Privacy policy.

1. Data controller

This privacy policy sets out how siteBloom (“we”, “us”, or “our”) collects, uses, stores, and discloses personal data. siteBloom is the data controller in respect of the personal data described in this policy, and is a sole trader registered in the United Kingdom.

For all matters relating to your personal data, please contact us at hello@sitebloom.uk.

2. Personal data we collect

Where you submit an enquiry through the contact form on our website, we collect the following categories of personal data:

• Your name;
• Your business name;
• Your email address;
• Your telephone number (optional);
• The URL of your existing website (optional);
• The contents of the message you submit.

We do not deploy cookies, tracking pixels, or analytics technologies on this website.

3. Purpose and lawful basis of processing

We process the personal data described in clause 2 for the sole purpose of responding to your enquiry and conducting any subsequent correspondence concerning the potential provision of services. We do not add enquirers to marketing lists, send unsolicited communications, or transfer your personal data to any third party for advertising purposes.

The lawful basis on which we rely for this processing is our legitimate interests pursuant to Article 6(1)(f) of the UK General Data Protection Regulation, namely the legitimate interest of responding to enquiries received in respect of our services. We have assessed this processing and consider it to be necessary, proportionate, and consistent with the reasonable expectations of enquirers who have voluntarily contacted us.

4. Data processors and recipients

4.1 Form submission. Submissions made via the contact form are processed by Formspree, Inc. (“Formspree”), a service provider based in the United States, which acts as a data processor on our behalf. Formspree forwards the contents of submissions to our nominated inbox. Formspree’s privacy notice is available at formspree.io/legal/privacy-policy.

4.2 Email hosting. Our email correspondence is hosted by our domain provider, which acts as a data processor on our behalf in respect of received correspondence.

4.3 No further recipients. We do not engage any other third-party services in connection with the processing of enquiry data.

4.4 International transfers. Where personal data is transferred outside the United Kingdom (including, in the case of Formspree, to the United States), such transfers are made under appropriate safeguards in accordance with Articles 44 to 49 of the UK GDPR.

5. Retention

5.1 Customers. Where an enquiry leads to the establishment of a customer relationship, we retain the associated correspondence for the duration of that relationship and for such further period as is required to comply with our statutory record-keeping obligations, including those imposed by HM Revenue & Customs (currently six (6) years from the end of the relevant accounting period).

5.2 Non-customers. Where an enquiry does not result in a customer relationship, the associated personal data shall be deleted within twelve (12) months of receipt, or at such earlier date as you may request in accordance with clause 6.

6. Your rights as a data subject

You have the following rights in respect of your personal data under the UK GDPR and the Data Protection Act 2018:

• The right of access, namely to obtain confirmation as to whether we process personal data concerning you and, where we do, to obtain a copy thereof;
• The right to rectification of inaccurate personal data;
• The right to erasure of your personal data, subject to applicable exceptions;
• The right to restrict processing of your personal data in defined circumstances;
• The right to data portability, namely to receive your personal data in a structured, commonly used, and machine-readable format;
• The right to object to processing carried out on the basis of our legitimate interests.

To exercise any of the above rights, please contact us at hello@sitebloom.uk. We shall respond within one (1) month of receipt of your request, in accordance with Article 12 of the UK GDPR.

Where you consider that our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Further information is available at ico.org.uk.

7. Amendments to this policy

We reserve the right to amend this privacy policy from time to time to reflect changes in our processing activities or applicable law. Any material amendment shall be reflected on this page, together with the date of the amendment recorded below.

Last updated: 5 May 2026