Privacy Policy

Privacy Statement

We know you care about your privacy and security, so we treat your information with the highest standards of confidentiality and security.

We are committed to protecting your privacy. We will only use the information that we hold about you lawfully, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), applicable changes introduced by the Data (Use and Access) Act 2025, and any other applicable regulatory requirements.

We do not seek to collect or process special category personal data. If we become aware that such data has been provided to us, we will handle it in accordance with data protection law and, where appropriate, delete or suppress it.

We take reasonable steps to support the accuracy of the personal data we hold, including validation, suppression, and industry-standard cleansing processes. However, as a significant proportion of the data we process is received from third party sources, we are unable to guarantee the accuracy of all data at the point of receipt. If you believe any information we hold about you is inaccurate, please contact us at compliance@auramediagroup.co.uk or by writing to us at: DPO, Aura Media Group Limited, Ground Floor, Suite F, Breakspear Park, Breakspear Way, Hemel Hempstead, HP2 4TZ, and we will endeavour to correct it.

Introduction

This privacy policy applies to YourOffers.co.uk, a trading style of Aura Media Group Limited ("Aura Media Group", "we", "us", "our"), company registration number 11239047, registered in England and Wales. Our registered office is: Aura Media Group Ltd, c/o RSZ Accountancy Limited, Archdeacons House, Ipswich, Suffolk, IP1 3BX.

Aura Media Group is also the data controller behind the auramediagroup.co.uk privacy policy. If you arrived at this page from a link on a co-registration or offers website, that site will have referenced Aura Media Group as a named data partner — this policy covers how we handle your data once received.

Aura Media Group is registered as a data controller with the Information Commissioner's Office (ICO) in the United Kingdom, registration number ZA324659. We seek to comply with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and applicable changes introduced by the Data (Use and Access) Act 2025.

How we received your data

We received your personal data indirectly — you will have registered with one of our co-registration partner websites (such as an online competition, prize draw, offers, lifestyle, or comparison site). At the point of registration, that website's fair processing notice and privacy policy named Aura Media Group / YourOffers.co.uk as a data recipient and included a link to our privacy policy.

On receipt of your details, we validate your name, telephone number, and email address to support accuracy before any further processing takes place. We then send a transparency email within 24 hours to notify you that your data has been received, explain how it will be used, and give you a clear opportunity to opt out before any marketing contact is made.

Aura Media Group maintains a compliance framework for the sourcing of personal data. This includes due diligence processes, data protection assessments, and quality checks designed to support the fair and lawful collection of data by our sources. The depth and nature of these checks may vary depending on the source type and the data being supplied.

Why Aura Media Group processes personal data

We process personal data to enable us to fulfil our function as a data marketing agency — receiving consumer data from co-registration sources and supplying it to our clients for use in their direct marketing activities.

The marketing contact you may receive will come from our third party clients and their brands, operating in sectors relevant to you. Those clients may contact you by telephone or post. We do not supply your data for email or SMS marketing.

Lawful basis for processing

UK GDPR requires us to have a lawful basis for processing your personal data. The lawful basis we rely on for the processing described in this policy is legitimate interests (Article 6(1)(f) UK GDPR).

We have carried out a Legitimate Interests Assessment (LIA) and are satisfied that our legitimate interest in operating a data marketing business, and the legitimate interest of our clients in reaching consumers with relevant offers, is not overridden by your interests or fundamental rights and freedoms. Factors supporting this conclusion include:

Your data was collected at a site where Aura Media Group was named as a data recipient in the fair processing notice.
Our validation step, which supports data accuracy before processing.
Our transparency email, sent within 24 hours of receipt, which notifies you of processing before any marketing contact takes place and gives you a clear opportunity to opt out.
Screening of data against the Telephone Preference Service (TPS) and Mailing Preference Service (MPS) where required or appropriate.
A maximum retention period of 24 months from the date of original receipt.

Aura Media Group maintains records of its legitimate interests assessments, source due diligence checks, and data supply records to support its reliance on legitimate interests where applicable.

You have the right to object to processing based on legitimate interests at any time. See the How to opt out section below.

For completeness, the six lawful bases available under UK GDPR are:

Consent — the individual has given clear consent for processing for a specific purpose.
Contract — processing is necessary for a contract with the individual.
Legal obligation — processing is necessary to comply with the law.
Vital interests — processing is necessary to protect someone's life.
Public task — processing is necessary to perform a task in the public interest.
Legitimate interests — processing is necessary for legitimate interests of the controller or a third party, unless overridden by the individual's rights.

