Privacy Policy

This Privacy Policy explains how Scarlett Licensing Limited (“we”, “us”, “our”) collects, uses, stores, and protects personal data.

We are committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company name: Scarlett Licensing Ltd
Registered office: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
Company number: 13524054
ICO registration number: ZB662167
Contact email: info@scarlettlicensing.com

For data protection purposes, we are the data controller.

We may collect and process the following personal data:

Business contacts (clients, licensors, licensees, prospects):

• Name
• Job title
• Business email address
• Business telephone number
• Company name
• Business correspondence

Contractual and commercial data:

• Consultancy agreements
• Licensing agreements
• Commercial terms
• Approvals and project communications

Employee / worker data (where applicable):

• Name and contact details
• Payroll and payment information
• Employment records
• Work-related communications

We do not intentionally collect special category personal data.

We use personal data to:

• Provide brand licensing and consultancy services
• Manage business and commercial relationships
• Enter into and perform contracts
• Communicate with clients and business contacts
• Comply with legal, tax, and regulatory obligations
• Manage employment relationships
• Protect our legal rights

We process personal data using the following lawful bases:

• Contract – where processing is necessary to perform a contract or take steps before entering into one
• Legal obligation – where required for tax, payroll, or regulatory compliance
• Legitimate interests – to operate and grow our business and manage professional relationships

We do not rely on consent for routine B2B data processing.

We may share personal data with trusted third parties where necessary, including:

• Professional advisers (such as accountants and legal advisers)
• Payroll and accounting providers
• IT and cloud service providers
• Regulatory or legal authorities where required by law

All third parties are required to process personal data securely and lawfully.

We do not sell personal data. Personal data is primarily stored in the UK.
Where data is transferred outside the UK, appropriate safeguards are used in accordance with UK GDPR.

We take reasonable technical and organisational measures to protect personal data, including:

• Password-protected systems
• Restricted access to data
• Secure cloud storage
• Procedures for managing and responding to data breaches

We retain personal data only for as long as necessary:

• Contracts and financial records: up to 6–7 years
• Business correspondence: for the duration of the business relationship
• Employee records: up to 6 years after employment ends
• Unsuccessful enquiries: up to 24 months

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of personal data (where applicable)
• Restrict or object to processing
• Request data portability

Requests should be made using the contact details above.
We will respond within one month.

If you have concerns about how we handle personal data, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

We may update this Privacy Policy from time to time.
The latest version will always be published on this page.