Privacy Policy

Last updated: 02/09/2026

This privacy policy explains how we collect, use, store and protect personal data when you visit our website or otherwise interact with us. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

This website is operated by Superwatermelon Limited, a company registered in England under company number 09664187, with its registered office at 2 Adelaide Street, St. Albans, England, AL3 5BH (“we”, “us”, “our”, “the Company”).

We are the data controller for the personal data described in this policy. Our contact details are:

As a small consultancy we do not currently have a dedicated Data Protection Officer. Any data protection queries should be sent to the email address above.

2. Personal data we collect

We collect the following categories of personal data:

2.1 Enquiries made through our contact form

When you submit an enquiry, we collect the information you provide, which may include:

We use this to respond to your enquiry and to assess whether we can assist with your project.

2.2 Newsletter sign-up

If you subscribe to our newsletter or mailing list, we collect:

We use a third-party mailing platform to send newsletters (see section 5). You can unsubscribe at any time using the link in any email we send, or by contacting us directly.

2.3 Website usage and analytics data

We use analytics tools (such as Google Analytics) to understand how visitors use our website. This may involve automatic collection of:

This data is collected using cookies and similar technologies. See section 6 (Cookies) for details and how to control this.

2.4 Job applications or CVs

If you send us a speculative CV or apply for a role, we collect the information contained in your CV and covering message (e.g. name, contact details, employment history, qualifications) in order to consider you for current or future opportunities. We will retain this data only for as long as reasonably necessary for recruitment purposes, and will seek your consent before retaining it for longer.

3. How we use your data and our lawful basis

We only use personal data where we have a valid lawful basis to do so under UK GDPR:

4. Cookies

Our website uses cookies and similar tracking technologies. Some are strictly necessary for the site to function; others (analytics, and third-party embeds such as video players, social media widgets, or advertising/marketing pixels) are only set with your consent, collected through our cookie banner.

The categories of cookies we may use are:

You can manage or withdraw your cookie consent at any time via the cookie settings link in our website footer, or through your browser settings. Disabling cookies may affect the functionality of some parts of the site.

5. Who we share your data with

We do not sell your personal data. We may share it with trusted third parties who process data on our behalf, including:

All third-party processors are required to handle personal data securely and only in accordance with our instructions and applicable data protection law.

6. International data transfers

Some of the third-party services we use (for example, US-based analytics or hosting providers) may transfer data outside the UK. Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as the UK's International Data Transfer Agreement/Addendum or an adequacy decision covering the relevant country.

7. Data retention

We keep personal data only for as long as necessary for the purposes it was collected, including:

8. Your rights

Under UK GDPR, you have the right to:

To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by law.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.

9. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption where appropriate, and secure hosting arrangements.

10. Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this policy shows when it was last revised. We encourage you to review it periodically.

12. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us: