Privacy Policy Last updated: 17/07/2026

This Privacy Policy explains how Spekboom Ltd (“Spekboom”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or engage with our services. We are committed to protecting your privacy and processing your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the UK Data Protection Act 2018.

1. Who We Are
Spekboom Ltd is a UK-registered company (Company Number: 17342893 ) offering management consultancy services in digital transformation and AI. For the purpose of data protection law, Spekboom Ltd is the data controller of your personal data collected via this website or in connection with our services. Our registered address is   128, City Road, London, EC1V  2NX, UNITED KINGDOM.

If you have any questions about how we handle your personal information or if you want to exercise your privacy rights, please contact us at  cdo@spekboomltd.co.uk.

2. Personal Data We Collect
We may collect and process the following categories of personal data:

• Contact Information: When you fill out forms on our site (e.g., contact forms or newsletter sign-ups), we collect information such as your name, email address, phone number, company name, and any other details you provide in your message. Providing this information is voluntary, but without it we might not be able to respond to your inquiries or provide requested services.
   
• Usage Data & Cookies: Our website uses cookies and similar tracking technologies to collect information about how you use our site. This may include your IP address, browser type, device identifiers, pages viewed, time spent on pages, and referring website. Some cookies are necessary for the website’s functionality, while analytics cookies (like Google Analytics) require your consent and help us understand website performance and usage patterns.
   
• Communication Records: If you contact us via email, phone, or other means, we may keep records of that correspondence, including the content of your message and our response. 

We do not intentionally collect sensitive personal data (such as health, political opinions, etc.) or personal data of children under 16 through our website. If you believe a child has provided us with personal data, please contact us to have it removed.

3. How We Use Your Personal Data
We use your personal data for the following purposes:

• To Respond to Your Inquiries: If you contact us via our website or email, we will use your contact details and message to communicate with you and provide the information or assistance you requested.
   
• To Provide Our Services: If you engage us for consulting services, we will use the personal data necessary to deliver and manage those services (e.g., to communicate about the project, manage contracts, billing, and project outcomes).
   
• To Send Updates and Marketing (With Consent): If you opt-in to receive our newsletter or marketing communications, we will use your contact information to send you updates about our services, industry insights, events or resources we think may interest you. You can opt-out of these communications at any time (see Your Rights below).
   
• To Improve Our Website and Services: We analyse usage data and cookie information to understand how our website is used, to improve its functionality and user experience, and to tailor our services and content to user preferences.
   
• To Ensure Security and Compliance: We may use personal data (like IP addresses and technical logs) to protect our website, investigate any suspicious activity, and ensure compliance with legal obligations (such as preventing fraud or other unlawful activities).
   

4. Legal Bases for Processing
Under UK and EU data protection laws, we must have a valid legal basis to process your personal data. Depending on the context, Spekboom LTD relies on one or more of the following legal bases:

• Consent: We will rely on your consent for certain types of processing, such as sending marketing communications (e.g., when you subscribe to our newsletter) or placing non-essential cookies (like analytics cookies) on your device. Where consent is required, you have the right to withdraw it at any time (see Your Rights).
   
• Contract: When you become our client or take steps to enter into a contract with us (for example, by requesting a proposal or engaging our services), we will process your personal data as necessary to perform that contract or to take pre-contractual steps (e.g., discussing project details).
   
• Legitimate Interests: We may process your personal data where it is in our legitimate interests to do so, and those interests are not overridden by your data protection rights. For example, we have a legitimate interest in responding to inquiries via our website, ensuring our website operates securely and effectively, and improving our services. When we rely on legitimate interests, we carefully consider and balance any potential impact on you and your rights, and we will always ensure these interests are not unfairly overriding your privacy rights.
   
• Legal Obligation: In certain cases, we may need to process your data to comply with a legal or regulatory obligation, such as record-keeping requirements or responding to lawful requests by public authorities.

5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to provide and improve our services and to deliver a better user experience. By default, necessary cookies (which ensure the website functions correctly) are active when you use our site. We will request your consent for any non-essential cookies – such as analytics or performance cookies – through our cookie banner. You can accept or decline those cookies, and you can adjust your preferences at any time via our cookie settings tool on the website.

Analytics: We use https://www.godaddy.com (a web analytics service) to collect standard internet log information and details of visitor behavior patterns. We use this data to find out things such as the number of visitors to the various parts of the site and to help us improve the site. All non-essential analytics are only activated with your consent. You can also opt-out by refusing cookies or using the https://www.godaddy.com opt-out tools, if available.

For more detailed information on how we use cookies and how you can manage them, please refer to https://www.godaddy.com/ (if applicable).