What personal information do we hold about you?

We hold personal information received from our co-registration data partners. This may include, but is not limited to:

Your name
Your postal address
Your telephone number
Your email address
Your age and gender (where provided)
Selected lifestyle or demographic information provided as part of a survey or questionnaire (for example, your utility or telecoms provider)
IP address and device type captured at point of data collection
Records of any complaints or correspondence with us

We do not seek to process any data classified as special category or sensitive personal data under UK GDPR (such as racial or ethnic origin, political views, religious beliefs, health data, or sexual orientation). If we become aware that such data has been provided to us, we will handle it in accordance with data protection law and, where appropriate, delete or suppress it.

How we use your data

Your data may be used by Aura Media Group, our clients, and their brands for the following purposes:

Telephone marketing — your telephone number may be made available to our clients for outbound telemarketing, subject to screening against the Telephone Preference Service (TPS) and governed by agreed usage terms.
Direct mail — your postal address may be made available to our clients for direct mail campaigns, subject to screening against the Mailing Preference Service (MPS) and governed by agreed usage terms.
Verification and database enhancement — to help our clients keep their databases accurate and make better decisions about how and when to communicate with you.
Segmentation and profiling — to provide relevant and targeted marketing by matching your profile to appropriate offers and services. Information we provide to clients may be combined with data they already hold about you.
Data linking — your data may be used to link offline data with online identifiers for targeting and identity resolution purposes, helping marketers deliver a more relevant service.
Identity verification and fraud prevention — to help our clients protect consumers and themselves from financial harm such as fraud or identity theft.

We do not supply your data for email or SMS marketing.

Your data may be shared with one or more third party data controllers — our clients and their brands — who operate in sectors relevant to you. These clients will have either been named or described at the point your data was originally collected. You can contact us at any time to find out more about who your data has been shared with.

The sectors in which our clients operate include (this list is not exhaustive and is reviewed regularly):

Automotive — car dealerships and manufacturers
Careers and Education — job opportunities, college courses
Charity — volunteering, events, lottery
Entertainment and Leisure — sporting events, local activities
FMCG — supermarkets, pharmacies
Finance — bank accounts, credit cards, loans, mortgages, investments, pensions, savings, and claims management (including Reclaim My Money Limited)
Insurance — car warranties, home insurance, life insurance, pet insurance, private medical insurance, travel insurance, vehicle insurance
Legal Services — claims management, will writing
Lifestyle — health and beauty, fitness
Marketing and Surveys — direct marketing agencies, market research, consumer surveys
Public Sector — local information and services
Publishing and Media — TV services, magazine subscriptions
Property — home improvements, estate agencies
Retail — clothing and fashion, food and drink, home furnishings, online retail
Telecoms — broadband and internet services, mobile phone contracts (including Sky UK Limited)
Travel — airlines, holidays, hotels, travel booking
Utilities — electricity and gas providers, solar power, water suppliers, energy saving solutions

We may also share data with other trading brands within Aura Media Group. These include:

Switchyourprovider.co.uk
Lovelifeinsurance.co.uk
Familycomesfirst.co.uk
Investinyourfamily.co.uk
Compensationgenie.com
Warrantywizards.co.uk
PCPSearch.com

Where a specific data controller was not named at the point your data was collected, Aura Media Group will only share data where it is satisfied that the source notice, privacy policy or fair processing information adequately described the relevant categories of recipients, sectors or marketing purposes, and where the processing can be supported by an appropriate lawful basis.

To find out more about how Aura Media Group has processed your data, please contact us using the details in the Contact us section below.

QA framework

Aura Media Group operates a compliance framework for the sourcing and supply of personal data. This includes processes for assessing data sources, reviewing opt-in quality, and monitoring how data is used by clients post-supply. The scope and frequency of these activities may vary depending on the source and campaign in question.

Where applicable, Aura Media Group works with data sources and clients to review findings and address any concerns identified.

How long we keep your personal data

Personal data must not be kept any longer than is necessary for the purpose for which it is processed. Unless we are requested or legally obliged to retain data for longer, we aim to delete personal data we process within 24 months of the date it was originally received.

