The Development Sprint Ltd
Trading as The Development Sprint
Registered office: 78 Marten Road, London E17 4NN, United Kingdom
Website: developmentsprint.co.uk
Contact: tom@developmentsprint.co.uk

1. About this policy

This privacy policy explains how The Development Sprint Ltd collects, uses, shares and protects personal information when people visit our website, contact us, receive business communications from us, or work with us.

The Development Sprint Ltd is the controller of the personal information described in this policy, except where we process information solely on a client’s documented instructions, as explained in section 7.

2. Personal information we collect

Website information

When someone visits our website, we may collect basic technical and security information generated by the website or its hosting provider, such as:

• IP address
• browser and device information
• pages requested
• date and time of access

Our website does not currently use a contact form or allow file uploads.

Enquiry and communication information

If someone contacts us by email, phone, LinkedIn or another channel, we may collect:

• name, contact details, company details and role
• message content and correspondence
• project, brief or business enquiry details
• meeting notes and follow-up communications

Professional contact and business-development information

We may collect limited professional information about people who may reasonably be interested in our services, including:

• name, work contact details, employer and job title
• professional interests and publicly available career information
• the source of the information and our record of relevant contact, preferences and responses

Client, freelancer and supplier information

If we work together, we may collect and use information needed to manage the relationship, including:

• contact and company details, contracts and project schedules
• invoice, payment and accounting information
• project communications, meeting notes, records of decisions, documents and materials shared with us

We do not intentionally collect special-category, criminal-offence or other highly sensitive information through our website or initial contact process. Please do not send it unless necessary and we have agreed how to handle it.

3. Where personal information comes from

We may receive personal information:

• directly from the person concerned, or from their employer, colleagues, representatives or professional advisers
• from clients, freelancers, suppliers and other people involved in a Sprint
• from public professional sources, referrals, introductions, events and professional networks
• from our website hosting, email and workspace providers

4. How we use personal information

We use personal information to:

• respond to enquiries, arrange meetings, and assess or plan potential Sprints and collaborations
• provide services to clients and manage project delivery, freelancers, contractors and suppliers
• prepare proposals, contracts, project schedules, invoices and other business records
• protect our business, clients, confidential materials, website and systems
• develop our services and business, send lawful communications, meet compliance requirements, and manage legal claims

5. Legal bases for using personal information

Contract: where processing is needed to take steps at someone’s request before entering into a contract, or to perform a contract with them.

Legitimate interests: where processing is needed to run and develop our business, respond to enquiries, manage professional relationships, deliver and improve our services, identify suitable professional contacts, communicate with corporate clients and prospects, protect confidential information, secure our systems, and establish or defend legal claims. We consider the necessity and likely privacy impact before relying on this basis.

Legal obligation: where processing is needed for accounting, tax, regulatory or other legal compliance.

Consent: where someone has given consent and consent is required, including for non-essential cookies or particular marketing communications. Consent can be withdrawn at any time.

6. Contacting us and arranging meetings

The email links on our website allow visitors to contact us at tom@developmentsprint.co.uk. We do not receive any personal information unless someone chooses to send an email.

Emails are processed through the sender’s email service and our email provider. We use the information supplied to respond to the enquiry, arrange meetings and discuss potential work.

7. Personal information in client project materials

A client may provide project materials that contain personal information about contributors, talent, employees, commissioners or other people. Where we use that information for our own legitimate business administration, we act as a controller. Where we process it solely to deliver the client’s instructions, the client normally remains the controller and The Development Sprint acts as its processor.

In those circumstances, we use the information only for the agreed project, apply appropriate confidentiality and security measures, restrict access to the people who need it, and follow the data-protection terms agreed with the client.

8. Marketing and business communications

We may send occasional, relevant business-to-business communications about The Development Sprint to existing clients and professional contacts where permitted by law. Depending on the circumstances, we rely on consent or our legitimate interests, and we comply with the Privacy and Electronic Communications Regulations where they apply.

