If anything here seems vague, strange, or confusing, please send us an email about it, and we'll get back to you as soon as possible. You can reach us at privacy@archetype.co.
About Us
Setting the standard for the next generation of global agencies, Archetype partners with category-defining innovators and industry leaders to create the world’s most beloved brands. We are 650 curious and creative people spread across 20 offices around the world who work together, knowing that our clients’ success is our own.
In this privacy policy, we will explain how we use the personal information we hold about you as a company, whether we collected that personal information through our website, through our work with our customers or suppliers, or in any other way. Personal information is any information that identifies you personally, such as your name, contact information, photo, etc.
Archetype consists of various legal entities. This privacy statement is published on behalf of Archetype Agency. Therefore, when we refer to “Archetype,” “we,” or “our” in this privacy statement, we are referring to the specific company within Archetype Agency that is responsible for processing your data. Archetype Agency Limited is the data controller and is responsible for this website.
What personal information do we collect about you?
We collect your information only in the following ways.
Information you provide
Here is the information you have provided to us. For example, if you filled out a form on our website or sent an email to one of our office’s email addresses. You may also have applied for a job and sent us your resume. It may also include information that you provide to us in connection with work we perform on behalf of one of our clients—for example, when you organize an event for a client, when you participate in contests we host on social media on behalf of a client, or when we assist a client in responding to its inquiries.
Information we collect automatically
Our cookie policy can be found here.
Information we receive from third parties or other sources
When we work with a client, that client may provide us with information about you. You may be an employee of our client or a contact whom the client would like us to reach out to. We may also purchase access to services that provide personal information about media contacts, for example through Cision or IRISpr.
Publicly accessible personal information
From time to time, we may collect personal information about you (identity and contact information) that is contained in publicly available sources (including open-source datasets or media reports) or that you or a third party may otherwise make public (for example, through speeches at events or the publication of articles or other reports or posts on social media platforms).
Our Legal Basis
We usually use your personal data in the following circumstances:
- When we need to perform the contract we are about to enter into or have entered into with you.
- Where this is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these interests.
- When we must comply with a legal or regulatory obligation.
As a general rule, we do not rely on consent as the legal basis for processing your personal data, except when sending direct marketing communications via email or text message. You have the right to withdraw your consent to marketing at any time by contacting us.
Categories of Data Collected
In connection with the provision of our websites and services, we may collect and process various types of personal information about you for various processing purposes. The types of personal information we collect depend on who you are and how you use our website and services, and include the following.
| Category | Data elements |
|---|---|
| Identity data | First name; last name. |
| Contact data | Home address; billing and/or delivery address; e-mail address; telephone number. |
| Respondent data | Account username; password; first name; last name; date of birth; gender; country; nationality; username; job title; social status; sexual orientation; information about whether you have participated in a survey or questionnaire, answers and comments; survey responses, participation in promotions or contests. |
| Financial data | Photos; video recordings. |
| Behavioral data | Data relating to your browsing activity or your interaction with our e-mails, obtained through the use of cookies, pixel tags and other similar technologies; information on the start of your current or previous sessions; details of the products you have consulted or purchased via the Sites. |
| Technical data | IP address; browser type and operating system; geolocation, to ensure we show you the right notices and information; any other unique number assigned to a device. |
| Data on job applicants | Date of birth; gender; country; nationality; resume; work experience; dietary requirements; any other personal information you may provide before or during the provision of services to us. |
| Marketing and Communications Data | Marketing preferences; service communication preferences. |
| Publicly accessible data | Information about articles (or similar) you may have published; information about your interests or affiliations or your publicly expressed positions on political issues, business affairs, etc. |
How do we use your personal information?
We use your personal information for the purposes set forth in this section. If we wish to make changes to these purposes, or if we wish to use your personal information for purposes not listed in this section, we will notify you using the contact information we have on file for you.