Data may be retained in our suppression files beyond this period solely for compliance purposes — to ensure that opted-out records are not reintroduced to processing if received again from another source.

We keep records of complaints for three years.

Data security

Data protection law requires us to take appropriate measures to keep your personal data secure — protecting it against unauthorised or unlawful use, and against accidental loss, destruction, or damage.

We protect your data through staff training, investment in technology, and handling and storage procedures appropriate to the nature of the data. We apply data encryption tools and have policies and contractual obligations in place designed to protect personal data from loss, damage, or unauthorised use.

If you contact us, we will ask you to identify yourself before we share any of your data with you.

International transfers

Most of your personal data is handled and stored within the UK, Channel Islands, and the Isle of Man. Where data is processed outside the UK or European Economic Area (EEA), we seek to satisfy ourselves that adequate safeguards are in place. Our suppliers are expected to incorporate appropriate technical and organisational measures to ensure data is transferred safely and in compliance with applicable law.

Cookies

Cookies are small data files used by websites to increase effectiveness. We may use cookies to improve our site, recognise returning visitors, and help deliver a more personalised service. Some cookies are necessary for the operation of parts of our website.

Most browsers accept cookies automatically. You can disable cookies by adjusting your browser settings. Your IP address may also be collected if you make a submission via any of our contact forms.

Your rights as a data subject

UK data protection law gives you the following rights in relation to your personal data:

The right to be informed — to be told how your data is used (this policy fulfils that obligation).
The right of access — to request a copy of the personal data we hold about you (a Subject Access Request, or SAR). We will respond within one calendar month. We do not charge for a first request, though we may charge a reasonable fee for repetitive or manifestly unfounded requests.
The right to rectification — to ask us to correct inaccurate or incomplete data.
The right to erasure — to ask us to delete your personal data in certain circumstances.
The right to restrict processing — to ask us to limit how we use your data.
The right to data portability — to receive your data in a structured, commonly used format.
The right to object — to object to processing based on legitimate interests, including direct marketing. We will cease processing upon receipt of a valid objection to direct marketing.
Rights relating to automated decision-making and profiling — to not be subject to solely automated decisions that significantly affect you.

To exercise any of your rights, please contact us using the details in the Contact us section below.

If you are not satisfied with how we have handled your complaint or request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data accuracy

Our approach to data accuracy is set out in the Privacy Statement above. If you believe any information we hold about you is inaccurate, out of date, or incomplete, please contact us using the details in the Contact us section and we will endeavour to correct it.

Contact us

If you have any questions, comments, or complaints about how Aura Media Group handles your personal data, please contact us by any of the following means:

Email: compliance@auramediagroup.co.uk
Telephone: 01442 345005
Post: DPO, Aura Media Group Limited, Ground Floor, Suite F, Breakspear Park, Breakspear Way, Hemel Hempstead, HP2 4TZ

We aim to respond to all queries within 48 working hours of receipt.

How to opt out

If you have received marketing and would like to stop, or if you wish to object to your data being processed, please contact us using the details in the Contact us section above. You will receive a response within 48 working hours confirming your request has been received.

Upon receipt of your request, a member of our compliance team will, where applicable:

Add your record to our internal suppression list, so that if your data is received again from another source it will not be passed to any client for marketing purposes.
Contact any associated data source to request removal of your record from further onward sharing.

Right to erasure: You also have the right to ask us to delete your personal data entirely. Please be aware that exercising this right means we would not retain a record of your opt-out preference, which could result in your data being processed again if received from a new source. If your primary aim is to stop receiving marketing, we recommend exercising your right to object rather than erasure, so that your suppression record is preserved.

Telephone Preference Service (TPS): To reduce unsolicited telemarketing from all organisations, you can register at www.tpsonline.org.uk. Aura Media Group screens telephone data against the TPS where required or appropriate.

Mailing Preference Service (MPS): To reduce unsolicited direct mail from all organisations, you can register at www.mpsonline.org.uk. Aura Media Group screens postal data against the MPS where required or appropriate.

Changes to this policy

We may amend this policy if the way we process your data, or the law relating to data protection, changes. The current version will always be available at this address.

This policy was last updated 9th June 2026.

YourOffers.co.uk is a trading style of Aura Media Group Limited

Company Registration No. 11239047 | ICO Registration No. ZA324659

Breakspear Park, Breakspear Way, Hemel Hempstead, HP2 4TZ