Privacy Policy
Last updated: 4 September 2026
1. Who we are
Wraith is a trading name of Wraith Media Group Ltd, a company registered in Scotland under company number SC585840.
Our registered office is:
100B Constitution Street
Edinburgh
EH6 6AW
United Kingdom
Wraith Media Group Ltd is the controller of the personal information described in this policy.
For privacy questions or to exercise your data rights, email hello@madebywraith.com.
2. What this policy covers
This policy explains how we collect and use personal information when you visit our website, contact us about a project or otherwise communicate with us through the website.
It does not replace any separate privacy information we may provide in connection with a client project, production, recruitment process or other specific activity.
3. Information we collect
Information you give us
When you use our contact form or contact us directly, we may collect:
• your name;
• your work email address;
• your organisation;
• information about your proposed project, timing and budget;
• anything else you choose to include in your message; and
• our subsequent correspondence with you.
Please do not send sensitive personal information through the contact form unless it is genuinely necessary and we have agreed a suitable way to handle it.
Technical information
When you use the website, our hosting and content-delivery providers may process technical information needed to deliver and protect the site. This can include your IP address, browser and device information, requested pages, timestamps and security logs.
Our consent service may also process a consent identifier, the choices you make and the time of those choices so that the website can remember and demonstrate your preferences.
We do not use optional analytics, advertising pixels or behavioural profiling on the website at launch.
4. How and why we use your information
We use personal information only where we have a lawful reason to do so.
Responding to an enquiry and discussing a possible project: we use contact details, organisation, project information and correspondence to take steps at your request before entering into a contract, where applicable, or otherwise for our legitimate interest in responding to genuine business enquiries.
Preparing proposals, estimates or meetings requested by you: we use contact details, organisation and project information to take steps at your request before entering into a contract.
Operating, delivering and protecting the website: we use technical information and security logs for our legitimate interest in providing a reliable and secure website.
Recording and applying your cookie or similar-technology choices: we use the consent identifier, choices and timestamps to comply with our legal obligations and for our legitimate interest in demonstrating and respecting your choices.
Meeting legal, regulatory or professional obligations: we use information relevant to the obligation to comply with a legal obligation or for our legitimate interests in establishing, exercising or defending legal rights.
We do not use information submitted through the contact form for unrelated marketing unless you separately ask us to or give valid consent where consent is required.
5. Who we share information with
We may use trusted suppliers to operate the website and respond to enquiries. These currently include:
• Webflow, for website hosting and form processing;
• Microsoft 365, for business email and communications;
• Finsweet Consent Pro, for consent management and consent records;
• Bunny.net, for delivery of video and media; and
• technical hosting, security and content-delivery suppliers used to serve the website.
These organisations may process information on our behalf under their own contractual and legal obligations. We may also share information with professional advisers, insurers, regulators, courts or public authorities where reasonably necessary or required by law.
We do not sell personal information.
6. International transfers
Some of our suppliers operate in, or use infrastructure located in, countries outside the United Kingdom and European Economic Area, including the United States.
Where data-protection law requires safeguards for an international transfer, we use suppliers that provide an applicable lawful transfer mechanism. This may include an adequacy arrangement, the UK International Data Transfer Agreement or Addendum, or approved standard contractual clauses. You may contact us for further information about the safeguards relevant to your information.
7. How long we keep information
We normally retain prospective website enquiries for up to 24 months after our last meaningful contact. We may delete an enquiry sooner if it is clearly no longer relevant.
If an enquiry becomes a client relationship, relevant information becomes part of the client or contractual record and is retained under the retention period appropriate to that relationship and any legal, accounting or insurance requirements.
Consent preferences stored on a visitor's device are currently set to last for up to 365 days. Related consent records are retained only for as long as reasonably necessary to demonstrate and manage the visitor's choices.
Technical and security logs are retained according to operational need and supplier settings, then deleted or anonymised when they are no longer required, unless they must be preserved to investigate an incident or meet a legal obligation.
8. Your rights
Depending on where you live and the circumstances, you may have the right to:
• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent at any time where we rely on consent.
These rights are not absolute and exemptions may apply. To exercise a right, email hello@madebywraith.com. We may need to confirm your identity before acting on a request.
You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. If you are in the European Economic Area, you may also contact the data-protection authority in your country.
9. Cookies and similar technologies
Our use of cookies, local storage and similar technologies is explained in our Cookie Policy. You can revisit your choices at any time using the cookie settings link on the website.
10. Security
We use appropriate organisational and technical measures to protect personal information. No internet service is completely secure, so please avoid sending confidential or sensitive material through the general contact form.
11. Children
This website is intended for business and professional audiences. It is not designed for children and we do not knowingly collect children's information through it.
12. Changes to this policy
We may update this policy when the website, our suppliers or the law changes. The latest version will always appear on this page with its revision date.
13. Contact us
Email: hello@madebywraith.com
Address: Wraith Media Group Ltd, 100B Constitution Street, Edinburgh, EH6 6AW, United Kingdom