Privacy Statement

How we collect, use, and protect your personal information.

Last updated: May 2026

Privacy Statement

Shop Sphere Ltd is a West Midlands business consulting firm committed to protecting the privacy and security of personal information. This Privacy Statement explains how we collect, use, disclose, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing our website at shopsphere.co.uk, contacting us, or engaging our services, you acknowledge reading and understanding this Privacy Statement. If you disagree with these practices, please do not provide personal information to us.

We may update this statement periodically. The current version will always be available on our website with the update date noted at the top.


Information We Collect

Identity & Contact Information

Full name, email address, phone number, job title, and company or organisation name — collected when you submit enquiries, book consultations, or engage our services.

Usage & Technical Data

Information about your website interactions, including IP address, browser type, operating system, pages visited, referral URLs, and session duration — collected automatically via cookies and server logs.

Project & Business Information

Details about your organisation, technical environment, project requirements, and business objectives shared during professional service engagement.

Billing & Financial Information

Business address and payment details necessary to invoice for services. Full payment card numbers are not stored; payments are processed through secure third-party providers.


How We Use Your Information

We use collected personal information to:

  • Deliver, manage, and improve the professional services you have engaged
  • Respond to enquiries, consultation requests, and communications
  • Prepare proposals, quotes, and service agreements
  • Process payments and manage financial and administrative obligations
  • Analyse website usage to improve usability, content, and performance
  • Send service updates, newsletters, or promotional content (only with your consent or where permitted by law); you may opt out at any time
  • Meet legal, regulatory, and compliance obligations

We will not use your personal information for secondary purposes unless you have consented, it is required or authorised by law, or otherwise permitted under UK GDPR.


Data Storage & Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect against unauthorised access, loss, destruction, or alteration.

  • UK-Based Storage: Data is stored on UK or European Economic Area servers where practicable.
  • Encrypted Transmission: All data transmitted between browsers and our website uses TLS (HTTPS) encryption.
  • Access Controls: Access to personal information is restricted to staff who need it for their duties. All team members are bound by confidentiality obligations.
  • Retention & Deletion: We retain personal information only as long as necessary for the purposes for which it was collected or as required by law. Data is securely destroyed or de-identified when no longer needed.

Third Parties

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share information with trusted third-party service providers assisting in our business operations, provided they agree to handle it in accordance with this Privacy Statement and UK GDPR. These may include cloud infrastructure providers, email platforms, analytics providers, payment processors, and professional advisors.

Personal information may also be disclosed if required by law, court order, or regulatory authority.


Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding personal information we hold about you:

  • Access: You may request access to your personal information. We will respond within 30 days.
  • Correction: If your personal information is inaccurate or incomplete, you may request correction.
  • Deletion: In certain circumstances, you may request deletion of your personal information.
  • Opt-Out: You may opt out of marketing communications at any time via unsubscribe links or by contacting us directly.
  • Complaints: If you believe your data protection rights have been breached, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and understand website usage.

Type Purpose
Strictly Necessary Required for correct website function. Cannot be disabled.
Analytics Help us understand visitor usage (e.g., Google Analytics). Data may be aggregated and anonymised.
Preferences Remember your settings and choices to personalise your experience.

Contact Us

For questions about this Privacy Statement, to access or correct personal information, or to make a complaint: