Privacy Policy
This policy explains what we do with personal information collected through this website. It describes what the site actually does rather than what a website of this kind might do.
Last updated
Who we are
This website is operated by Excite OOH Ltd, trading as London Underground Advertising. Excite OOH Ltd is the data controller for personal information collected through this website.
| Controller | Excite OOH Ltd |
|---|---|
| Trading name | London Underground Advertising |
| Registered in | England and Wales |
| Company number | 14496022 |
| Registered office | 71–75 Shelton St, Covent Garden, London, WC2H 9JQ, United Kingdom |
| ICO registration | ZB550580 |
We are an independent media specialist. We are not affiliated with Transport for London or London Underground.
How to contact us about privacy
For anything about your personal information, including any of the rights set out below, email privacy@londonundergroundadvertising.co.uk.
For anything else, email hello@londonundergroundadvertising.co.uk or call +44 20 3980 8867. You can also write to us at 71–75 Shelton St, Covent Garden, London, WC2H 9JQ, United Kingdom.
Information you give us
When you send an enquiry through this website we ask for two things, and offer three more.
| Information | Required? |
|---|---|
| Your name | Required?Required |
| Your work email address | Required?Required |
| Your telephone number | Required?Optional |
| What you are looking to advertise | Required?Optional |
| An approximate budget range | Required?Optional |
We do not ask for anything else. There are no other required fields, and we do not ask you to create an account.
Information collected with your enquiry
So that we can answer usefully, we record the context you were browsing in when you got in touch:
- the address of the page you sent the enquiry from
- the website that referred you to us, where there was one
- campaign tracking parameters in the link you followed, such as utm_source, utm_medium and utm_campaign
- the station, Underground line, advertising format or case study the page related to
- the date and time of your enquiry
This tells us which format or station prompted your enquiry, so the reply matches what you were reading. It is not used to build a profile of you, and it is not combined with information from other websites.
Website analytics
This website does not use cookies, and does not store or read information on your device.
We use Vercel Web Analytics and Vercel Speed Insights to understand which pages are read and how quickly they load. Both are provided by our hosting provider and both work without cookies or browser storage. Our Cookie Policy covers this in more detail.
According to Vercel's published documentation, visitors are identified by a hash created from the incoming request rather than by a cookie or a stored identifier, and a visitor session is discarded after 24 hours. This means the analytics cannot recognise you on a later visit, and cannot follow you to another website.
Vercel's documentation lists the following as the information recorded with an analytics data point. Some of it, such as approximate location and device details, is derived from your request by Vercel's servers rather than sent by your browser:
- the address of the page viewed, and the route pattern behind it
- query parameters, filtered
- the referring website
- approximate geographic location derived from the network connection
- browser, operating system and device type
- page performance measurements, including which page element a measurement related to
- the time of the event
We do not use Google Analytics, Google Tag Manager, Microsoft Clarity, advertising or retargeting pixels, session recording or heatmapping on this website.
Why we process your information, and our lawful bases
| What we do | Lawful basis under UK GDPR |
|---|---|
| Answer your enquiry, and prepare formats, locations, availability and indicative costs | Lawful basis under UK GDPRLegitimate interests — responding to an enquiry you chose to send us |
| Take steps you have asked for before entering into a contract, and perform a contract once there is one | Lawful basis under UK GDPRPerformance of a contract |
| Manage the enquiry and any resulting customer relationship in our CRM | Lawful basis under UK GDPRLegitimate interests — running our business and keeping accurate records |
| Understand which formats, stations and pages generate enquiries so we improve the website | Lawful basis under UK GDPRLegitimate interests — measuring and improving our own website |
| Keep records of enquiries, bookings and transactions | Lawful basis under UK GDPRLegal obligation, and legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is overridden by your interests and rights. You can object to processing based on legitimate interests at any time — see your rights below.
We do not send marketing emails on the basis of a website enquiry, and we do not sell or share your information for anyone else's marketing.
Service providers
We use the following providers, who process information on our instructions and under contract:
| Provider | What they do for us |
|---|---|
| Vercel | What they do for usHosts and delivers this website, and provides the analytics and page-performance measurement described above |
| Supabase | What they do for usProvides the database in which enquiries are stored |
| Resend | What they do for usSends the internal notification email that alerts our team to a new enquiry |
| Pipedrive | What they do for usOur customer relationship management system, used to manage enquiries and customer relationships |
| Google Workspace | What they do for usOur business email, through which we receive and reply to enquiries |
We may record enquiries in Pipedrive, our customer relationship management system, so that we can manage enquiries and customer relationships.
We may also share information with our professional advisers, or where we are required to do so by law.
Where your information is processed
Enquiry information is not accessed by our staff outside the United Kingdom.
Our service providers operate internationally, and some information may be processed outside the UK. Where that happens, we rely on the safeguards permitted by UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses.
We do not claim that your information never leaves the UK, because our providers' infrastructure is global. If you would like the current position for a particular provider, ask us and we will tell you.
How long we keep it
We keep personal information only for as long as we have a reason to, and we apply the following policy:
| Information | How long we keep it |
|---|---|
| Enquiries that do not become business | How long we keep itUp to 24 months from the last meaningful contact |
| Enquiries that become a booking or a customer relationship | How long we keep it6 years after the end of the business relationship, or longer where the law requires it |
| Automated spam submissions caught by the form | How long we keep itUp to 30 days |
| Internal notification emails about an enquiry | How long we keep itThe same period as the enquiry or customer record they relate to |
We review our records against this policy and remove information that has passed these periods. We may keep information for longer where we need it to establish, exercise or defend a legal claim, or to meet a legal or tax obligation.
Security
We take appropriate technical and organisational measures to protect personal information. This website is served only over an encrypted connection. Enquiries are stored in a database that is not publicly readable, and the credentials used to write to it are held on our servers and are never sent to your browser.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we ever become aware of a breach affecting your personal information, we will follow our obligations under UK data protection law.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is inaccurate or incomplete
- ask us to delete your information, in certain circumstances
- ask us to restrict how we use your information, in certain circumstances
- object to processing that we base on legitimate interests
- ask us to transfer your information to you or another organisation, where that right applies
To exercise any of these, email privacy@londonundergroundadvertising.co.uk. We will respond within one month. Exercising these rights is free, and we will not treat you differently for doing so.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first at privacy@londonundergroundadvertising.co.uk so we have the chance to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113. Our ICO registration number is ZB550580.
Links to other websites
This website links to other websites, including Transport for London and media owners. We are not responsible for their content or their privacy practices, and this policy does not apply to them.
Changes to this policy
We may update this policy as the website or our processing changes. The date at the top of this page shows when it was last changed. If we make a significant change, we will make that clear on this page.