This privacy policy is for the website https://swordfishworks.com/ operated by Swordfish Works Ltd (Studio 8, The Hangar, Perseverance Works, 38 Kingsland Road, London E2 8DD). It explains how we collect, use, and protect your personal information when you use our website or services, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you do not agree with this policy, you should stop using this website.
Who we are
Data Controller: Swordfish Works Ltd
ICO registration number: ZA342169
Contact email: hello@swordfishworks.com
The personal data we collect
We may collect and process the following information:
Contact details (name, email, phone number) when you enquire or work with us
Project-related information when you are a client or supplier
Technical data such as cookies and analytics when you use our website
We do not routinely process special category data (e.g., health data) or criminal offence data.
Our lawful bases for processing
We process personal data under the following lawful bases:
- Consent – when you sign up to receive marketing emails.
- Contract – to provide our services, contact you about your projects, and manage our business relationship.
- Legal obligation – to comply with financial, tax, or legal requirements.
- Legitimate interests – to manage and improve our services, ensure website security, and respond to enquiries.
- We do not rely on “vital interests” or “public task”.
Data retention
We keep personal data only as long as necessary:
- Enquiries: up to 12 months after our last contact
- Client records: up to 6 years after a project ends (to meet legal/accounting obligations)
- Marketing contacts: until you withdraw consent or unsubscribe
- After these periods, we securely delete or anonymise the data.
Sharing your data
We do not sell your data. We may share it with trusted service providers (e.g., website hosting, email, analytics, or payment providers) who act as processors under written agreements. Some services may be located outside the UK/EEA, but we ensure appropriate safeguards (such as Standard Contractual Clauses).
Your rights
You have the following rights under UK GDPR:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision-making and profiling (we do not use automated decision-making)
To exercise any of these rights, please contact us at hello@swordfishworks.com. You also have the right to complain to the ICO at www.ico.org.uk.
Cookies
This website uses cookies to:
- Enable core functionality (e.g., login, session management)
- Measure website usage (Google Analytics)
- Support advertising/affiliate links (Google Adsense, Amazon, eBay Partner Network, etc.)
- Non-essential cookies (analytics, advertising) are only set if you provide opt-in consent via our cookie banner. You can withdraw consent at any time. You can also manage or delete cookies in your browser settings.
Cookies we may use include:
- _ga, _gid, _gat (Google Analytics)
- Affiliate tracking cookies from advertising partners
Advertising and affiliate links
Our website may contain sponsored links or affiliate tracking. If you click one of these links, the advertiser may use a cookie to track your referral. We work only with partners who uphold data protection standards, but we do not control the content of third-party websites.
Data security
We take appropriate measures to protect personal data, including secure servers, encryption where applicable, and restricted access to personal data.
Updates to this policy
We may update this policy from time to time to reflect changes in law or how we process personal data. The updated version will always be available on this website.
