using security measures designed to prevent Fruitcake Media personnel from retrieving a user’s current password.

Where necessary, authorised personnel may initiate or assist with a password reset rather than retrieving the existing password.

Customers and users are responsible for keeping their login details confidential and for notifying us if they believe an account has been compromised.

Personal data breaches

Fruitcake Media maintains procedures for responding to suspected or confirmed personal data breaches.

Where we become aware of a personal data breach affecting information for which one of our customers is the data controller, we will take appropriate steps to investigate and contain the incident and notify or assist the relevant customer as required.

Where D13 Group Ltd is the data controller, we will assess the incident and notify the Information Commissioner’s Office and/or affected individuals where required by applicable data protection law.

Payment Card Security and PCI DSS

Where Fruitcake Media accepts card payments, we use Stripe payment services to reduce the amount of payment card information handled by Fruitcake Media systems.

When the intended Stripe payment integration is used, payment card details are transmitted to and processed by Stripe rather than being stored on Fruitcake Media servers.

Fruitcake Media does not intentionally store full payment card numbers, card security codes or equivalent sensitive authentication data on its own servers.

Stripe maintains its own security and PCI DSS compliance programme. The use of Stripe reduces the amount of cardholder data handled directly by Fruitcake Media but does not remove any PCI DSS responsibilities that may otherwise apply to us or our customers.

Stripe and any third-party payment methods made available through Stripe have their own privacy and security practices which also apply to information processed by those organisations.

Encryption and communications security

Information exchanged between a user’s browser and Fruitcake Media websites is protected using HTTPS and Transport Layer Security (TLS).

TLS is designed to encrypt information while it is transmitted, protect the integrity of information during transmission and help verify that a user’s browser is communicating with the intended website.

Websites hosted by Fruitcake Media are configured to use HTTPS/TLS, including websites which do not provide online payment facilities.

Changes to this policy

We may update this Privacy & Data Protection Policy from time to time to reflect changes to our services, technology, business practices or legal and regulatory requirements.

The latest version will be published on the Fruitcake Media website.

Contact us

If you have any questions about this policy, the personal data we hold or the way in which we process personal data, please contact:

D13 Group Ltd trading as Fruitcake Media
Glasshouse
Alderley Park
SK10 4TG

Company number: 07863907

Email: enquiries@fruitcakemedia.co.uk
Telephone: 01625 724284
Website: www.fruitcakemedia.co.uk