Privacy Policy

Bridgehead Communications Ltd (“Bridgehead”, “we”, “us”) is a specialist PR and public affairs agency registered in England and Wales, company number 12736276. We are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, please email us at wwalter@bridgeheadcommunications.com.

We only collect the data we need for the purpose you contacted us about. Depending on how you use this website, that may include:

• Enquiry and strategy call data. When you book a strategy call or make an enquiry, we collect your name, job title, business or organisation, work email address and telephone number.
• Newsletter data. When you subscribe to our insights or newsletters, we collect your email address.
• Careers data. When you apply for a role, we collect your name, email address, telephone number and the links you provide to your CV and any supporting video or portfolio.
• Technical and usage data. Like most websites, we collect limited analytics data such as pages visited and approximate location. See our Cookie Policy for detail.
• Guernsey Deputy Scorecard submissions. If you sign in to rate or comment on a deputy, or send us a correction, we collect the data described in the Guernsey Deputy Scorecard section below.

We process personal data only where the law allows. The table below sets out what we do with your data and the lawful basis under UK GDPR for each purpose.

• Responding to enquiries and strategy calls. Lawful basis: legitimate interests (responding to a request you have made and running our business), or steps taken at your request before entering into a contract.
• Sending newsletters and insights. Lawful basis: consent, which you give when you subscribe and can withdraw at any time.
• Assessing job applications. Lawful basis: steps taken at your request before entering into an employment contract, and our legitimate interest in recruiting.
• Understanding how our website is used. Lawful basis: legitimate interests in measuring and improving our website, using privacy-respecting analytics.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

We share personal data only with the service providers who help us run our business. Each is bound by a contract to process data only on our instructions and to keep it secure. Our key processors are:

• Resend (email delivery), which we use to send transactional emails and notify our team of enquiries and applications.
• Airtable (records management), where we log enquiries and applications so we can respond to them.
• Google Tag Manager (tag management), which we use to manage the scripts that run on our website.
• Fathom Analytics (website analytics), a privacy-focused service that does not use cookies to identify you or track you across websites.
• Vercel (hosting and performance analytics), which serves this website and the Guernsey Deputy Scorecard and processes the technical data any web server necessarily receives, including your IP address.
• Neon (database hosting), where website content and any Guernsey Deputy Scorecard submissions are stored.
• PostHog (product analytics), hosted in the EU, which we use to understand how pages and features are used and to capture errors.
• Ahrefs (website analytics), which measures aggregate traffic and search performance.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision, to protect your data.

We keep personal data only for as long as we need it for the purpose we collected it, and then delete or anonymise it. In practice:

• Enquiry and strategy call records: up to 24 months after our last contact with you.
• Newsletter subscriptions: until you unsubscribe, after which we remove your details.
• Job applications: up to 12 months after the recruitment decision, unless you join us or ask us to keep your details on file for longer.
• Guernsey Deputy Scorecard comments and ratings: for as long as the comment remains published, or until you ask us to remove it. Submissions rejected in moderation, and the IP address and browser information attached to any submission, are deleted within 12 months.
• Corrections and challenges submitted through the scorecard: for as long as we keep the published corrections log they relate to, so the record of what was changed, and why, stays auditable.

We publish the Guernsey Deputy Scorecard, an independent record of promises made in the States of Guernsey. Readers can sign in to rate and comment on a deputy, and can submit corrections. This section explains what happens to your data if you do.

Signing in.You sign in with an existing X, LinkedIn or Microsoft account. We never see your password. We do not post anything to your account, and we do not read your posts, contacts or messages. We do not create an account for you on our side: from the sign-in we keep only an identifier for your account with that provider, and the display name shown on your profile. Your use of the provider is governed by that provider’s own privacy policy, not this one.

Comments and ratings. When you submit a comment or rating we store the deputy it relates to, your star rating, the text of your comment, the display name from the account you signed in with, the identifier for that account, and the date. We also record the IP address and browser user-agent the submission came from.

Comments are reviewed before they appear. If published, your comment, rating and display name are shown publicly on that deputy’s page and can be read by anyone. Please do not include anything in a comment that you would not want published. Your IP address, browser information and provider account identifier are never published.

Lawful basis: consent, which you give by submitting the comment and can withdraw at any time by asking us to remove it. We rely on our legitimate interests in moderating the scorecard, preventing abuse and making sure one person cannot rate the same deputy twice for keeping the account identifier, IP address and browser information.

Corrections and challenges. If you tell us something on the scorecard is wrong, we collect the name you give, your email address if you provide one, the correction itself and any link you supply as evidence, together with the IP address and browser information of the submission. We use this to check the claim, to reply to you, and to maintain a published corrections log recording what was changed and why. Lawful basis: legitimate interests in the accuracy of what we publish.

Removing your comment. Email us at wwalter@bridgeheadcommunications.com from the address you can be reached at, telling us which deputy’s page the comment is on and the display name it was posted under, and we will remove it. You do not have to give a reason.

Deputies and other public figures. The scorecard also records information about named deputies: their public statements, manifesto promises, recorded votes and reported activity in office. That is information about people acting in a public role, drawn from the public record, and we publish it in the public interest and for journalism. If you are a deputy and believe something we have published about you is inaccurate, please use the correction route on your profile page or email the address above.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data, where there is no good reason for us to keep it;
• object to, or ask us to restrict, our processing of your data;
• ask us to transfer your data to you or another provider;
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email us at wwalter@bridgeheadcommunications.com. We will respond within one month.

We hope to resolve any concern you have about your data directly. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. When we do, we will change the date at the top of this page. Please check back occasionally to stay informed.