| How we use it | Our legal basis for processing |
|---|---|
| If you browse our sites | When you browse our websites, we collect and process behavioral and technical data to help us understand how you use and navigate our websites. It is in our legitimate interest to use personal information to ensure secure and efficient access to our websites and to make improvements to them, or it is necessary for us to use your personal information to fulfill our obligations under any contract we may have with you for services. |
| If you use our site's interactive features | We collect and use personal information about you when you use certain features of our website. For example, depending on the nature of your request, we may process your identification data, contact information, and certain behavioral and technical data when you use the contact form to reach out to us. It is in our legitimate interest to use personal information so that we can respond to your requests. |
| If you have a general question | There are several ways to contact us. In particular, our website features a “Contact Us” page, which invites you to submit general inquiries about our sites via email or through our form. It is in our legitimate interest to use your personal information as described above to ensure that we are able to respond to your inquiry, provide quality service, and improve our customer service. |
| If you register for or participate in one of our events | From time to time, we may organize and host events to promote our business, for charitable causes, or for other reasons. We may process your personal identification and contact information to communicate with you about such events when you have specifically requested information about them or when we have another legal basis for sending you this information. If you participate in one of our events, we may use your personal identification and contact information to record your participation in the event and for related record-keeping purposes. |
| If we use cookies | We and our third-party partners use cookies, web beacons, pixel tags, and other similar technologies to collect data from the devices you use to access our website and services, as well as from any emails you receive. The data collected includes behavioral and technical data. When we use personal information collected through analytics cookies to analyze how you use our websites, it is in our legitimate interest to use your personal information to improve our websites and services. |
| If we send you marketing communications | We use your personal information, contact information, and marketing and communication data to send you (or the organization you represent) marketing communications by mail and/or email/text message. Our marketing will include press releases and information about us, our website, our services, any events we may organize, and the offers and promotions we provide from time to time. It is in our legitimate interest to use your personal information for marketing purposes, such as to determine what marketing content might be of interest to you. |
| If we have hired you to provide us with products or services | If we have engaged you or the organization you represent to provide us with products or services (such as IT support or financial advice), we will collect and process your personal information in order to manage our relationship with you or the organization you represent, to receive products and services, and, where applicable, to provide our Services to third parties. We need to use your personal information to fulfill our obligations under any contract we may have with you or with the organization you represent. |
| Implementation of Our Security Measures | It is in our legitimate interest to process your personal information in order to ensure the security of our premises and to provide a safe environment for our staff and visitors to our premises. |
| Compliance with Our Legal Obligations | We have a legal obligation to use your personal information to comply with any legal obligation imposed on us, such as a court order. |
How long do we keep your personal information?
We will retain your personal data only for as long as necessary to achieve the purposes for which we collected it, including to comply with legal, accounting, or reporting requirements. We will retain personal data only for as long as necessary to fulfill a customer relationship or another type of contract. If you apply for one of our job openings and are not hired, we will delete your information after six months.
To determine the appropriate retention period for personal data, we take into account the amount, nature, and sensitivity of the personal data, the potential risk of harm associated with the unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and the possibility of achieving these objectives by other means, as well as applicable legal requirements. These retention periods are set forth in our internal retention policy .
Under certain circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without prior notice.
In some cases, you may ask us to delete your data: see the right to erasure below for more information.
With whom do we share your personal information?
We may share your personal information internally (but only with teams that need access to it) or with certain third parties. In addition, as a member of the Next 15 Group, we may share certain personal data within the Next 15 Group, generally because we use a shared service (such as Next 15 IT or Legal).
We will do so only for the purpose described in the section “How Do We Use Your Personal Information?” above. We may share your personal data with the following types of third parties:
- Service providers acting as subcontractors, for example those providing IT and systems administration services.
- Professional advisors acting as processors or joint processors, including lawyers, bankers, auditors and insurers who provide consulting, banking, legal, insurance and accounting services.
- Regulators and other authorities acting as processors or joint controllers based in the UK or other relevant jurisdictions that require reporting of processing activities in certain circumstances.
- Email marketing and CRM specialists who help us manage our marketing database and send our marketing communications via mail and email.
We store personal information with several different IT service providers, but we work only with approved providers who have implemented appropriate security measures to protect this data.
We require all third parties to respect the security of your personal data and to process it in accordance with the law. We do not authorize our third-party service providers to use your personal data for their own purposes and only allow them to process your personal data for specific purposes and in accordance with our instructions.
What happens if you don't provide us with your personal information?
When we are required to collect personal data in accordance with the law or under the terms of a contract we have entered into with you, and you do not provide that data when requested, we may not be able to fulfill the contract we have entered into or are attempting to enter into with you (for example, to provide you with goods or services). In that case, we may have to cancel a product or service you have with us, but we will notify you if that is the case at that time.
Do we make automated decisions about you?
No, we do not make automated decisions about you.
Do we use cookies to collect personal data about you ? We do, but only to better understand how you use our website. Please see our cookie policy to learn more.
