Information

Privacy Policy

Last updated: 2 July 2026

This policy explains how SP Legacy Ltd ("we", "us") handles the personal data of people who visit this website, use our contact form or get in touch with us. The principle is simple: we only collect what we need, and nothing more.

1. Data controller

The data controller is SP Legacy Ltd, a company registered in England & Wales (company no. 14788718), registered office at 24 Tax Suite 137b, Westlink House, 981 Great West Road, Brentford, TW8 9DN, United Kingdom. For any request about your data, write to hello@splegacy.io.

2. What we collect

When you use our contact form or email us, we collect the data you choose to send: your name, email address, any company name you add and the content of your message. We do not ask for data that is not needed to reply to you.

When you browse the site, our hosting provider may record technical data (such as your IP address and browser information) in standard server logs, for security and to keep the service running.

3. Cookies and tracking

This site uses no advertising or profiling cookies and no analytics or tracking tools. We do not build profiles of visitors and we do not sell your data to anyone. For the full detail, see our Cookie Policy.

4. The contact form

Our contact form is delivered by FormSubmit (a form-processing service) purely to forward your message to our inbox. When you submit the form, the details you enter are transmitted through that service to reach us by email. We do not use it for marketing, and it is not used to profile you. If you would rather not use the form, you can always email us directly at hello@splegacy.io.

5. Why we process your data

We process your contact details on the basis of our legitimate interests (UK GDPR Article 6(1)(f)) in responding to enquiries and managing the relationship that follows. Where your message concerns a possible project, we also use the data to take steps at your request before entering into any agreement. We do not use your details for marketing.

6. How long we keep it

We keep communications for as long as needed to handle your request and any follow-up. When they are no longer needed, we delete them.

7. Who we share it with

We do not disclose your data. It may be processed on our behalf by the technical providers that let us run the service (for example our hosting provider and the form-processing service described above), in line with applicable law.

8. International data transfers

Some of the providers that help us run this site are based outside the United Kingdom. Our contact form is operated by FormSubmit, whose servers are in the United States, so when you submit the form the information you enter (your name, email address, any company name and your message) is transferred to and processed in the US on our behalf.

The United States does not benefit from a general UK adequacy determination. Where we rely on a provider outside the UK, we take reasonable steps to ensure an appropriate safeguard is in place for the transfer (for example the ICO's International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a recognised data-transfer framework), and we keep the amount of data involved to a minimum. You can ask us for more detail about the safeguards that apply by writing to hello@splegacy.io.

9. Your rights

Under UK GDPR you have the right to access your data, ask for it to be corrected or deleted, restrict or object to its processing, and request portability. To exercise these rights, write to hello@splegacy.io. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority.

10. Changes

We may update this policy over time. The version that applies is always the one published on this page, with the last-updated date shown at the top.