Privacy Policy

Effective Date: October 2026

Drumup ("we", "us", or "our") respects your privacy and is committed to protecting your personal data.

This policy explains how we collect, use, share and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller

The data controller responsible for your personal information is:

Drumup
Edinburgh, United Kingdom
Email: hello@drumup.co.uk
Website: drumup.co.uk

2. Information We Collect

We may collect and process the following information:

  • Personal information: Names, email addresses, telephone numbers, job titles and company details submitted through our website or business communications.

  • Website information: IP addresses, browser information, pages visited and website interactions.

  • Business information: Professional contact details obtained through publicly available sources, business directories, professional networks and commercial data providers.

  • Communications: Information shared through emails, telephone calls, meetings and other correspondence.

3. How We Use Your Information

We process personal information for the following purposes:

  • To operate and maintain our website.

  • To respond to enquiries and provide information about our services.

  • To deliver sales, lead generation and business development services.

  • To identify and contact relevant business prospects.

  • To manage client relationships and communications.

  • To analyse website performance and improve our services.

  • To comply with legal and regulatory obligations.

4. Lawful Basis for Processing

We process personal information under the following lawful bases:

  • Consent: Where you have opted into marketing communications or accepted non-essential cookies.

  • Contractual necessity: Where processing is required to deliver our services or fulfil contractual obligations.

  • Legitimate interests: To conduct relevant B2B prospecting, develop commercial relationships and improve our services, where these interests do not override individual rights.

  • Legal obligations: Where processing is necessary to comply with applicable laws.

5. B2B Marketing & Prospecting

As a business development agency, Drumup conducts B2B prospecting and outreach on behalf of itself and its clients.

We may collect professional contact information from publicly available sources, business intelligence platforms and commercial databases to identify individuals who may have a legitimate interest in relevant business services.

We process this information in accordance with UK GDPR and PECR, relying on legitimate interests where appropriate and obtaining consent where required.

You may object to direct marketing or request removal from our prospecting activities at any time by contacting hello@drumup.co.uk.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to support functionality, analyse performance and improve user experience.

These may include:

  • Essential cookies: Required for the website to function correctly.

  • Analytics cookies: Used to understand website traffic and visitor behaviour.

  • Marketing cookies: Used to measure marketing performance and understand business engagement.

We use Squarespace to host our website and may use third-party analytics and marketing platforms.

Where legally required, non-essential cookies will only be activated after obtaining your consent.

You can manage your preferences through our website's cookie settings or your browser.

7. Sharing Personal Information

We may share personal information with trusted third parties where necessary to operate our business and deliver our services.

These may include:

  • Clients receiving our sales and business development services.

  • Website hosting and analytics providers.

  • CRM and marketing platforms, including HubSpot.

  • Business intelligence and communications providers.

  • Professional advisers and regulatory authorities.

We require third-party service providers acting on our behalf to implement appropriate data protection and security measures.

We do not sell personal information to third parties for unrelated marketing purposes.

8. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where international transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection legislation.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or comply with legal obligations.

Information that is no longer required will be securely deleted or anonymised.

Where individuals opt out of marketing communications, we may retain limited information to ensure their preferences are respected.

10. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These include secure business systems, access controls and restricted access to personal information.

11. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Request access to personal information we hold about you.

  • Request correction or deletion of your information.

  • Object to or restrict certain processing activities.

  • Withdraw consent at any time.

  • Request data portability where applicable.

You have an absolute right to object to processing for direct marketing purposes.

To exercise your rights, contact hello@drumup.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for their content, security or privacy practices.

We recommend reviewing the privacy policies of any third-party websites you visit.

13. Changes to This Policy

We may update this policy periodically to reflect changes in our business practices or legal requirements.

The latest version will always be available on our website.

14. Contact Us

If you have any questions about this policy or how we process personal information, please contact:

Drumup
Edinburgh, United Kingdom
Email: hello@drumup.co.uk
Website: drumup.co.uk