Privacy policy
Last updated 27 October 2026.
This policy covers NJG Social, the in-house publishing tool of NJG Consultancy Ltd (“we”, “us”). We are the controller of the data described here. Contact us at hello@njgconsultancy.com.
Who the tool is for
NJG Social is used only by NJG Consultancy Ltd for accounts that we or our group companies own. Members of the public cannot sign up to it.
YouTube API Services
NJG Social uses YouTube API Services. By connecting a YouTube channel to NJG Social you agree to be bound by the YouTube Terms of Service. Google’s handling of data is covered by the Google Privacy Policy.
What we access and why
| Data | Why |
|---|---|
| An access token (and, where the network issues one, a refresh token) for each connected account | To publish posts to that account when we choose to |
| The account’s id, name, handle, profile picture, description, public link and follower count | To check the account is the right one and is set up correctly before posting |
| The ids and links the network returns for posts and videos we publish | To record what was published and avoid posting twice |
From YouTube we use the YouTube Data API to upload our own videos to our own channel (videos.insert) and to read our own channel’s basic details (channels.list). We do not access other people’s channels, videos, comments, subscribers or watch history.
Channel and account details we store are refreshed from the API or deleted within 30 calendar days. We process this data for our legitimate interest in running our own brands’ social accounts.
Storage and security
Tokens are stored encrypted in AWS Secrets Manager (Europe, Stockholm region) and are never shown or written to logs. Records of what was published are kept in our private systems. Access is limited to our own systems and staff.
Sharing
We do not sell, rent or share data obtained through these APIs. It is held for us by Amazon Web Services as our processor and is accessible only to NJG Consultancy Ltd staff who operate the tool. Posts we publish are public on the network they are published to, as intended.
Cookies
NJG Social itself does not place cookies or use browser or device storage, and does not let third parties do so. When an account is connected, the network’s own sign-in page may set its own cookies under that network’s privacy policy.
Keeping and deleting data
We keep a token while the account stays connected. If you ask us to delete data, or an account is disconnected through NJG Social, we delete its tokens and stored profile data within 7 calendar days. If access is revoked from the Google security settings page or another network’s settings, we delete them within 30 calendar days. Records of what we published (only our own post and video ids and links, not channel or viewer data) are kept for up to 6 years as business records.
You can revoke NJG Social’s access to a Google account at any time from the Google security settings page, and to other networks from that network’s connected apps settings. You can also ask us to delete data by emailing hello@njgconsultancy.com.
Your rights
Under UK data protection law you can ask for access to, correction, deletion, restriction or portability of personal data we hold, and object to how we use it, and you can complain to the Information Commissioner’s Office (ico.org.uk).
Changes
If we change this policy we will update the date at the top of this page.