Privacy Policy · The PR Network

Introduction

Welcome to the website privacy policy of The PR Network Ltd ("us", "we", or "our"), which tells you how we look after your personal data when you visit www.thepr.network.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, The PR Network Ltd is the data controller and is responsible for your personal data. The PR Network Ltd is registered with the Information Commissioner's Office, registration number Z2159590.

This policy applies specifically to information collected through our website. If you become a client of The PR Network Ltd, the processing of your data as a client is governed by our separate client agreement. If you apply to join our network as an associate, the processing of your application is governed by our separate Associate Partner privacy policy — though the sign-up form on this website is covered by this policy, and is described below.

Information we collect

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following kinds of personal data about you when you use our website:

Contact and personal data: your name, email address, phone number, company name and postal address, where you give them to us through a form or by email.
Enquiry content: anything you choose to write in a free-text field — the details of a brief, your reason for getting in touch, or your background and experience if you apply to join our network.
Conversation data: the messages you send to our AI website assistant, and the transcript of that conversation where you ask us to follow up. See “Our AI website assistant” below.
Marketing preferences: whether you have opted in to hear from us, and when you did so.
Technical and location data: your IP address, browser type, device type, operating system and approximate location, collected automatically when you visit the site.
Usage data: information about how you use the website, gathered through cookies and similar technologies where you have consented to them.

How we collect your data

We use different methods to collect data from and about you:

Direct interactions: you give us your contact details and enquiry content by filling in a form on our website — the “brief us” form, the contact form, the associate sign-up form or the form that unlocks a gated resource — by talking to our AI assistant, or by emailing us.
Automated technologies: as you interact with our website we automatically collect technical data about your device and your browsing, using cookies, server logs and similar technologies. Our hosting provider also records technical request data as part of serving and protecting the site.

How we use your personal data, and our legal basis

We process your personal data only where we have a valid legal basis to do so. Depending on how you interact with our website, we rely on the following:

Legitimate interests: to respond to your enquiry, to run and secure our website, to protect it from abuse and automated attacks, to understand how the site is used at an aggregate level, and to manage our new business and associate pipelines. We rely on this basis only where our interests are not overridden by your rights and freedoms.
Consent: where the law requires it — for example before placing non-essential cookies, and before sending you marketing email. You can withdraw your consent at any time, and doing so does not affect processing carried out beforehand.
Legal obligation: to comply with applicable laws, legal requests or court orders.

Our AI website assistant

Our website offers an AI assistant that can answer questions about The PR Network. It is software, not a member of our team.

What is processed: the messages you type. These are sent to Google, whose Gemini model generates the reply, together with relevant extracts from our own published content. We apply rate limits using your IP address so that the assistant cannot be abused.
If you ask us to follow up: when you give the assistant your name, email address and website so that a person can come back to you, we store those details together with a transcript of the conversation, and email them to our team so that we can reply.
Please do not share sensitive or confidential information with the assistant. If you would rather speak to a person directly, email us at the address at the end of this policy.

Gated resources and downloads

Some reports and guides on our website are made available in exchange for your details. When you unlock one:

We ask for your name, email address and company, and you can choose whether to hear from us in future. We record that choice and the date you made it.
We set a cookie in your browser so that you are not asked again on your next visit, and we email you a link so that you can open the resource on another device. That link stops working after 30 days.
We keep a record of which resources you have opened, so that we understand what our audience finds useful and so that our team can follow up appropriately.

