Privacy policy
Last updated 4 November 2026
Who we are
SparkLoom Digital Ltd ("SparkLoom", "we", "us") is registered in England and Wales, company number 13639767. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom.
We are the controller of the personal data described on this page. For anything about your data, email support@sparkloom.digital.
What we collect
- Enquiries. Your name, email address, website address and message when you use our contact form or email us.
- Clients. Contact and billing details for the people we work with, and records of the requests we receive and the work we do.
- Technical data. Our host, Cloudflare, processes IP addresses and request details to deliver this site and protect it from attacks.
When we look after a client's website, we may be able to see personal data that website holds about the client's own customers. That data stays under our client's control. We only touch it as far as the work requires, on our client's instructions, and never use it for anything else.
How we use it
- To reply to your enquiry. Our lawful basis is legitimate interests: you asked us a question and we answer it.
- To provide the services you buy from us and to invoice you. Our lawful basis is the contract between us.
- To keep financial records. Our lawful basis is legal obligation.
We don't sell personal data, we don't add you to a mailing list, and we don't make automated decisions about you.
Who we share it with
We use a small number of service providers who process data on our behalf:
- Cloudflare, which hosts and protects this site
- Google Fonts, which serves the typefaces on this site. Your browser sends your IP address to Google when it loads them.
- Cloudflare Turnstile, which checks contact form submissions are from a person, not a bot. It only runs when you're near or using the form.
- Our project management system and automation tools, where contact form enquiries are logged so we can reply
- Stripe, which handles client invoices and payments
- Our email and accounting providers
Some of these providers process data in the United States. Where that happens, the transfer is covered by the UK–US data bridge or by the ICO's International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that don't lead to work are deleted within 12 months.
- Client records are kept for the length of our relationship and then for up to six years, as UK tax and company law require for financial records.
Cookies
This site doesn't use analytics, advertising or tracking cookies. Cloudflare may set a strictly necessary security cookie to filter out malicious traffic. That cookie doesn't identify you and doesn't need your consent.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to someone else, and you can object to how we use it. Email support@sparkloom.digital and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
Changes
If we change this policy, we'll update this page and the date at the top.