Privacy Policy
Last updated: 7 October 2025
Welcome to SunSpark, a trading name of SunSpark Creative Ltd, (“we”, “our”, or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or engage with our services.
Who we are
SunSpark is a UK-based creative design agency offering services including graphic design, brand identity, web design, and marketing content for print and digital media.
Company name: SunSpark Creative Ltd
Registered office: SunSpark Creative Ltd, 71-75 Shelton Street, London WC2H 9JQ, United Kingdom
Company number: 15817547
We are the data controller responsible for your personal data.
Information we collect
We may collect and process the following types of personal information:
Information you provide directly
– Your name, email address, and contact details when you make an enquiry, request a quote, or sign up for updates.
– Company name, billing details, and project information when you become a client.
– Any files or creative materials you share with us during a project.
Information collected automatically
– Technical data such as your IP address, browser type, device information, and browsing activity via analytics tools (e.g. Google Analytics).
– Usage data, including how you interact with our website, pages visited, and links clicked.
Information from third parties
– We may receive limited data from partners such as payment processors or marketing platforms (for example, to confirm successful transactions or consent).
How we use your information
We use your personal data for the following purposes:
– To respond to your enquiries or requests.
– To provide design and creative services.
– To manage billing, contracts, and project communications.
– To maintain internal records and improve our services.
– To send relevant updates, marketing materials, or newsletters (only with your consent).
– To ensure the security and proper functioning of our website.
We do not sell or rent personal data to third parties.
Legal basis for processing
We process personal data under the following legal bases:
– Contractual necessity: To perform our obligations under an agreement or prepare a proposal.
– Legitimate interests: To operate our business, improve services, and maintain client relationships.
– Consent: When you subscribe to marketing emails or updates.
– Legal obligations: To comply with applicable laws or regulatory requirements.
Data retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy.
– Project-related data is typically kept for up to six years after completion for record-keeping and legal purposes.
– Marketing contact information is retained until you opt out or withdraw consent
Sharing your data
We may share your data only with trusted third parties who assist in operating our business, including:
– Cloud storage and hosting providers.
– Professional service providers (e.g. accountants, legal advisers).
– Payment processors.
– Analytics and communication platforms.
All third parties are required to respect your data privacy and act in accordance with UK data protection law.
International data transfers
Where we use third-party service providers located outside the UK or EEA (for example, in the United States), we ensure that your data is protected under approved transfer mechanisms such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs).
Your rights
Under the UK GDPR, you have the following rights:
– To access and receive a copy of your personal data.
– To correct or update inaccurate data.
– To request erasure (“the right to be forgotten”).
– To restrict or object to processing.
– To withdraw consent for marketing communications.
– To lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk
If you wish to exercise any of these rights, please contact us.
Security
We use appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. However, no internet-based service can be completely secure, and you use our website at your own risk.
Links to other websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites, and we encourage you to read their privacy policies.
Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a new “Last updated” date.