Privacy Policy

Last updated: 15 August 2026

This Privacy Policy explains how Sumodi Ltd collects, uses, stores and protects personal information.

It applies when you:

• visit sumodi.co.uk;
• contact us with an enquiry;
• subscribe to our newsletter;
• become or consider becoming a client;
• provide a testimonial;
• work with us as a supplier, freelancer or business contact; or
• otherwise communicate with us.

Who we are

Sumodi Ltd, trading as Sumodi, is the controller responsible for the personal information described in this Privacy Policy.

Sumodi Ltd
Registered in England and Wales
Company number: 12094843
Registered office: Unit 8, 327 Southchurch Road, Southend-on-Sea, Essex, England, SS1 2PE
Email: hello@sumodi.co.uk
Website: https://sumodi.co.uk

Personal information we collect

The personal information we collect depends on how you interact with us and may include:

Identity and contact information

This may include your:

• name;
• business or organisation;
• job title;
• email address;
• telephone number;
• business address; and
• social-media or professional profile information.

Enquiry and communication information

This may include:

• information you provide through our contact form;
• emails, messages and correspondence;
• notes from calls and meetings;
• information about your business, requirements and projects; and
• records of our communications with you.

Client and service information

If you become a client, we may collect:

• information needed to provide the agreed services;
• project briefs, documents and content;
• login or access information provided for relevant business platforms;
• records of work completed, decisions and approvals;
• contracts, proposals and statements of work;
• transaction and invoice details; and
• feedback about our services.

We will only access client systems and information where this is necessary to provide the agreed services.

Newsletter and marketing information

This may include:

• your name and email address;
• the date and method by which you subscribed;
• your communication preferences;
• whether you opened or interacted with an email, where this functionality is enabled; and
• records of consent, unsubscribes and objections.

Testimonial information

If you provide a testimonial, we may collect and publish information such as your:

• name;
• job title;
• organisation;
• photograph, where agreed; and
• comments about your experience of working with Sumodi.

We will agree with you how your testimonial will be attributed before publishing it.

Website and technical information

When you use our website, we may collect:

• your IP address;
• browser and device information;
• pages visited and time spent on the website;
• referral source;
• security and diagnostic information; and
• your cookie and consent preferences.

Further information is available in our Cookies Policy.

Payment information

We may collect records relating to payments and invoices. Where a third-party payment provider processes a payment, we do not normally receive or store your complete payment-card details.

How we collect personal information

We may collect personal information:

• directly from you when you contact us, complete a form, subscribe, enter into an agreement or work with us;
• through our website and the technologies used to operate it;
• through introductions and referrals;
• from your employer or organisation;
• from clients where we are providing services on their behalf;
• from public business sources, including company websites, Companies House and professional platforms such as LinkedIn; and
• from service providers that help us operate our business.

How and why we use personal information

Data protection law requires us to have a lawful basis for using personal information.

To respond to enquiries

We use your information to respond to questions, understand your requirements, arrange calls and prepare proposals.

Our lawful bases are taking steps at your request before entering into a contract and our legitimate interest in responding to business enquiries.

To provide our services

We use personal information to manage projects, communicate with clients, provide agreed services and administer the client relationship.

Our lawful bases are performing a contract and our legitimate interest in operating our business and delivering services effectively.

To administer contracts, invoices and payments

We use relevant information to issue invoices, process and record payments, maintain accounting records and meet our financial obligations.

Our lawful bases are performing a contract, complying with legal obligations and our legitimate interest in managing our finances.

To manage our business relationships

We may use contact and communication information to maintain relationships with clients, prospective clients, suppliers, freelancers and other professional contacts.

Our lawful basis is our legitimate interest in managing and developing our business relationships.

To send newsletters and marketing communications

We use personal information to send newsletters and information about Sumodi’s services where you have asked to receive them or where business-to-business marketing is otherwise permitted by law.

Our lawful bases are consent and, where appropriate, our legitimate interest in promoting relevant services to business contacts.

You can unsubscribe at any time by using the link in an email or contacting hello@sumodi.co.uk.

To publish testimonials

We use testimonials to explain clients’ experiences and promote our services.

We will normally rely on your consent to publish an identifiable testimonial. You can ask us to remove or update your testimonial by contacting us.

To operate and protect our website and business

We may use technical and communication information to:

• maintain and secure our website;
• prevent fraud, spam and misuse;
• diagnose technical problems;
• manage cookie preferences;
• protect our systems and business information; and
• establish, exercise or defend legal claims.

Our lawful bases are our legitimate interests in operating a safe and effective website, protecting our business and complying with legal obligations.