Disclosures of your personal data

We share your personal data with the following third parties, who process it on our behalf in order to run this website and respond to you:

Vercel — website hosting, content delivery and bot protection. Vercel processes technical request data, including your IP address, in order to serve and protect the site.
Sanity.io — our content management system and content database. Enquiries captured through the AI assistant and the resources gate are stored here.
Copper — our customer relationship management system. Submissions from the “brief us” form, the associate sign-up form and new gated-resource sign-ups are recorded in Copper so that our team can respond and manage the relationship.
Google — Google Tag Manager, which loads the measurement and consent tools described under “Cookies and website analytics”, and the Gemini model that powers our AI assistant.
Resend — our transactional email provider, which delivers resource links to you and enquiry notifications to our team.
Upstash — a hosted database used to rate-limit our AI assistant, which processes your IP address for that purpose only.
Neon — a hosted database that stores the search index our AI assistant draws its answers from. It holds our own published content, not your personal data.
Cookiebot (Usercentrics) — our cookie consent management platform, which records your consent choice.
Regulators and authorities — where we are required by law to disclose information in order to comply with a legal or regulatory obligation.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes, and we permit them to process it only for specified purposes and in accordance with our instructions.

International transfers

Several of the providers listed above are based in, or use infrastructure in, the United States. This means your personal data may be transferred outside the UK and the European Economic Area — in particular to Vercel, Sanity.io, Copper, Google, Resend, Upstash and Neon.

Where personal data originating in the UK or the EEA is transferred outside those regions, we rely on appropriate safeguards recognised under UK and EU data protection law — principally the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, agreed with each provider as part of their data processing terms. You can request further information about these safeguards using the contact details below.

Cookies and website analytics

Cookies are small files placed on your device. We use them to make the website work and, with your consent, to understand how it is used.

We manage cookie consent through Cookiebot. You are asked for your choice when you first visit, and you can change it at any time using the “Cookies” link in the footer of every page. A full, automatically maintained list of the cookies on this site is available in that panel. In summary, we use:

Consent cookies, set by Cookiebot, which record the choice you made so that we do not ask you again on every page.
Analytics and measurement cookies, loaded through Google Tag Manager, which help us understand how visitors find and use the website. These are only set if you consent to them.
Essential first-party cookies used by our gated resources. One remembers that you have unlocked our resources so that you are not asked for your details again; the other is a simple flag that lets the site display your unlocked resources correctly. Both last for one year and are not used for advertising.

You can also set your browser to refuse some or all cookies, or to alert you when a website sets one. If you disable or refuse cookies, please note that some parts of this website may not function properly.

Data security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access to the systems that hold enquiry data is limited to those in our team who need it.

We have also established procedures to deal with any suspected personal data breach, and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We keep your personal data only for as long as we need it for the purposes we collected it for.

Website enquiries — including contact and “brief us” form submissions, AI assistant conversations you asked us to follow up on, and email correspondence — are retained for up to 24 months following our last communication with you, unless you become a client. If you become a client, your data is then retained in accordance with our client data retention policy.
Gated resource sign-ups are retained for up to 24 months from your last interaction with us, or until you ask us to remove you or withdraw your marketing consent, whichever comes first.
Associate sign-up enquiries are retained in line with our Associate Partner privacy policy.
Technical logs held by our hosting and security providers are retained for short periods set by those providers, typically no more than a few months.

Your legal rights

If you are located in the United Kingdom or the European Economic Area, you have the following rights in relation to your personal data:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — ask us to delete your personal data (the "right to be forgotten").
Right to restrict processing — ask us to limit how we use your data.
Right to data portability — request a copy of your data in a structured, machine-readable format.
Right to object — object to our processing of your data where we rely on legitimate interests, or to direct marketing at any time.
Right to withdraw consent — withdraw your consent at any time where our processing relies on it.
Right to lodge a complaint — complain to your local data protection authority.

To exercise any of these rights, please contact us using the details below. We respond to all legitimate requests within one calendar month of receipt. If your request is complex, or you have made several requests, we may extend this by up to two further months; we will tell you within the first month if we need to, and why.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will post the revised version on this page and update the date shown at the top.

Complaints

You have the right to complain at any time to the Information Commissioner's Office (www.ico.org.uk). We would ask you to contact us directly in the first instance so that we have the chance to put things right.

Contact us

If you have any questions about this privacy policy, please contact us:

By email: team@thepr.network
By post: The PR Network Ltd, 12 Old Bond Street, London W1S 4PW, United Kingdom