Master Privacy Policy for blueSatsuma Ltd

Last updated: [16/01/2026]

blueSatsuma Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with us online or offline, use our website, engage our services, or work with us as a client, supplier, contractor, employee, or applicant.

1. Who We Are

blueSatsuma Ltd
21 Carse Road, Chichester, West Sussex, PO19 6YG
Company number: 05704658
Email: info@bluesatsuma.co.uk

2. Categories of Personal Data We Process

A. Data collected through our website
  • Contact form submissions
  • Email enquiries
  • Project briefs or uploaded files
  • Newsletter sign-ups (if applicable)
  • IP address, browser type, device information
  • Pages visited, time spent, interaction data
  • Cookies and tracking technologies
B. Client and business contact data
  • Names, job titles, company information
  • Email addresses, phone numbers, postal addresses
  • Project briefs, creative assets, and related materials
  • Billing and payment information
C. Supplier and contractor data
  • Contact details
  • Contracts and agreements
  • Payment details
D. Employee and applicant data
  • CVs, application forms, interview notes
  • Payroll and tax information
  • Emergency contacts
  • Performance and HR records
E. Operational and administrative data
  • Internal communications
  • Project files and documentation
  • Financial records
  • Security logs (e.g., access logs, device logs)

3. How We Use Personal Data

Website & marketing
  • Responding to enquiries
  • Providing quotations
  • Improving website performance and user experience
  • Sending marketing communications (only with consent)
  • Ensuring website security and preventing fraud
Client services
  • Managing client relationships
  • Delivering design, branding, development, and digital services
  • Administering contracts and billing
Business operations
  • Maintaining internal records
  • Managing suppliers and contractors
  • Conducting financial management and accounting
  • Ensuring compliance with legal and regulatory obligations
HR & recruitment
  • Managing recruitment processes
  • Administering employment and payroll
  • Maintaining performance and HR records

4. Legal Bases for Processing

  • Contract – fulfilling agreements with clients, staff, and suppliers
  • Consent – optional marketing or voluntary data
  • Legitimate interests – business operations, analytics, security, communication
  • Legal obligation – tax, employment law, financial record-keeping

5. Data Security

  • Encrypted servers and secure digital storage
  • Access-controlled systems
  • Secure backups
  • Confidentiality agreements with staff and contractors
  • Secure disposal of physical documents
  • GDPR-compliant third-party processors

6. Data Retention

Data Type Retention Period
Client project files 6–7 years
Financial records 6 years (legal requirement)
HR and payroll records 6 years after employment ends
Applicant data 6–12 months
Supplier contracts Duration of contract + 6 years
Website analytics data As per tool provider’s retention policy

7. Sharing Your Data

  • Hosting and IT service providers
  • Email and communication platforms
  • Analytics services
  • Accountants and legal advisors
  • Contractors working on client projects
  • HMRC or regulatory bodies when required

8. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), and additional technical and organisational protections.

9. Cookies

Our website uses essential, analytics, and performance cookies. You can manage or disable cookies through your browser settings. A full Cookie Policy can be provided separately.

10. Your Rights

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with the ICO

11. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on request or on our website.

12. Contact Us

blueSatsuma Ltd
21 Carse Road, Chichester, West Sussex, PO19 6YG
Email: info@bluesatsuma.co.uk