Last updated:1/15/26
1. Who we are
Another Thing (“we”, “us”) is an advertising agency based in Boston, Massachusetts. This policy explains how we collect, use and protect personal data when you visit our website, work with us or contact us.
When we process personal data on behalf of our clients, such as campaign or customer data, we act as a data processor under the client’s instructions. In that case, the client’s own privacy policy applies.
Contact: hello [at] anotherthing.com, Another Thing, 145 Tremont Street, Suite 201-1359, Boston, MA 02111
2. Data we collect
- Contact and business information: Name, job title, company, email, phone number.
- Communications: Emails, meeting notes and correspondence.
- Recruitment data: CVs, portfolios and application details.
- Supplier and freelancer data: Contact, payment and tax details.
- Website data: IP address, browser type and usage data collected through cookies and analytics.
3. How we use it, and our lawful basis
- To deliver services and manage client relationships: Contract and legitimate interests.
- To engage and pay suppliers and freelancers: Contract and legal obligation.
- To assess job applicants: Legitimate interests and steps before a contract.
- To meet legal, tax and accounting obligations: Legal obligation.
- To send business updates: Legitimate interests or consent. You can opt out at any time.
- To improve our website: Consent, where required for cookies.
We don’t sell personal data, and we don’t make decisions about people solely by automated means.
4. Who we share it with
We share personal data only where necessary with:
- Service providers who support our business, including Google Workspace, Slack, Asana and Dropbox, and our payroll and accounting providers
- Production partners and freelancers working on client projects
- Professional advisers, and authorities where the law requires it
Every provider is bound by contract to protect the data and use it only on our instructions.
5. International transfers
We’re based in the United States. When personal data is transferred from the UK or EU, we protect it with approved safeguards, such as the EU-US Data Privacy Framework and its UK Extension, standard contractual clauses or the UK International Data Transfer Agreement.
6. Security
We protect personal data with appropriate technical and organisational measures, including:
- Enterprise cloud platforms certified to ISO 27001 and SOC 2
- Encryption
- Multi-factor authentication
- Role-based access
- Device security controls
- Staff training
7. Retention
We keep personal data only as long as needed for the purposes above or as the law requires, then securely delete it:
- Client and supplier records: Kept for the length of the relationship plus the legal retention periods.
- Unsuccessful job applications: Kept for up to 12 months.
8. Your rights
Depending on where you live, you may have the right to:
- Access your data
- Correct or delete it
- Restrict or object to how it’s processed
- Receive your data in a portable format
- Withdraw your consent at any time
California residents have rights under the CCPA, including the right to know and delete their data, and the right not to be discriminated against for using these rights.
To use any of these rights, contact hello [at] anotherthing.com We respond within one month. UK residents can complain to the ICO (ico.org.uk), and EU residents can complain to their local supervisory authority.
9. Cookies
Our website uses essential cookies, and with your consent, analytics cookies. You can manage cookies in your browser settings.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on our website.