Privacy policy

Who we are

Spires Digital Limited is the controller responsible for the personal information described in this notice. We are based at 119 Ruette Irwin, St Peter Port, GY1 2SN, Guernsey and are registered with the Office of the Data Protection Authority under registration DPA11741. This notice applies to spiresdigital.com, enquiries and limited business-to-business prospecting. Privacy enquiries can be sent to [email protected].

Information you choose to provide

When you request a growth review, we collect the fields you submit, which may include your name, work email, company, store URL, ecommerce platform, revenue range, growth constraints and message. We use this information to review and respond to the request. Please do not submit passwords, payment details or sensitive account credentials.

Business prospect information

We may collect limited professional information about incorporated businesses and people working for them when we believe our services may be relevant to their professional responsibilities. This can include a business name and website, legal type, country or region, public information about products, advertising and fulfilment, a professional name and job title, a work email address, the source and date of the information, verification records, our relevance assessment and a record of communications.

Sources may include a business's own website, Companies House or another public company register, LinkedIn profiles and company pages, trade or professional directories and licensed business-data or email-verification providers. We do not use private contact details, special-category information or information about a person's non-professional life for this purpose. We do not infer or guess a work email and treat a professional profile as unverified until its current role has been reviewed.

Form and scheduling providers

Website forms are processed using FormSubmit so the enquiry can be delivered by email. Appointment scheduling links open Calendly in a separate service. Those providers process information according to their own privacy terms. You can instead contact us directly by email.

Analytics and cookies

Where analytics is configured, non-essential Google Analytics cookies are loaded only after you choose “Accept analytics” in the site preference banner. Analytics helps us understand page and tool usage, referral source, device category and approximate location. Calculator inputs are processed in your browser and are not sent to Spires Digital by the calculator.

Your analytics choice is stored in your browser as spires-cookie-consent. You can clear site storage in your browser to reset it.

Attribution information

The site keeps the first page visited, referring domain, page or tool used before contact, selected service interest and campaign parameters such as UTM values or a Google click identifier for the current browser session. These values are included with a form only if you choose to submit one. They help us understand the enquiry context and which journeys create useful conversations.

How information is used

• To respond to enquiries and arrange requested conversations.
• To prepare the review or service information you request.
• To research a potential business relationship and send limited, relevant business-to-business communications where the law permits.
• To record the source, relevance and legal basis for a business communication.
• To honour objections, unsubscribe requests and suppression requirements across future campaigns.
• To maintain security, diagnose problems and improve the website.
• To understand aggregate site performance where analytics consent is given.

Our basis for business outreach

Where professional personal data is involved, we may rely on legitimate interests to research a potential business relationship and contact a relevant employee at an incorporated business about services connected to that business and the employee's professional responsibilities. Addressing a message only to the business does not remove the data-protection obligations that apply when a named employee's work address is used. Before any communication, we consider the recipient's market, the business's legal type, necessity, relevance, reasonable expectations, data accuracy and the person's rights. We do not rely on legitimate interests where consent is required by the electronic-marketing law applying to the recipient.

United Kingdom outreach is limited to confirmed corporate subscribers and is reviewed under the applicable data-protection and electronic-marketing rules. United States commercial email is reviewed against the CAN-SPAM requirements, including accurate sender information, a non-deceptive subject, identification of the commercial purpose, our postal address and a clear way to opt out. Canada is not currently an active outreach market. You can object to direct marketing at any time; we will stop and retain only the minimum suppression record needed to avoid contacting you again.

Sharing and international processing

We do not sell personal information. Information may be processed by service providers used to operate research, company verification, secure hosting, business data, email, forms, scheduling and consented analytics. Some providers may process information outside Guernsey or the United Kingdom. Where required, we use an appropriate contract or transfer safeguard. Information may also be disclosed where required by law or necessary to protect legal rights.

Retention

Enquiry and business-relationship records are kept only for as long as reasonably required to respond, manage the relationship and meet legal or accounting obligations. Prospect research that has not led to an active relationship is reviewed no later than 12 months after collection and is deleted or refreshed unless there is a documented reason to keep it. Unverified contact candidates are removed sooner when they cannot be substantiated. Source, verification and legal-basis evidence is kept for as long as it is relied upon. Suppression records may be retained longer using the minimum identifier and reason needed to prevent unwanted re-contact. Analytics retention is controlled in the relevant analytics account.

Your rights

Depending on the law applying to you, rights may include access, correction, deletion, restriction, objection and data portability. You have the right to object to the use of your personal information for direct marketing at any time. Contact [email protected] to make a request or simply reply to a message and ask us to stop. You may complain to the Office of the Data Protection Authority in Guernsey or, where applicable, the regulator in the country where you work.

Changes

We may update this notice when site functionality or providers change. The date at the top shows the latest published version.