Privacy policy

01Who we are

This policy explains how SXR Limited (“SXR”, “we”, “us”) collects and uses personal data when you visit sxrgroup.com, contact us, send us a project brief, or work with us. We are the data controller for that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any question about this policy or how we handle your data, email us at the address above or write to us at 15 Hamlet Green, Northampton, NN5 7AR, United Kingdom.

02What we collect

We only collect what we need to respond to you and to do the work you ask of us.

• Contact form messages — your name, email address, company (if given), the topic you choose and your message.
• Project briefs — what you tell us about your project through our brief form, which may include your name, email, organisation, role, requirements, timescales and budget.
• Call bookings — your name, email address, the time you choose and anything you add to the booking.
• Correspondence — emails and call notes when you deal with us directly.
• Client and supplier records — contact details, contracts, invoices and payment records if you become a client or supplier.
• Technical data — your IP address and basic browser information, which are sent automatically when your browser loads our pages and fonts. Analytics or other non-essential cookies are only set if you agree to them; see our cookie policy.

Please don’t send us special category data (such as health information) through our forms. We don’t need it to respond to an enquiry.

03How we use it and why

The law requires us to have a lawful basis for each use of your data. Ours are:

We do not sell your data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

04Who we share it with

We use a small number of service providers to run the website and the business. They act on our instructions and may only use your data to provide their service to us.

• FormSubmit — delivers contact form messages to our inbox.
• Tally — hosts our project brief form.
• Cal.com — manages call bookings.
• Google Fonts — serves the typefaces on this site, which means your IP address is sent to Google when a page loads.
• Our email, hosting and accounting providers — to run day-to-day business.

We may also share data with professional advisers (such as accountants and lawyers), or where the law requires it.

05International transfers

Some of our providers store or process data outside the UK. Where that happens, we rely on the protections the law requires: a UK adequacy decision for the destination country, or approved contract terms such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more detail.

06How long we keep it

• Enquiries and briefs that don’t lead to work — up to 2 years from our last contact, then deleted.
• Client and supplier records — for the length of the relationship and 6 years after it ends, to meet legal, tax and contractual requirements.
• Cookie choices — as set out in our cookie policy.

07Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data where we rely on legitimate interests;
• ask for data you gave us to be transferred to you or someone else in a machine-readable format;
• withdraw consent at any time, where we rely on consent.

Some rights apply only in certain circumstances. To make a request, email support@sxrgroup.com or write to us at 15 Hamlet Green, Northampton, NN5 7AR, United Kingdom. There is normally no charge, and we will respond within one month.

08Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections, access controls on our accounts and keeping access limited to the people who need it. No system is completely secure, so please don’t send passwords or payment details through our forms.

09Complaints

If you’re unhappy with how we’ve handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

10Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed. Significant changes will be highlighted on the website.