Privacy policy

The short version

Beachhut PR runs a single website at beachhutpr.com. The site is mostly static and we collect as little personal data as possible. When you fill in the contact form, the message goes to the office you select. We use Google Analytics to count visits and pages, with no cookies set unless you accept the cookie banner. That is most of it.

Who we are

Beachhut PR is a technology public relations agency with offices in London, Dublin (HQ), and Amsterdam. For data-protection purposes the data controller is Beachhut PR (registered in Ireland). For UK and EU recipients we are subject to the UK GDPR and the EU GDPR respectively, and to the UK Privacy and Electronic Communications Regulations (PECR).

Cookies

This site uses minimal cookies. No cookies are set for analytics unless you accept the consent prompt.

Analytics

We use Google Analytics 4 (GA4) to understand how visitors use the site. GA4 loads on every page, but it starts switched off: until you accept the consent prompt it sets no cookies and stores nothing on your device, sending only anonymous, aggregated signals with your IP address truncated. That is how we can count how many people reach the site at all without tracking anybody. This is Google Consent Mode v2, running with consent defaulted to denied.

If you accept, GA4 switches to full measurement and sets cookies (typically _ga and _ga_*, usually lasting two years). The data we receive is anonymised IP address, page paths, browser type, country-level location, and approximate session counts. We do not use GA4 for advertising, remarketing, Google signals, or to identify individual visitors.

You can change your mind at any time by clearing site data for this domain in your browser, which will trigger the consent prompt again on your next visit. You can also install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

Functional storage

Your consent choice is stored in your browser's localStorage as bh_consent. It does not use a cookie and is never sent off your device.

On the homepage we may suggest the regional site that matches your location. If you click either button on that suggestion, we set one cookie, bh_geo_dismissed, for 30 days, purely so we do not ask you again. It is set only when you press a button, it contains nothing but a flag, and it is not used for analytics or advertising.

Third-party embeds

Our contact page embeds a map of each office via OpenStreetMap. OpenStreetMap may set its own cookies subject to its own policy at wiki.osmfoundation.org/wiki/Privacy_Policy. If you would rather not load these embeds, browser extensions like uBlock Origin can block them.

If you contact us

If you fill in the contact form on beachhutpr.com, we collect the information you provide (first name, last name, email, optional company name, the office you would like us to route the message to, the nature of your enquiry, and your message). This information is sent to the office you select, stored in our customer relationship system, and used only to respond to your enquiry.

Lawful basis: consent (Article 6(1)(a) of the UK GDPR and the EU GDPR) by virtue of you choosing to send the form, or legitimate interest (Article 6(1)(f)) where the enquiry concerns a business matter.

If you do not hear back from us within five working days, you can write directly to hello@beachhutpr.com.

If you apply for a job

If you apply for a role through the application form on our careers pages, we collect what you give us: your name, email address, optional phone number and LinkedIn profile, the office you would like to work from, what you write about yourself, and your CV. We also record roughly where the application came from (for example, a LinkedIn post) and the country it was sent from.

We use this to consider you for roles at Beachhut PR and to contact you about your application. If you tick the separate, optional box on the form, we may also share your CV and contact details with other PR agencies and partners we work with who are hiring; we never do this without that tick, and you can withdraw it at any time by writing to careers@beachhutpr.com. Your CV is stored privately and can only be opened by the people at Beachhut PR who handle hiring. When you apply, we email our hiring team a summary with a link to your application, and send you a confirmation email.

We keep applications and CVs so that we can consider you for the role you applied for and contact you about future roles and programmes at Beachhut. We keep them until you ask us to delete them, which you can do at any time, along with asking to see what we hold, by writing to careers@beachhutpr.com.

If we invite you to the next stage, the emails we send about your application contain a small image that tells us whether the email was opened, and the applicant portal records when you sign in, start and submit your task, so we can follow up at the right time. We use this only to run the hiring process.