Do we transfer your personal information outside the EEA?
We have several offices located around the world, and in some cases, we need to share personal information with teams located outside the EEA. We have therefore entered into a specific intra-group agreement approved by the European Commission that ensures these transfers of personal data receive the same level of protection as in Europe.
We may also transfer your personal data outside the EEA as a result of storing your information in connection with our technology services (for example, Dropbox).
Whenever we transfer your personal data outside the EEA, we ensure that it is afforded a similar level of protection by making sure we have entered into specific contracts approved by the European Commission, which provide the same level of protection for personal data as in Europe.
What are your rights?
Under the law, you have nine important rights regarding your personal information. To learn more about these rights, contact the data protection authority in your country.
| Law | What this means |
|---|---|
| 1. Object to the processing | You have the right to object to certain types of processing, including processing for direct marketing purposes. |
| 2. Stay Informed | You have the right to receive clear, transparent and easily understandable information about how we use your information and about your rights. |
| 3. Access | You have the right to access your information (if we process it). This is so that you are aware of what information we have and can verify that we are using your information in accordance with data protection laws. |
| 4. Correction | You have the right to correct your information if it is inaccurate or incomplete. |
| 5. Deletion | This right is also known as the “right to be forgotten.” This means that you can ask us to delete all the personal information we have about you (when there is no compelling reason for us to continue using it). This is not a blanket right to erasure; there are exceptions. But if you ask us to delete it, we will. |
| 6. Restrict processing | You have the right to “block” or delete any further use of your information. When processing is restricted, we may still store your information, but we can no longer use it. We maintain a list of individuals who have requested that further use of their information be “blocked” to ensure compliance with this restriction in the future. |
| 7. Data Portability | You have the right to access and reuse your personal information for your own purposes across different services. For example, you can easily and securely move, copy, or transfer your information between our technical services and theirs, without affecting their ease of use. |
| 8. File a complaint | You have the right to lodge a complaint about the way we manage or process your personal information with your national data protection authority. |
| 9. Withdraw Consent | If you have given your consent to everything we do with your personal information, you have the right to withdraw your consent at any time. (But if you do so, that does not mean that everything we did with your personal information with your consent prior to that date was illegal.) This includes your right to withdraw your consent to our use of your personal information for marketing purposes. |
We generally respond to requests and provide information free of charge. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We may also refuse to respond to your request under these circumstances.
We may need to ask you for specific information to help us verify your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure designed to ensure that personal data is not disclosed to individuals who are not authorized to receive it.
We strive to respond to all legitimate requests within one month. Sometimes, it may take longer than one month if your request is particularly complex or if you have submitted multiple requests. In that case, we will notify you and keep you informed.
How to contact us
We can contact you by phone, email, or through social media. If you prefer a specific method of contact, please let us know.
If you have any questions, you can contact us at the following address:
- Entity
- Archetype Agency Limited
- Address
- 60 Great Portland Street, London [zip code to be confirmed]
- privacy@archetype.co
- Phone
- +44 20 3128 8000
- GDPR Contact in France
- rgpd@outcastfrance.com
Additional information for US residents
This California Consumer Privacy Statement (“Statement”) supplements Archetype’s Privacy Policy. It applies only to California consumers and pertains to the personal information we collect both online and offline.
Categories of Personal Information Collected
We have collected the following categories of personal information over the course of the last twelve (12) months.
