Last updated:    27th October 2026

This notice explains how Papermule Ltd ("Papermule", "we", "us") uses personal data collected through our website, www.papermule.co.uk, and from the business contacts we deal with.

Who we are

Papermule Ltd is responsible for the personal data described in this notice under UK data protection law. We are registered with the Information Commissioner's Office (ICO), the UK data protection regulator, under registration number ZB172830.

You can contact us about your personal data by email at privacy@papermule.com, by phone on +44 (0) 1379 650330, or by post at Papermule Ltd, Unit 16/17 Diss Business Centre, Diss, Norfolk, IP21 4HD, United Kingdom.

Who this notice covers

This notice covers visitors to our website, people who get in touch with us, and people at our clients, prospective clients and suppliers whom we deal with. It does not cover our own staff, who have a separate privacy policy.

It also does not cover personal data we handle for our clients when we run their software or services. In that case the client decides how the data is used and we follow their instructions. If you think we hold your data on behalf of a client, contact us and we will pass your request on.

Our services are for businesses, and we do not knowingly collect personal data from anyone under 18.

What personal data we use and why

The personal data we hold depends on how you deal with us.

  • Website visitors. Technical information such as your IP address, browser type and the pages you view, collected through cookies. We use it to keep the website working and secure and to understand how it is used. We set cookies that are not strictly necessary only if you accept them (see our Cookie Policy). Our legal basis is your consent for those cookies and our legitimate interests in running and securing the website.
  • People who contact us. If you email us, fill in a form or book a meeting, we hold your name, work contact details, job title, company and what you tell us. We use it to reply to you and deal with your enquiry. Our legal basis is our legitimate interests in responding to enquiries.
  • Business contacts. If you work for a client, a prospective client or a supplier, or attend one of our events, we hold your work contact details, job title and company, and a record of our dealings with you, including contracts, support requests and how you interact with our emails. We use it to deliver and support our services, manage contracts, keep in touch, and tell you about products, services and events relevant to your role. We contact you only in a professional capacity, and you can opt out of marketing at any time. Our legal basis is our contract with your organisation, where there is one, and our legitimate interests in managing business relationships and promoting our services to businesses in the publishing and media sector.

We collect this data from you, or from your organisation if you are its contact with us. We do not ask for sensitive personal data, such as health information. Please do not include it in your messages.

Who we share personal data with

We do not sell personal data. We use suppliers to run our business, such as providers of our website, contact database, email, website analytics, file storage, e-signature and support tools, and they handle personal data on our instructions. Our forms also use Google reCAPTCHA for spam protection. We may also share personal data where the law requires it, with professional advisers and with regulators such as the ICO.

If you would like to know which organisations have received your personal data, email privacy@papermule.com.

Some of our suppliers may process personal data outside the UK, including in the United States. Where they do, the transfer is protected by an approved safeguard, such as the supplier's certification under the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep personal data

We keep personal data only for as long as we need it. In practice:

  • Business contacts: while we have a relationship with you or your organisation, and normally for up to seven years after we last had meaningful contact (a reply, a meeting, a proposal or attendance at an event).
  • Opt-outs: if you ask us to stop contacting you, your email address stays on a suppression list so that we do not contact you again.
  • Client and supplier records: normally for around six years after the contract ends.
  • Cookies and website analytics: see our Cookie Policy.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it (including objecting to direct marketing), to receive it in a portable format where that applies, and to withdraw your consent where we rely on it.

To use any of these rights, email privacy@papermule.com. You can make a request in any form, and it is free. We may ask you to confirm who you are. We will reply within one month. If your request is complex, we may need up to two more months, and we will tell you why. If you ask us to erase your personal data, we keep a minimal record of the request for three years, to show that we dealt with it.

To stop marketing emails, use the unsubscribe link in any of our emails or email privacy@papermule.com.

Complaints

Please contact us first at privacy@papermule.com so that we can try to put things right. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113.

Cookies, security and changes

Our website uses cookies, and we ask for your permission before setting any that are not strictly necessary. Our Cookie Policy explains how to change your choice.

We protect personal data with appropriate technical and organisational measures, including access controls so that only staff who need it can see it.

We may update this notice from time to time. The date at the top shows when it last changed.