Data Protection

Privacy Policy

Effective:[Insert Date]
Updated:[Insert Date]
1

Who We Are

Sphere Global Solutions Ltd ("Sphere Global Solutions", "we", "us", or "our") is a company registered in England and Wales.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Sphere Global Solutions Ltd acts as a data controller in relation to personal data collected via our website and business interactions.

2

Scope of This Policy

This Privacy Policy explains how we collect, use, store, and protect personal data. It applies to personal data collected through:

  • Our website
  • Business enquiries and contact forms
  • Client and supplier engagements
  • Marketing communications
  • Recruitment processes
3

Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Information:Full name, Business email address, Telephone number, Company name, Job title.
  • Technical and Usage Data:IP address, Browser type and version, Device information, Website usage data, Interaction data collected through analytics tools.
  • Communication Data:Information provided in correspondence, Details submitted via web forms, Enquiry and support information.
  • Recruitment Information:CVs and employment history, Qualifications and experience, Interview notes (where applicable).

We do not intentionally collect special category data unless required for lawful business purposes.

4

How We Use Personal Data

We use personal data to:

  • Respond to enquiries and provide contracted services.
  • Manage client and supplier relationships.
  • Deliver operational and technical support.
  • Send relevant business communications.
  • Improve website performance and user experience.
  • Maintain network and information security.
  • Comply with legal and regulatory obligations.
5

Lawful Bases for Processing

We rely on one or more of the following lawful bases under UK GDPR:

  • Contractual necessity:Where processing is required to perform a contract.
  • Legitimate interests:For business development, service improvement, and security. We ensure such interests do not override your fundamental rights.
  • Consent:Where required (e.g., certain marketing or cookies).
  • Legal obligation:Where processing is required by law.
6

Marketing Communications

We may send business-related marketing communications where you have provided consent, or where we rely on legitimate interests in a business-to-business context.

You may opt out at any time by clicking the unsubscribe link in our emails or contacting us directly.

We do not sell personal data.

7

Cookies and Website Tracking

Our website uses cookies and similar technologies in accordance with the Privacy and Electronic Communications Regulations (PECR). These may include essential cookies required for site functionality and analytics cookies used to monitor website performance.

Non-essential cookies are only deployed where you have provided consent via our cookie banner. You may manage cookie preferences through your browser settings or our cookie consent tool.

8

Data Sharing

We may share personal data with:

  • Group companies
  • IT service providers and hosting providers
  • CRM and marketing platform providers
  • Professional advisors
  • Legal and regulatory authorities
9

International Data Transfers

Sphere Global Solutions operates with delivery and support teams outside the United Kingdom. Where personal data is transferred outside the UK, including to countries that do not benefit from an adequacy decision, we ensure appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements (IDTA)
  • Standard Contractual Clauses
  • Contractual and technical safeguards
10

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal obligations. Typical retention periods include:

  • Client and contract data:Up to 6 years after contract end.
  • Financial records:6 years.
  • Marketing data:Until you opt out or after prolonged inactivity.
  • Recruitment data:Up to 12 months unless consent is given for longer retention.
11

Data Security

We implement appropriate technical and organisational measures to protect personal data, including role-based access controls, secure infrastructure, encrypted communications, and internal governance policies.

12

Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request erasure of your data (where applicable)
  • Request restriction of processing
  • Object to processing
  • Request data portability
  • Withdraw consent (where applicable)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)
13

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

14

Children’s Data

Our website and services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from children.

15

Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised effective date.

16

Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us:

Address

The Maltings, 2 Anderson Road, Bearwood, Smethwick B66 4AR, United Kingdom

Have questions about your data?

We're here to help with any privacy concerns.

Contact Us

How can we help?