1. Introduction

Sparkfied respects your privacy. This Privacy & Data Protection Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights. We process data in compliance with the UK GDPR and the Data Protection Act 2018.

2. Who this applies to

This policy applies to:

  • Visitors to our website and users of our online resources.

  • Clients, suppliers, and contractors.

  • Leads, prospects, and people who book consultations with us.

  • Job applicants.

3. Personal data we collect

We collect only the personal data necessary to provide our services, which may include:

  • Identity data: name, job title.

  • Contact data: email address, phone number, and postal address.

  • Business data: company name, website, industry, billing details.

  • Financial data: invoices, payment history, bank details (for clients).

  • Technical data: IP address, device, and browser information, cookie identifiers.

  • Marketing and communications preferences.

  • Content you provide (briefs, attachments, creative assets) when registering or enquiring.

4. How we collect data

Data is collected via:

  • Website forms, contact forms, and booking tools.

  • Email, phone, and video calls.

  • Client onboarding and accounting systems.

  • Cookies and analytics tools when you visit our website.

  • Third-party platforms (e.g. ad platforms, payment processors) when you interact with our services.

5. Purposes & lawful bases for processing

We process personal data for the following purposes and legal bases:

  • To provide services: Performance of a contract with you (e.g. marketing campaigns, bookkeeping, web development).

  • Service delivery & support: Legitimate interests — to operate and improve our services, communicate with clients, and resolve issues.

  • Marketing: Consent or legitimate interests — newsletter and promotional communications (you can opt out at any time).

  • Compliance & legal obligations: To fulfil tax, accounting and regulatory obligations.

  • Security & fraud prevention: Legitimate interests and compliance.

6. Cookies & tracking

We use cookies and similar technologies for essential site functions, analytics, and to improve your experience. You can manage cookie preferences in your browser. Our website explains cookie types, purposes, and how to opt out of non-essential cookies.

7. Third parties & data sharing

We sometimes share data with:

  • Service providers and sub-contractors (payment processors, hosting, analytics, email platforms, ad networks).

  • Professional advisers and auditors, when necessary.

  • Regulators, law enforcement, or tax authorities, if required by law.
    We put contracts and data protection terms in place with our processors to protect your data.

8. International transfers

If we transfer personal data outside the UK (for example to EU/US service providers), we will ensure adequate safeguards are in place (standard contractual clauses, approved frameworks or other lawful mechanisms).

9. Data retention

We retain personal data only as long as necessary for the purposes it was collected (typically for the duration of the client relationship plus a retention period for accounting and tax obligations — usually 6 years), unless longer retention is required by law.

10. Security

We use physical, technical, and organisational measures to protect personal data (secure servers, encryption, access controls, least privilege). We regularly review security practices.

11. Your rights

You have rights subject to legal limits:

  • Access your personal data (subject access request).

  • Rectify inaccurate or incomplete data.

  • Erase data (right to be forgotten) in certain cases.

  • Restrict or object to processing.

  • Data portability (where applicable).

  • Withdraw consent at any time (for marketing).
    To exercise your rights, contact hello@sparkfied.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO).

12. Marketing & opt-out

We will only send marketing where we have consent or a legitimate interest. Each marketing communication includes an easy way to unsubscribe. You can also email hello@sparkfied.com to opt out.

13. Children

Our services are not aimed at children under 16. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy occasionally. We will publish the updated version and effective date on our website.

15. Contact & data protection officer

For questions about this policy or to exercise your data rights, contact:
Sparkfied, Flat 23, 18 Purley Way, Croydon, CR0 3FL, UK