Every marketing communication will explain how to opt out. People can also ask us to stop at any time by contacting tom@developmentsprint.co.uk. We may retain a minimal suppression record so that we can respect an opt-out in future.

9. Sharing personal information

We may share personal information where reasonably necessary with:

• website hosting, email and workspace providers
• video-meeting, cloud-storage, design and project-service providers
• accountants, legal advisers, insurers and other professional advisers
• freelancers, contractors, consultants and specialist suppliers working on a project or Sprint
• a prospective buyer, investor or adviser if our business or assets are reorganised or transferred, subject to appropriate confidentiality
• public authorities, regulators, courts or law enforcement where required or permitted by law

We require service providers and project personnel to protect personal information and use it only for the relevant purpose. We do not sell personal information.

10. International transfers

Some of our service providers may store or process personal information outside the United Kingdom. Where this involves a restricted transfer, we use a transfer mechanism recognised by UK data-protection law.

Depending on the destination and provider, this may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework for participating US organisations, or appropriate contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any required data-protection assessment.

To ask for further information about the safeguards relevant to a particular transfer, contact tom@developmentsprint.co.uk. Any copy provided may be redacted where necessary to protect confidential or commercially sensitive information.

11. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. We consider the nature of the information, legal and contractual requirements, limitation periods, insurance needs, and whether the information is still relevant.

In general:

• unsuccessful or inactive enquiry and meeting records are normally kept for up to two years after the last meaningful contact, unless there is a continuing relationship or another good reason to keep them longer
• client, contract, project, invoice and accounting records are normally kept for six years after the relevant relationship, project or accounting period ends, and may be kept longer where required for legal, insurance or dispute-resolution purposes
• freelancer and supplier records are kept for the relationship and the applicable legal, accounting and insurance period afterwards
• marketing suppression records may be kept for as long as needed to honour an objection or opt-out

At the end of the relevant period, we delete or securely dispose of the information, or anonymise it so that it no longer identifies an individual.

12. Security

We use reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, password and account security, secure cloud services, confidentiality obligations, limited project access, and appropriate backup and device-security practices.

No website, email system or online service can be guaranteed to be completely secure. Please take care when sending confidential or sensitive information and contact us if a more secure transfer method is needed.

13. Cookies and analytics

Our website may use strictly necessary technical cookies or similar storage needed for security, network management and core operation. These do not require consent where the legal exemption applies.

We do not currently use advertising or marketing cookies on the website. If we introduce non-essential analytics, advertising or marketing cookies, we will explain what they do and ask for consent before they are set. Visitors will be able to refuse or withdraw consent as easily as they give it.

The email links on our website do not themselves collect information or set cookies.

14. Your data-protection rights

Depending on the circumstances and the legal basis we rely on, individuals may have the right to:

• request access to their personal information
• ask for inaccurate or incomplete information to be corrected
• ask for information to be deleted in certain circumstances
• object to processing based on legitimate interests
• ask for processing to be restricted
• receive or transfer information in certain circumstances
• withdraw consent at any time where processing is based on consent

These rights are not absolute and exemptions may apply. We may need to confirm identity before acting on a request. We do not normally charge a fee and will normally respond within one month.

Your absolute right to object to direct marketing

You can object at any time to our use of your personal information for direct marketing. If you object, we will stop using it for that purpose. There is no charge. Contact tom@developmentsprint.co.uk or use the unsubscribe option in the communication.

To exercise any other data-protection right, contact tom@developmentsprint.co.uk.

You also have the right to complain to the UK Information Commissioner’s Office. Information about how to raise a concern is available at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address the issue first, but this does not affect your right to contact the ICO.

15. Information needed to work with us

Some personal information is needed so that we can respond to an enquiry, arrange a meeting, enter into or perform a contract, make or receive payment, or meet legal requirements. If the necessary information is not provided, we may be unable to proceed with the enquiry or relationship.

We do not make decisions about people using solely automated processing where those decisions have legal or similarly significant effects.

16. Updates to this policy

We may update this privacy policy from time to time. The latest version will be posted on our website. If a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people where appropriate.

Last updated: 6 August 2026