Privacy Notice

Chloé Nelkin Consulting Ltd (“CNC”, “we”, “our” or “us”) is committed to protecting your privacy and handling your personal information responsibly, transparently and securely.

As a communications consultancy built on trusted relationships, we recognise the importance of protecting personal information and respecting the privacy of everyone we work with, including clients, journalists, suppliers and prospective employees.

This Privacy Notice explains how we collect, use, store and protect your personal information when you visit our website, contact us, engage with our services or otherwise interact with us.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

Who we are

Chloé Nelkin Consulting Ltd

Company Registration Number: 08870323
Registered Office: 2nd Floor, 168 Shoreditch High Street, London E1 6RA
Trading Address: The Harleian, 13–14 Buckingham Street, London WC2N 6DF

Chloé Nelkin Consulting Ltd is the Data Controller for the purposes of UK data protection legislation.

What this notice covers

This Privacy Notice applies to our website and to personal information collected through our business activities.

Our website may contain links to third-party websites. Once you leave our website, we have no control over how those organisations collect or use your information, and such websites are not governed by this Privacy Notice. We recommend that you review the privacy policies of any websites you visit.

The information we collect

Depending on how you interact with us, we may collect the following information:

  • your name;
  • organisation;
  • job title;
  • email address;
  • telephone number;
  • postal address;
  • details contained within correspondence you send us;
  • information you provide when making an enquiry;
  • billing information where required for the provision of our services; and
  • recruitment information, including CVs and covering letters.

Professional information

As an arts PR agency, we maintain professional contact details for journalists, editors, broadcasters, producers, venue staff, artists and other industry professionals in order to carry out our work.

This may include:

  • name;
  • organisation or publication;
  • professional email address;
  • professional telephone number; and
  • areas of editorial interest or professional expertise.

Technical information

When you use our website, certain technical information may be collected, including:

  • IP address;
  • browser type;
  • operating system;
  • pages visited; and
  • the date and time of your visit.

This information helps us maintain, improve and protect our website and understand how it is used.

How we collect information

We collect information when you:

  • contact us by email or through our website;
  • request information from us;
  • engage us to provide services;
  • attend an event organised by us;
  • subscribe to receive communications;
  • apply for employment;
  • communicate with members of our team; or
  • engage with us via social media.

We also collect information during the normal course of providing our services, including through meetings, telephone calls, emails and correspondence with clients, journalists, suppliers and other professional contacts.

Professional contact information may also be obtained from publicly available sources, including company websites, theatre websites, venue websites, press offices and professional directories where this information is relevant to our work.

How we use your information

As a PR agency, many of our services rely on maintaining trusted professional relationships with journalists, artists, producers, venues, funders and cultural organisations. We only collect and use personal information where it is relevant to those professional relationships and necessary to deliver our services.

We may use personal information to:

  • respond to enquiries;
  • provide our PR and communications services;
  • manage client and supplier relationships;
  • distribute press releases and media information;
  • invite relevant contacts to press nights, launches and other events;
  • administer recruitment;
  • perform our contractual obligations;
  • maintain, improve and protect our website and services;
  • notify you about changes to our services;
  • maintain our business records; and
  • comply with legal and regulatory obligations.

Working with clients

As part of providing our PR and communications services, we process information on behalf of our clients to support publicity campaigns and media engagement.

This may include biographies, headshots, production information, cast and creative team details, press releases, publicity images, interview arrangements, social media handles and other materials supplied by our clients for promotional purposes.

We only use this information for the purposes of delivering our services, fulfilling our contractual obligations and supporting our clients’ communications activities in accordance with applicable data protection legislation.

Our lawful basis for processing

Depending on the circumstances, we rely on one or more of the following lawful bases:

  • Responding to enquiries: Legitimate Interests
  • Providing PR and communications services: Contract
  • Managing client relationships: Legitimate Interests
  • Maintaining media contacts: Legitimate Interests
  • Sending press releases and media invitations: Legitimate Interests
  • Recruitment: Legitimate Interests
  • Annual newsletter: Consent
  • Legal, financial and regulatory obligations: Legal Obligation

Media contacts and press distribution

A core part of our work is promoting our clients to journalists, broadcasters, reviewers, producers and other media professionals.