To meet legal and regulatory obligations

We may use or disclose information where necessary to comply with the law, respond to a lawful request, resolve a complaint or protect someone’s legal rights.

Our lawful bases are compliance with legal obligations and our legitimate interests in protecting our legal position.

Where we rely on legitimate interests

Where we rely on legitimate interests, we consider:

• whether the use of the information is necessary;
• the reasonable expectations of the person concerned;
• the potential effect on their rights and interests; and
• whether those interests are outweighed by the need to protect the individual.

You have the right to object to our use of your personal information where we rely on legitimate interests.

When we work with personal information for clients

As part of our marketing and business-support services, Sumodi may handle personal information on a client’s behalf. This may include information held in a client’s email-marketing platform, website, CRM system, social-media account or other business system.

In these circumstances:

• the client will normally be the controller;
• Sumodi will normally act as the processor;
• we will only use the information on the client’s documented instructions;
• the client’s privacy notice will explain how it uses the information; and
• our responsibilities will be governed by the relevant client agreement and data-protection terms.

If you have a question about information held by one of our clients, you should normally contact that client directly.

Sharing personal information

We do not sell personal information.

We may share information where necessary with:

• website-hosting, maintenance and security providers;
• email, cloud-storage and collaboration providers;
• MailerLite, which supports our newsletter and sign-up forms;
• CookieYes, which manages website cookie preferences;
• accounting, invoicing and payment providers;
• freelancers, subcontractors or specialist suppliers assisting with agreed work;
• professional advisers, including accountants, insurers and legal advisers;
• clients where we are working on their behalf;
• regulators, courts, law-enforcement agencies or public authorities where required by law; and
• a purchaser, adviser or relevant party if Sumodi is involved in a business sale, restructuring or transfer.

Service providers are only permitted to use personal information for the agreed purpose and must protect it appropriately.

International transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to protect it. These may include:

• transferring information to a country recognised by the UK as providing adequate protection;
• using approved contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum; or
• relying on another legally permitted transfer mechanism.

You can contact us for more information about the safeguards used for a particular transfer.

How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.

Our usual retention periods are:

• General enquiries: normally up to two years after our last meaningful contact.
• Client and project records: normally up to six years after the client relationship or relevant project ends.
• Contracts, invoices and accounting records: normally six years or longer where required by law.
• Newsletter information: until you unsubscribe or we stop sending the newsletter. We may retain minimal suppression information to ensure we respect your opt-out.
• Testimonials: while they remain relevant and we have permission to use them, or until consent is withdrawn.
• Data-protection complaints: for as long as necessary to demonstrate how the complaint was handled and protect the parties’ legal rights, normally up to six years.
• Cookie information: for the periods described in our Cookies Policy.

We may keep information for longer where required by law, where a dispute exists or where it is needed to establish, exercise or defend legal claims.

Keeping personal information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include:

• password-protected systems;
• access controls;
• multi-factor authentication where available;
• secure cloud services;
• appropriate contractual protections; and
• limiting access to people who need the information for a legitimate business purpose.

No internet or electronic-storage system is completely secure, but we take reasonable steps to protect the information we handle.

Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to our use of your information;
• ask us to transfer information you provided to another organisation;
• withdraw consent at any time where we rely on consent; and
• complain about how we have used your information.

Some rights only apply in particular circumstances and may be subject to legal exemptions.

To exercise a right, email hello@sumodi.co.uk. We may need to ask for information to confirm your identity before responding.

You will not normally have to pay a fee. However, the law may permit us to charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

Automated decision-making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Children’s information

Our website and services are intended for businesses and business professionals. They are not directed at children, and we do not knowingly collect personal information from children through this website.

If you believe a child has provided personal information to us, please contact hello@sumodi.co.uk.

Data-protection complaints

If you have concerns about how Sumodi collects, uses or protects your personal information, you can make a data-protection complaint by emailing hello@sumodi.co.uk.

We will acknowledge your complaint within 30 days of receiving it. We will investigate it appropriately, keep you informed and explain the outcome without undue delay.

If you remain unhappy after raising your complaint with us, you have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Links to other websites

Our website may link to websites operated by other organisations. We are not responsible for their privacy practices. You should read the privacy information provided by any third-party website you visit.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our website, services, business practices or legal obligations.

The latest version will be published on this page, and the date at the top will show when it was last updated.

Contact us

If you have questions about this Privacy Policy or how Sumodi uses personal information, contact:

Sumodi Ltd
Email: hello@sumodi.co.uk
Registered office: Unit 8, 327 Southchurch Road, Southend-on-Sea, Essex, England, SS1 2PE