PRIVACY POLICY

Last updated: 7th January 2026

This privacy notice for Smudged Ltd (doing business as Smudged) (“Company”, “we”, “us”, or “our”) explains how and why we may collect, store, use, and share (“process”) your personal information when you interact with us through our services (“Services”), including when you:

• Visit our website at https://www.wearesmudged.com or any website of ours that links to this privacy notice
• Contact us via forms, email, or bookings on our website
• Engage with us in relation to sales enquiries, marketing communications, workshops, events, or consultancy services

Smudged Ltd is the data controller responsible for your personal data.

Questions or concerns?
Reading this privacy notice will help you understand your privacy rights and how we handle your information. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, contact us at hello@wearesmudged.com

---

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you

• Submit an enquiry or contact form
• Book a call or workshop
• Sign up to receive updates or insights
• Contact us directly by email
• Engage our consultancy services

This may include:

• Name
• Email address
• Company name
• Job title
• Phone number (if provided)
• Any information you choose to include in your message

You are responsible for ensuring that the information you provide is accurate and up to date.

Information automatically collected

When you visit our website, we may automatically collect certain technical information, such as:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on the site
• Referring URLs

This information does not usually identify you personally and is collected through cookies and analytics tools. For more detail, see our Cookie Policy

---

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to:

 

• Respond to enquiries and requests
• Deliver services or information you’ve asked for
• Manage our relationship with you
• Improve our website, content, and services
• Send relevant communications where you have opted in
• Comply with legal and regulatory obligations

We only process personal data where we have a lawful basis to do so.

---

3. WHAT LEGAL BASES DO WE RELY ON?

Under UK GDPR, we rely on the following legal bases:

• Consent – where you have given clear permission (e.g. opting into marketing emails)
• Legitimate interests – to run and grow our business, respond to enquiries, and improve our services
• Contractual necessity – where processing is required to deliver agreed consultancy or workshop services
• Legal obligation – where we are required to process data by law (e.g. tax and accounting requirements)

 

---

4. DO WE USE COOKIES AND TRACKING TECHNOLOGIES?

Yes. We use cookies and similar technologies to:

• Ensure the website functions correctly
• Understand how visitors use our website
• Improve site performance and user experience

You can manage your cookie preferences through your browser settings or via the cookie banner when you first visit our site.

For full details on what cookies we use and how to control them, see our Cookie Policy.

---

5. DO WE SHARE YOUR INFORMATION?

We may share your personal data with trusted third-party service providers who support our business operations, such as:

• Website hosting
• Email communications
• Analytics: Google Analytics
• Scheduling/booking tools

All third parties are required to keep your data secure and use it only for the agreed purpose. We have data processing agreements in place with our key providers.

We do not sell, rent, or trade your personal data.

---

6. INTERNATIONAL DATA TRANSFERS

Some of our third-party providers (such as Google Analytics) may process data outside the UK, including in the United States.

Where this happens, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK authorities
• Adequacy decisions where applicable
• Providers’ own privacy and security commitments

---

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep personal data only for as long as necessary to fulfil the purposes outlined in this notice, unless a longer retention period is required by law.

Specific retention periods:

• Enquiry and contact form data: 2 years from last contact (unless you become a client)
• Marketing consent and communications: Until you withdraw consent or unsubscribe
• Client and consultancy service data: 7 years from end of engagement (for tax, legal, and accounting purposes)
• Website analytics data: Up to 14 months (anonymised where possible)

After these periods, we will securely delete or anonymise your data.

---

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use appropriate technical and organisational security measures to protect your personal data, including:

• Secure systems and access controls
• Encrypted data transmission (SSL/TLS)
• Limited access to personal information on a need-to-know basis
• Regular reviews of data handling practices
• Secure backup systems

However, no system can be guaranteed to be 100% secure. We continuously review and update our security practices.

---

9. DO WE USE AUTOMATED DECISION-MAKING?

No. We do not use automated decision-making or profiling that would have legal or similarly significant effects on you.

---

10. WHAT ARE YOUR PRIVACY RIGHTS?

Under UK GDPR, you have the right to:

• Access – request a copy of the personal data we hold about you
• Correction – ask us to correct inaccurate or incomplete information
• Deletion – request deletion of your data (in certain circumstances)
• Restriction – ask us to limit how we use your data
• Object – object to processing based on legitimate interests
• Data portability – request your data in a portable format
• Withdraw consent – where we rely on consent, you can withdraw it at any time
• Complain – lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at hello@wearesmudged.com.

ICO contact details:
Website: https://ico.org.uk
Helpline: 0303 123 1113

---

11. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites (such as LinkedIn, Instagram, or case study partner sites). We are not responsible for their privacy practices and encourage you to review their privacy notices.

12. UPDATES TO THIS NOTICE

We may update this privacy notice from time to time to reflect changes in our practices, technology, or legal requirements.

The updated version will be indicated by a revised “Last updated” date at the top of this page.

If the changes are significant, we will provide a more prominent notice or contact you directly where required by law.

---

13. CONTACT US

If you have questions about this privacy notice or how we handle your data, contact us at:

Smudged Ltd
Newport

NP10 9DE

Email: hello@wearesmudged.com
Phone: +44 2922 941 033