Privacy Policy

What data we collect

We collect personal data in the following ways:

• Contact form: When you fill in our enquiry form, we collect your name, email address, phone number (if provided), and the content of your message.
• Analytics: We use Google Tag Manager and Google Analytics to collect anonymised data about how visitors use our website, including pages visited, time on site, and general location (country/city level). No personally identifiable information is collected through analytics.
• Cookies: Our site uses cookies to support analytics and site functionality. See the Cookies section below.

Why we collect it and our lawful basis

• Contact form data is used to respond to your enquiry and, where you become a client, to administer our working relationship. Our lawful basis is legitimate interests and, where applicable, performance of a contract.
• Analytics data is used to understand how our website is performing and to improve user experience. Our lawful basis is legitimate interests.

How long we keep your data

• Contact form enquiries that do not become client engagements are retained for up to 12 months, then deleted.
• Data relating to active or past client relationships is retained for 6 years in line with standard accounting and legal obligations.
• Analytics data is retained in line with Google Analytics default retention settings (14 months).

Who we share your data with

We do not sell your personal data. We share data only where necessary with:

• Netlify (our website and form hosting provider). Form submissions are stored securely on Netlify's servers. Netlify is GDPR-compliant.
• Google (analytics and tag management). Data is processed in line with Google's privacy terms. IP anonymisation is enabled.

We may also share data where required by law or legal process.

Cookies

We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function. No personal data is collected.
• Analytics cookies: Set by Google Analytics via Google Tag Manager to collect anonymised usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data where there is no longer a legitimate reason for us to hold it.
• Right to restriction: You can ask us to restrict how we use your data in certain circumstances.
• Right to data portability: You can ask us to provide your data in a portable format.
• Right to object: You can object to us processing your data on the basis of legitimate interests.

To exercise any of these rights, contact us at info@socialspur.co.uk. We will respond within one calendar month.

Third-party links

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after any changes constitutes your acceptance of the revised policy.