Home/Privacy
Legal
Last updated 1 October 2026. Plain-English summary of what we collect, why, and how to opt out.
Beachhut PR runs a single website at beachhutpr.com. The site is mostly static and we collect as little personal data as possible. When you fill in the contact form, the message goes to the office you select. We use Google Analytics to count visits and pages, with no cookies set unless you accept the cookie banner. That is most of it.
Beachhut PR is a technology public relations agency with offices in London, Dublin (HQ), and Amsterdam. For data-protection purposes the data controller is Beachhut PR (registered in Ireland). For UK and EU recipients we are subject to the UK GDPR and the EU GDPR respectively, and to the UK Privacy and Electronic Communications Regulations (PECR).
This site uses minimal cookies. No cookies are set for analytics unless you accept the consent prompt.
We use Google Analytics 4 (GA4) to understand how visitors use the site. GA4 loads on every page, but it starts switched off: until you accept the consent prompt it sets no cookies and stores nothing on your device, sending only anonymous, aggregated signals with your IP address truncated. That is how we can count how many people reach the site at all without tracking anybody. This is Google Consent Mode v2, running with consent defaulted to denied.
If you accept, GA4 switches to full measurement and sets cookies (typically _ga and _ga_*, usually lasting two years). The data we receive is anonymised IP address, page paths, browser type, country-level location, and approximate session counts. We do not use GA4 for advertising, remarketing, Google signals, or to identify individual visitors.
You can change your mind at any time by clearing site data for this domain in your browser, which will trigger the consent prompt again on your next visit. You can also install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Your consent choice is stored in your browser's localStorage as bh_consent. It does not use a cookie and is never sent off your device.
On the homepage we may suggest the regional site that matches your location. If you click either button on that suggestion, we set one cookie, bh_geo_dismissed, for 30 days, purely so we do not ask you again. It is set only when you press a button, it contains nothing but a flag, and it is not used for analytics or advertising.
Our contact page embeds a map of each office via OpenStreetMap. OpenStreetMap may set its own cookies subject to its own policy at wiki.osmfoundation.org/wiki/Privacy_Policy. If you would rather not load these embeds, browser extensions like uBlock Origin can block them.
If you fill in the contact form on beachhutpr.com, we collect the information you provide (first name, last name, email, optional company name, the office you would like us to route the message to, the nature of your enquiry, and your message). This information is sent to the office you select, stored in our customer relationship system, and used only to respond to your enquiry.
Lawful basis: consent (Article 6(1)(a) of the UK GDPR and the EU GDPR) by virtue of you choosing to send the form, or legitimate interest (Article 6(1)(f)) where the enquiry concerns a business matter.
If you do not hear back from us within five working days, you can write directly to [email protected].
If you apply for a role through the application form on our careers pages, we collect what you give us: your name, email address, optional phone number and LinkedIn profile, the office you would like to work from, what you write about yourself, and your CV. We also record roughly where the application came from (for example, a LinkedIn post) and the country it was sent from.
We use this to consider you for roles at Beachhut PR and to contact you about your application. If you tick the separate, optional box on the form, we may also share your CV and contact details with other PR agencies and partners we work with who are hiring; we never do this without that tick, and you can withdraw it at any time by writing to [email protected]. Your CV is stored privately and can only be opened by the people at Beachhut PR who handle hiring. When you apply, we email our hiring team a summary with a link to your application, and send you a confirmation email.
We keep applications and CVs for up to 12 months after they arrive, so that we can consider you for other roles in that time, and then delete them automatically. You can ask us to delete your application sooner, or to see what we hold, by writing to [email protected].
Lawful basis: consent (Article 6(1)(a) of the UK GDPR and the EU GDPR), which you give when you tick the box on the form, and our legitimate interest (Article 6(1)(f)) in recruiting for our business. If you send us a CV by email instead, we handle it in the same way.
If you subscribe to the Beachhut PR tech-PR newsletter via the footer signup, we collect your first name, last name, and email and use them only to send you the newsletter. Each email contains an unsubscribe link. Lawful basis: consent.
We use a small number of well-known providers to operate the site and our business:
We never sell your data. We never share contact-form submissions with third parties for marketing purposes.
Contact-form submissions: 24 months from receipt, then automatically deleted. Job applications and CVs: up to 12 months from receipt, then automatically deleted. Newsletter subscribers: until you unsubscribe. Anonymised analytics data: retained for the default GA4 period (14 months) and then deleted.
For visitors and recipients in the UK and EU, our lawful basis for setting analytics cookies is consent (Article 6(1)(a) of the UK GDPR and the EU GDPR); we set none until you accept the consent prompt. Before that, GA4 runs in its denied state, storing nothing on your device and producing only anonymous aggregate counts, for which our lawful basis is legitimate interest (Article 6(1)(f)) in knowing whether the site is reaching anyone. Our lawful basis for any direct business outreach is legitimate interest (Article 6(1)(f)) where you are a known professional contact in a relevant industry.
Under the UK GDPR and the EU GDPR you can request a copy of the personal data we hold about you, ask us to correct or delete it, withdraw consent at any time, and lodge a complaint with the UK Information Commissioner's Office (ICO) or the Irish Data Protection Commission (DPC). To exercise any of these rights, write to [email protected].
We will update this page when we change how we handle data. The "last updated" date at the top of the policy reflects the most recent material change. If we change anything material, we will note the change at the top of this page.
For privacy questions: [email protected].
For everything else: [email protected].