Small Plus Mighty
Privacy Policy
Who we are
Small Plus Mighty Ltd provides business services, automation and software.
We are registered in England and Wales under company number 17148880. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.
For privacy questions or requests, contact privacy@smallplusmighty.com or hello@smallplusmighty.com.
Information we collect
We collect information you provide when you contact us, request a demonstration, book a call, complete an assessment or become a customer. This may include:
- Your name, business name, role, email address and phone number.
- Information about your business and the services you need.
- Enquiries, messages, booking details and meeting notes.
- Assessment answers, scores and report information.
- Service, contract, support and billing records.
Our websites and systems may also generate technical information, such as IP addresses, browser details and security logs.
How we use your information
We use your information to respond to enquiries, arrange demonstrations, prepare assessments and proposals, deliver services, provide support and maintain business records.
We also use relevant information to protect our systems, prevent misuse and meet legal obligations.
Our lawful bases depend on the activity. They include taking steps towards or performing a contract, legitimate interests in running and protecting our business, legal obligations and consent where required.
Where you represent a company rather than personally entering a contract, we generally rely on legitimate interests to manage that business relationship.
Demo requests and marketing
If you request a demonstration, we will use your details to contact you and arrange it. Submitting the form does not automatically subscribe you to unrelated marketing.
We only send marketing where permitted by law and obtain consent where required. You can ask us to stop at any time using the opt-out provided or by contacting us.
We may retain a minimal record of your preference so we do not contact you again by mistake.
Who we share information with
Authorised Small Plus Mighty personnel and suppliers may access information where necessary to provide our services. These suppliers may support hosting, forms, bookings, CRM, communications, accounting and technical support.
We may also disclose information to professional advisers or where required by law.
We do not sell your personal information.
Where personal information is transferred outside the UK, applicable data-protection requirements must be met. You can contact us for information about the arrangements relevant to your data.
Information we handle for clients
When we handle a client’s customer enquiries, appointments or quotes on their instructions, the client will normally be the data controller and Small Plus Mighty its processor.
A separate data-processing agreement governs that work. The client’s privacy notice explains its use of customer information.
If your enquiry concerns information we handle for another business, we may refer your request to that business and assist it in responding.
How long we keep information
We retain information for as long as needed to respond to enquiries, provide services, maintain necessary business records and meet legal obligations.
Retention depends on the purpose, whether the business relationship is active and whether records are needed for accounting, disputes or legal claims. Information that is no longer needed is deleted or anonymised.
Security
We use reasonable technical and organisational measures to protect personal information, including access controls and secure transmission. No online service can be guaranteed completely secure.
Please do not send passwords or unnecessary customer information through an enquiry form.
Cookies and similar technologies
Any cookies or similar technologies used on a page should be explained through its cookie information. Where consent is legally required for analytics, advertising or similar technologies, we will request it before those technologies operate.
Your rights
Depending on the circumstances, you can ask to access, correct, erase, restrict or receive a portable copy of your personal information. You can object to certain uses and withdraw consent where we rely on it.
You can object to direct marketing at any time.
Contact privacy@smallplusmighty.com to exercise your rights. We may need to verify your identity.
You can also complain to the Information Commissioner’s Office at ico.org.uk (https://ico.org.uk/).
Changes
We may update this policy when our services or data practices change. Material changes will be communicated where appropriate.
Internal review notes (draft)
- Page is an unpublished draft. Do not link publicly until approved.
- Confirm the data-processing agreement is in place and referenced correctly before publishing.
- Add a cookie information notice if analytics or similar technologies are enabled on the live site.
- Confirm the list of supplier categories matches the actual providers used before publishing.
- Confirm retention periods for each category of information, or reference where they are documented.
- Have this policy reviewed by a legal adviser before publication.