To do this, we maintain carefully curated media lists using professional contact information obtained through publicly available sources, direct contact with individuals, previous professional relationships and information voluntarily provided to us.

We only use this information to send press releases, media alerts, invitations and story opportunities that we reasonably believe are relevant to recipients’ professional roles and interests.

If you no longer wish to receive communications from us, you may unsubscribe at any time or contact us directly. We will promptly update or remove your details from our records.

We never sell or share our media contacts with third parties for their own marketing purposes.

Marketing communications

From time to time we may send marketing communications, including our annual Christmas card.

Where required by law, we will only send marketing communications where you have given your consent or where another lawful basis applies.

Every marketing email includes an unsubscribe option and you may opt out at any time.

If you unsubscribe, we may retain your email address on a suppression list solely to ensure we do not contact you again in error.

Recruitment

Recruitment is generally managed through external recruitment partners.

Where candidates apply directly to us, we will use the information provided to assess applications, communicate during the recruitment process and, where appropriate, retain details with the applicant’s permission for future opportunities.

Unless there is a legal reason to retain information for longer, unsuccessful applications will normally be retained for no more than two years.

Sharing your information

We treat personal information confidentially and only share it where necessary to operate our business or where we are required to do so by law.

Within CNC, personal information is only accessible to members of our team who need it to carry out their roles and deliver our services.

We may share personal information with trusted third-party service providers who support our business operations, including:

  • website and IT providers;
  • Microsoft 365;
  • Mailchimp;
  • Xero;
  • BrightHR;
  • Canva;
  • Google Workspace;
  • Dropbox; and
  • our professional advisers, including accountants and solicitors.

These providers are only given access to the information necessary to perform their services and are required to process personal information securely and in accordance with applicable data protection legislation.

We may also disclose personal information where we are required to do so by law or where we reasonably believe disclosure is necessary to:

  • comply with a legal obligation or regulatory requirement;
  • establish, exercise or defend legal claims;
  • protect the rights, property or safety of CNC, our clients, our team or others; or
  • prevent or detect fraud or other unlawful activity.

We will never sell your personal information or share it with third parties for their own marketing purposes.

International transfers

Some of the third-party services we use may process personal information outside the United Kingdom.

Where this happens, we ensure that appropriate safeguards are in place to protect your personal information in accordance with UK data protection legislation.

Keeping your information secure

Protecting personal information is extremely important to us.

We have implemented appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Personal information is stored using secure systems and password-protected business accounts, with access limited to those who require it for legitimate business purposes.

Whilst we take appropriate steps to protect personal information, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

We will only retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory and accounting requirements.

Retention periods vary depending on the type of information and the purpose for which it was collected. We regularly review the information we hold and securely delete or anonymise information that is no longer required.

Your rights

Under UK data protection legislation you have the right to:

  • request access to the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal information in certain circumstances;
  • request restriction of processing;
  • object to certain types of processing, including direct marketing;
  • withdraw your consent where processing is based on consent; and
  • request transfer of your information where applicable.

We aim to keep personal information accurate and up to date. If you believe any information we hold about you is incorrect, please let us know and we will correct it promptly.

If you wish to exercise any of your rights, please contact us using the details below.

Complaints

If you have any concerns about how we have handled your personal information, we hope you will contact us first so that we have the opportunity to resolve the matter.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO).

Further information can be found at www.ico.org.uk.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legislation, guidance or the way we operate.

The most recent version will always be published on this website together with the date it was last updated.

Contact us

If you have any questions, comments or requests relating to this Privacy Notice or the way we process your personal information, please contact: chloe@chloenelkinconsulting.com.

Last updated: July 2026