6. Who We Share Your Data With
We respect your privacy and will never sell your personal data. We only share your personal data with third parties when necessary for the purposes described above, and always under appropriate safeguards. 

The types of third-party recipients include:

• Service Providers: We use trusted third-party companies to support our website and operations, such as https://www.godaddy.com/ (website hosting), https://www.godaddy.com/, and possibly Microsoft M365 (for email newsletters). These service providers may process your data strictly on our behalf and according to our instructions. They are contractually required to keep your data secure and confidential.
   
• Legal or Regulatory Disclosures: We may disclose personal data to courts, law enforcement, regulators, or lawyers if required by law or necessary to establish, exercise, or defend legal claims.
   
• Professional Advisors: In some cases, we may share information with our accountants, insurers, auditors, or legal counsel for legitimate business or legal compliance purposes, under appropriate confidentiality obligations. 

Any third party who processes your data on our behalf is required to ensure the security of your data and to use it only for the specified purposes.

7. International Data Transfers
Spekboom LTD is based in the United Kingdom. We primarily store and process personal data within the UK or the European Economic Area (EEA). 

However, some of our service providers or partners may be located in or have servers in countries outside the UK or EEA (for example, using a cloud hosting or analytics provider based in the United States). When we transfer personal data outside the UK or EEA, we ensure an adequate level of protection is in place, typically by relying on the following safeguards:

• The destination country has been officially recognised by the UK and/or European Commission as providing an adequate level of data protection; or
• We have in place Standard Contractual Clauses or equivalent data transfer agreements to protect your data in line with GDPR requirements.

If you would like more information about international data transfers or specific safeguards, feel free to contact us.

8. Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which we collected it, including for satisfying legal, accounting, or reporting requirements. For example:

• Contact Form Inquiries: Retained for as long as needed to respond to and resolve your inquiry, and then generally deleted after 12 months unless further follow-up or a business relationship is established.

• Newsletter Subscriptions: Retained until you unsubscribe, after which we will remove your contact details from our mailing list (with a short additional retention period to ensure we comply with your request).

• Analytics Data: Retained by https://www.godaddy.com/ typically for up to 24 months (or as configured) to allow us to analyse long-term website performance trends.

If we enter into a contract or business relationship, we may retain relevant personal data for a longer period as required for contract administration or legal obligations (e.g., financial records are generally retained for 6 years in line with tax and accounting laws). We will either delete or anonymise personal data when it is no longer needed.

9. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include encryption of our website (HTTPS), access controls on systems that store personal information, and regular review of our data handling practices.

However, please note that no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

If we become aware of a data breach that affects your personal data, we will notify you and the appropriate regulatory authorities as required by law.

10. Your Rights Under Data Protection Laws
As an individual in the UK or EU, you have the following rights regarding your personal data, which Spekboom LTD is committed to uphold:

• Right to Access: You can request details of the personal data we hold about you and obtain a copy of that data (commonly known as a “subject access request”).

• Right to Rectification: You have the right to ask us to correct or update inaccurate or incomplete personal data.

• Right to Erasure: You can request that we delete your personal data if it’s no longer necessary for the purposes for which it was collected, or if you withdraw consent (when applicable), or if processing is unlawful, among other reasons.

• Right to Restriction of Processing: You can ask us to suspend or limit the processing of your personal data (for example, if you contest its accuracy or object to processing).

• Right to Object: You have the right to object to the processing of your personal data for direct marketing at any time. In certain other situations, you may also object to processing based on legitimate interests or for statistical purposes, and we will comply unless we have compelling legitimate grounds to continue.

• Right to Data Portability: In some situations, you can request the transfer of your personal data to you or a third party in a commonly used format.

• Right to Withdraw Consent: If we rely on your consent to process data (for example, for marketing emails or optional analytics cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights at any time by contacting us at  cdo@spekboomltd.co.uk We will respond to your requests in accordance with applicable law (generally within one month). Please note some rights may not apply in certain circumstances – if so, we will explain why when responding to your request.

11. Contact, Complaints & Resolving Issues
We are committed to addressing any concerns you have about your privacy. If you have questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal data, please contact us first at  cdo@spekboomltd.co.uk. We will acknowledge and work to resolve your complaint within one month (and sooner if possible).

If you are not satisfied with our response or believe our data processing is not in accordance with the law, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). You can contact the ICO by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, by phone at 0303 123 1113, or through their website at www.ico.org.uk. If you are located in an EU member state, you may also contact your local data protection authority.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will revise the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

If we make significant changes, we may also notify you via prominent notice on our website or by email (if you have provided one) before the changes take effect.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. Feel free to contact us at  cdo@spekboomltd.co.uk  if you have any questions about this policy or our data practices.