| Category | Data elements | Third parties with whom they are shared |
|---|---|---|
| A. Identifiers | Personal information, such as real name, alias, mailing address, telephone or cell phone number, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, and account name. | Our affiliates and subsidiaries; suppliers that provide services on our behalf; professional services organizations; our business partners; advertising networks; Internet service providers; data analytics providers; operating systems and platforms; social media platforms. |
| B. Personal Information (California Consumer Records Act) | Name, contact information, education, employment, work history, and financial information. | Our affiliates and subsidiaries; suppliers that provide services on our behalf; professional services organizations; our business partners; advertising networks; Internet service providers; data analytics providers; operating systems and platforms; social media platforms. |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information. | Our affiliates and subsidiaries; suppliers who provide services on our behalf; professional services organizations; our business partners; advertising networks; data analytics providers; operating systems and platforms. |
| F. Internet Activity | Browsing history, search history, online behavior, data regarding your interests, and interactions with our websites, apps, systems, and advertisements. | Our affiliates and subsidiaries; suppliers that provide services on our behalf; professional services organizations; our business partners; advertising networks; Internet service providers; data analytics providers; operating systems and platforms; social media platforms. |
| G. Geolocation data | Location of the device. | Our affiliates and subsidiaries; suppliers that provide services on our behalf; professional services organizations; our business partners; advertising networks; Internet service providers; data analytics providers; operating systems and platforms; social media platforms. |
| H. Audio, electronic, or sensory information | Images and audio, video, or call recordings created in the course of our business activities. | Our affiliates and subsidiaries; suppliers who provide services on our behalf; professional services organizations; our business partners; operating systems and platforms. |
| I. Professional Information | Business contact information so that we can provide you with our services on a professional basis. | Our affiliates and subsidiaries; suppliers that provide services on our behalf; professional services organizations; our business partners; advertising networks; Internet service providers; data analytics providers; operating systems and platforms; social media platforms. |
We may also collect other personal information outside of these categories when you interact with us in person, online, by phone, or by mail in connection with:
- receiving assistance through our customer support channels;
- participation in customer surveys or contests;
- to facilitate the delivery of our services and the handling of your requests.
Retention Periods
We will use and retain the personal information we collect as necessary to provide the Services or to:
- Category A: as long as the user has an account with us.
- Category B: as long as the user has an account with us.
- Category D: for as long as required by law.
- Category F: as long as the user has an account with us.
- Category G: as long as the user's consent remains valid.
- Category H: for as long as necessary, in accordance with our retention schedule.
- Category I: for as long as required by law.
To learn more about how we disclose personal information, see the section "With whom do we share your personal information?"
Your Rights
You have rights under certain data protection laws in the United States. However, these rights are not absolute, and in some cases, we may deny your request in accordance with the law. These rights include:
- the right to know whether or not we are processing your personal data;
- the right to access your personal data;
- the right to correct inaccuracies in your personal data;
- the right to request the deletion of your personal data;
- the right to obtain a copy of the personal data you have previously shared with us;
- the right to be free from discrimination in the exercise of your rights;
- the right to object to the processing of your personal data if it is used for targeted advertising (or sharing as defined by the California Privacy Act), the sale of personal data, or profiling in connection with decisions that produce legal or similar effects.
To exercise these rights, you can contact us by email at privacy@archetype.co.
Verification of Applications
To protect your privacy and ensure security, we will take steps to verify your identity before granting you access to your personal information or responding to your request. If you request access to your personal information or its deletion, we may ask you to provide one of the following pieces of information: your email address, the name of the Archetype representative with whom you typically interact, and the date of your most recent interaction with an Archetype representative. In addition, if you request that we provide you with specific personal information, we will ask you to sign a declaration under penalty of perjury attesting that you are the consumer whose personal information is the subject of the request.
California's "Shine the Light" Law
Section 1798.83 of the California Civil Code, also known as the “Shine The Light” law, allows our users who reside in California to request and receive from us, once a year and free of charge, information regarding the categories of personal information (if any) that we have disclosed to third parties for direct marketing purposes, as well as the names and addresses of all third parties with whom we have shared personal information during the previous calendar year. If you reside in California and wish to make such a request, please send us your request in writing using the contact information provided in the “How to Contact Us”section.
"Do Not Track" Signals
California law requires us to inform you about how we respond to “Do Not Track” (DNT) signals from web browsers. Since there is currently no industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
Other country-specific requirements
Australia
International Data Transfers. If your personal data must be transferred to Australia, we will take all reasonable measures to ensure that the foreign recipient does not violate the applicable laws regarding your personal data. This will include, at a minimum, due diligence regarding the third party and ensuring that the contract contains the relevant clauses to guarantee the protection of your personal data.
Regulatory agency: Office of the Australian Information Commissioner (OAIC): oaic.gov.au.
China
International Data Transfers. If your personal data needs to be transferred to China, we will enter into a data transfer agreement that will include the standard contractual clauses provided by the Cyberspace Administration of China (CAC).
Regulatory agency: Chinese Cyberspace Administration (CAC): cac.gov.cn.
Singapore
International Data Transfers. If your personal data must be transferred outside of Singapore, we will take all reasonable measures to ensure that the overseas recipient provides a level of protection equivalent to that afforded to you under the PDPA.
Regulatory body: Personal Data Protection Commission of Singapore (PDPC).