Legal
Privacy policy
This is a short site. We set no cookies, run no analytics, and the only personal data we hold is what you choose to send us. This notice explains the detail.
Last updated 17 August 2026
1. Who we are
SparkBudd Technologies Inc Ltd, trading as SparkBudd Technologies (“we”, “us”), provides geospatial analysis to utility networks in the United Kingdom. We are the data controller for the personal data described in this notice.
Registered in England & Wales, company number 17110667.
Registered office13 Seagull Lane 1303, Seagull Lane,
London, Excel, England, E16 1RQ
Email: info@sparkbudd.com
2. What this notice covers
This notice covers personal data we handle as a controller — principally, enquiries made through this website or by email, and the technical records created when you visit the site.
It does not cover personal data we process on behalf of a client under a contract, where they decide what happens to it and we act only on their instructions. Section 8 explains that arrangement.
3. What we collect
When you contact us
If you use the enquiry form, we receive the information you enter: your name, work email address, organisation, and — where you choose to provide them — your sector, timescale and a description of what you are trying to work out. If you email us directly, we receive whatever your message contains.
We ask you not to send us operational or asset data at the enquiry stage. If you do send us something sensitive before an agreement is in place, tell us and we will delete it.
When you visit the site
Our hosting provider creates server logs when a page is requested. These typically include your IP address, the time of the request, the page requested, and your browser's user-agent string. We do not use these logs to build any profile of you, and we do not combine them with anything else.
Fonts loaded from Google
This site loads two typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser makes a request directly to Google to fetch them, which means your IP address is disclosed to Google. Google states that it does not use these requests to create user profiles, but the disclosure happens whether or not you interact with the site. We are noting it because it is the only third-party request this site makes.
4. Cookies
We set no cookies. There is no analytics, no advertising pixel, no tag manager and no third-party tracking on this site. This is why you have not been asked to accept anything.
5. Why we use your data, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Store your enquiry and reply to it | Consent — the tick box on the enquiry form. You can withdraw it at any time. |
| Continue a conversation you have started, and keep a record of what was discussed | Legitimate interests — running a business and responding to people who approach us. |
| Keep server logs, and filter spam submissions | Legitimate interests — keeping the site available and secure. |
| Meet accounting, tax and other legal obligations if you become a client | Legal obligation. |
We do not sell your data, we do not share it with advertisers, and we will not add you to a marketing list. If you send us an enquiry and we do not hear back from you, you get one reply and nothing further.
6. Who we share it with
We use a small number of service providers, each acting as a processor on our instructions:
- Netlify — hosts this website and receives enquiry form submissions. Netlify is a US company; enquiry data and server logs are processed on its infrastructure.
- Our email provider — receives and stores the correspondence between us.
We will also disclose personal data where we are legally required to. Beyond that, we share it with nobody.
Transfers outside the UK
Because our hosting provider is US-based, some personal data is transferred outside the United Kingdom. Those transfers are covered by the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or by the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it.
This is separate from how we handle client project data, which stays in the UK — see section 8.
7. How long we keep it
- Enquiries that do not become work — 24 months from our last contact, then deleted.
- Enquiries that become work — retained for the life of the engagement and for six years afterwards, to meet contractual and tax requirements.
- Server logs — retained for the period set by our hosting provider, typically no more than 30 days.
You can ask us to delete your enquiry sooner, and we will unless we are legally required to keep it.
8. Personal data inside client projects
Our analytical work sometimes involves personal data belonging to a client — for example, Priority Services Register records used to plan storm response, or address-level consumption data. In that situation the client is the controller and we are the processor. We only act on their documented instructions, under a written contract that meets Article 28 of the UK GDPR.
In practice that means:
- A non-disclosure agreement and a data sharing or processing agreement are signed before any transfer.
- Project data is processed and stored in the United Kingdom.
- Access is restricted to the people actually working on that engagement.
- We engage no sub-processor without the client's written approval.
- Personal data is minimised and aggregated wherever the analysis still works without it.
- At the end of the engagement, data is returned or destroyed on the client's instruction.
If your personal data was given to us by a utility company or other organisation and you want to exercise your rights over it, please contact that organisation. They are the controller. If you contact us instead, we will pass your request on to them.
9. Security
This site is served over HTTPS. Access to enquiry submissions and to any client data is limited to the people who need it and protected by multi-factor authentication. We treat utility network data as security-sensitive by default, whether or not it contains personal data.
10. Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- object to processing carried out on the basis of legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, which does not affect anything we did before you withdrew it.
To exercise any of these, email info@sparkbudd.com. We will respond within one month. There is no charge.
11. Complaints
If you think we have handled your personal data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at any time.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113 · ico.org.uk/make-a-complaint
12. Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. If the change is significant and affects people who have already contacted us, we will let them know directly.
13. Contact us
Questions about this notice, or about anything else on this page: info@sparkbudd.com.