Scope of this notice. This notice does not cover personal information processed through Spannerly’s software as a service or on behalf of future customers. A separate customer and product privacy notice will be needed for those activities.
01 Who we are
Spannerly Ltd is a company registered in England and Wales under company number 17508146.
Registered office: 12 London Road, Morden, England, SM4 5BQ.
Contact:company@spannerly.co.uk.
For the activities described in this notice, Spannerly Ltd is the data controller.
02 What personal information we collect
When you contact us, express interest in Spannerly, take part in market research or consider joining our early-adopter programme, we may collect:
- your name and business contact details;
- your business name, business type and operating area;
- information about your business needs and your interest in Spannerly;
- communications with us, including feedback and meeting notes; and
- your marketing preferences and records of any consent or objection.
We aim to collect only the information reasonably necessary for these purposes.
03 Why we use your information
We may use personal information to:
- respond to enquiries and communicate with interested businesses;
- understand the needs of mobile mechanics and independent garages;
- organise market research and product feedback;
- recruit and communicate with prospective early adopters;
- manage follow-ups and relevant business relationships; and
- send promotional product updates or other marketing emails only where you have given separate affirmative opt-in consent.
04 Our lawful bases
Depending on the activity, we may rely on the following lawful bases:
Legitimate interests. We may use personal information to respond to relevant business enquiries, carry out proportionate market research, maintain business relationships and develop our services, where our interests are not overridden by your rights and interests.
Consent. We require a separate affirmative, unticked opt-in for every Spannerly promotional email. We do not treat an enquiry, participation in market research, a requested follow-up, an early-adopter discussion, joining a beta or accepting terms as promotional consent. We may also ask for permission for another activity where consent is required.
Steps before entering into a contract. We may process information where you ask us to take steps towards a potential subscription or early-adopter arrangement.
We will also comply with applicable UK electronic marketing rules, including the Privacy and Electronic Communications Regulations (PECR). The purpose and content of a message determine how it is treated; describing a message as research, a service message or a relationship follow-up does not by itself remove marketing rules.
05 Where we obtain information
We may receive information directly from you through enquiries, meetings, forms or other communications.
We may also obtain relevant professional contact details from publicly available business websites, directories or professional networks where this is lawful and appropriate.
06 How we store and protect information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss or misuse.
We may use third-party business systems, including customer relationship management, email and productivity services, to store and manage relevant information.
We use Brevo to manage early-access signups and send confirmation emails. When you submit the waiting-list form, we send Brevo the information you provide, including your email address, optional first name and, if you answer it, your business-size response. We also send the records needed to manage your signup, email confirmation and consent.
Access is restricted to authorised individuals who need the information for legitimate business purposes.
07 Who we share information with
We may share personal information with service providers that support our business operations, such as providers of CRM, email, hosting and IT services.
For early-access signups, Brevo is our contact-management and email service provider. It processes signup details and confirmation records to manage the contact list and send the double opt-in and final confirmation emails. Brevo may use subprocessors to provide its services. Information about these arrangements is available inBrevo’s Data Processing Agreement.
We expect those providers to handle personal information in accordance with applicable data protection requirements and the terms agreed with us.
We do not sell prospect contact information.
08 International transfers
Brevo states that the servers used to process and store its databases are in the European Union. It identifies OVH hosting in France and Germany and Google Cloud storage in Belgium. These countries are covered by the UK’s adequacy regulations for the European Economic Area.
Brevo may use subprocessors as described in its Data Processing Agreement. If a service provider transfers personal information to a country not covered by UK adequacy regulations, we will ensure that an appropriate transfer mechanism and any required safeguards are in place. The ICO explains the countries currently covered byUK adequacy regulations.
09 How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes described in this notice.
We review prospect records after 12 months without meaningful engagement. This is a review point, not an automatic deletion deadline. At review, we delete or anonymise information that is no longer needed. We may retain information where an active relationship or another documented and justified purpose continues.
We may keep a minimal record of a marketing objection or opt-out for as long as necessary to ensure that we respect the preference and do not contact the person again for that purpose.
10 Your rights
Depending on the circumstances, you may have the right to:
- access your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- object to certain processing, including direct marketing;
- ask us to restrict processing;
- withdraw consent where processing relies on consent; and
- request data portability where applicable.
To exercise your rights, contactcompany@spannerly.co.uk.
You also have the right to complain to theInformation Commissioner’s Office.
11 Marketing preferences
Communications that you request, such as a reply to an enquiry, arrangements for agreed research or early-adopter activity, or necessary administration of a requested service or relationship, are kept separate from Spannerly promotional marketing. Their purpose and content must match the request or other applicable lawful basis.
Every Spannerly promotional email requires separate affirmative opt-in consent and must include a clear unsubscribe route. You may withdraw that consent or object to direct marketing at any time.
We will maintain appropriate consent records, honour withdrawals and marketing objections promptly, and keep a minimal suppression record for as long as necessary to ensure that you are not contacted again for the relevant promotional purpose.
12 Changes to this notice
We may update this notice as our business activities and services develop.
The latest version is made available through our official website or provided on request.