We use AI tools to help our team, and never to make decisions. When an application comes in, an AI model (Claude, made by Anthropic) reads your CV and what you wrote and sorts applications into broad groups against the criteria for the role, noting the facts it relied on, so our team can work through a large number of applications. A person at Beachhut PR reads every application and makes every decision. If you complete the written task, we may also check the sections where AI tools are not allowed with an AI-writing detection service (Pangram). Its result only prompts a person to look more closely, and it is never the reason for a decision on its own. Neither service uses what you send us to train its models.

If we invite you to interview, we record and transcribe the interview on Google Meet, and Google's Gemini takes notes of it, so everyone on the hiring panel can review it fairly, and we may also use recordings, transcripts and notes to help train our team. The final round is in person, with one of the panel joining by video so that it can be recorded in the same way. Only Beachhut PR staff can see them, and we keep them for as long as we need them for hiring and for training our team. You can ask us to delete yours at any time by writing to careers@beachhutpr.com.

Lawful basis: consent (Article 6(1)(a) of the UK GDPR and the EU GDPR), which you give when you tick the box on the form, and our legitimate interest (Article 6(1)(f)) in recruiting for our business. If you send us a CV by email instead, we handle it in the same way.

Newsletter

If you subscribe to the Beachhut PR tech-PR newsletter via the footer signup, we collect your first name, last name, and email and use them only to send you the newsletter. Each email contains an unsubscribe link. Lawful basis: consent.

Who we share data with

We use a small number of well-known providers to operate the site and our business:

• Cloudflare (web hosting and CDN). EU data centre by default. Privacy policy.
• Supabase (database, form-submission backend and private storage for job applications). EU region. Privacy policy.
• Resend (transactional email delivery from the contact form and the hiring process). Privacy policy.
• Google Workspace (our internal email and calendar). Privacy policy.
• Anthropic (the AI model that sorts job applications into broad groups for our hiring team). United States. Privacy policy.
• Pangram (AI-writing detection on the written hiring task, as a guide for our reviewers). United States. Privacy policy.
• Google Analytics 4 (loads on every page with no cookies until you accept; full measurement only if you accept). Privacy policy.

Where a provider processes data outside the UK and the EU, we rely on its data processing terms and the standard contractual clauses approved for those transfers.

We never sell your data. We never share contact-form submissions with third parties for marketing purposes.

How long we keep things

Contact-form submissions: 24 months from receipt, then automatically deleted. Job applications and CVs: kept so we can consider you for future roles, until you ask us to delete them. Interview recordings, transcripts and notes: kept for as long as we need them for hiring and for training our team, or until you ask us to delete them. Newsletter subscribers: until you unsubscribe. Anonymised analytics data: retained for the default GA4 period (14 months) and then deleted.

Lawful basis (UK and EU GDPR)

For visitors and recipients in the UK and EU, our lawful basis for setting analytics cookies is consent (Article 6(1)(a) of the UK GDPR and the EU GDPR); we set none until you accept the consent prompt. Before that, GA4 runs in its denied state, storing nothing on your device and producing only anonymous aggregate counts, for which our lawful basis is legitimate interest (Article 6(1)(f)) in knowing whether the site is reaching anyone. Our lawful basis for any direct business outreach is legitimate interest (Article 6(1)(f)) where you are a known professional contact in a relevant industry.

Your rights

Under the UK GDPR and the EU GDPR you can request a copy of the personal data we hold about you, ask us to correct or delete it, withdraw consent at any time, and lodge a complaint with the UK Information Commissioner's Office (ICO) or the Irish Data Protection Commission (DPC). To exercise any of these rights, write to privacy@beachhutpr.com.

Changes to this policy

We will update this page when we change how we handle data. The "last updated" date at the top of the policy reflects the most recent material change. If we change anything material, we will note the change at the top of this page.

Contact

For privacy questions: privacy@beachhutpr.com.
For everything else: hello@beachhutpr.com.