Privacy Policy
Effective Date: 8 September 2026
Introduction
SpireThorn Consulting Ltd ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard information when you visit spirethorn.com or engage our services.
Information We Collect
We may collect the following types of personal information:
- Contact details such as name, email address, and organisation name when you submit enquiry forms
- Technical information including IP address, browser type, and device information through automatic collection
- Information you provide during consultations or project engagements
- Correspondence records when you communicate with us
How We Use Your Information
We use personal data for the following purposes:
- Responding to enquiries and providing requested information about our services
- Delivering consulting services and managing client relationships
- Improving our website functionality and user experience
- Complying with legal obligations and regulatory requirements
- Communicating about projects, proposals, or relevant industry developments where you have expressed interest
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: where you have explicitly agreed to our use of your information
- Contractual necessity: to fulfil our obligations under consulting agreements
- Legitimate interests: to operate our business effectively and provide quality services
- Legal compliance: to meet statutory and regulatory requirements
Data Sharing and Disclosure
We do not sell or rent personal data to third parties. We may share information with:
- Service providers who assist with website hosting, email communications, or business operations, bound by confidentiality obligations
- Professional advisors including lawyers and accountants where necessary
- Regulatory authorities or law enforcement when required by law
Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Enquiry information is typically retained for 3 years. Client project data is retained for 7 years to comply with professional indemnity insurance requirements.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data and request a copy
- Correct inaccurate or incomplete information
- Request deletion of your data in certain circumstances
- Object to processing or request restriction of processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Commissioner's Office
Cookies and Tracking
We use cookies to enhance website functionality and analyse usage patterns. For detailed information, please refer to our Cookies Policy.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The effective date at the top indicates when the policy was last revised.
Contact
For questions about this privacy policy or to exercise your data protection rights, contact us at:
SpireThorn Consulting Ltd
42 Maritime House, Ocean Way
Southampton SO14 3TL
United Kingdom
Email: [email protected]