Privacy Policy

1. Who We Are

Data Controller: SparkWorks Ltd (Company No. 17414697, England & Wales).

Registered Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Data Protection Contact: privacy@sparkworks.tech

ICO Registration Number: [Pending/Registered].

Sparkworks operates the website sparkworks.tech and provides AI visibility audits, website services, and growth retainer packages.

2. What Data We Collect

We collect the following personal data when you use our services:

• Free Audit form: business email address, website domain, and industry sector.
• Package intake checkout: name, email, business name, website domain, target country, and any additional details you provide for the selected package (e.g. current CMS, page count, competitors, locations).
• Paid orders and subscriptions: business name, email, target country, domain, selected package, add-ons, and payment status.
• Technical data: IP address (for rate limiting and reCAPTCHA fraud prevention; not stored long-term), browser user-agent, and page interactions.

3. How We Use Your Data

• To run your free AI visibility audit and deliver results.
• To process paid audit orders and communicate delivery details.
• To enforce rate limits and prevent abuse (IP-based, short-term).
• To distinguish between humans and automated abuse using Google reCAPTCHA v3.
• If you explicitly opt in, to send occasional GEO and SEO insights via email. You can unsubscribe at any time.

4. Lawful Basis for Processing

We process personal data under the following UK GDPR Article 6 bases:

• Contractual Necessity (Art. 6(1)(b)): processing paid order and subscription data to deliver the service you purchased.
• Legitimate Interests (Art. 6(1)(f)): delivering your free GEO audit report, preventing fraud and abuse via reCAPTCHA and rate limiting, and defending our systems.
• Consent (Art. 6(1)(a)): marketing emails, which require a separate opt-in checkbox.

5. Data Processors & Sub-processors

We use the following third-party processors to deliver our services. Each is contractually bound to protect your data:

For more on Google's use of reCAPTCHA data, see Google's Privacy Policy and Terms of Service.

6. Data Storage & Security

Your data is stored in Google Cloud Firestore (Firebase) with encryption at rest and in transit. Access to personal data is restricted to authorised Sparkworks administrators via Firebase Authentication. We do not sell, rent, or share your personal data with third parties for marketing purposes.

7. Data Retention

• Free audit leads: deleted automatically 90 days after submission unless you become a customer or actively opt in to marketing.
• Paid customer records: retained for 6 years for HMRC tax and accounting compliance, then securely deleted.
• Rate-limit records (IP/email counters): expire automatically after 24 hours.
• Cached audit results: expire automatically after 15 minutes.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw marketing consent at any time.
• Object to or restrict processing based on legitimate interests.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We respond to Subject Access Requests and right-to-erasure requests within 30 calendar days. Contact us at privacy@sparkworks.tech.

9. Cookies & Tracking

We use essential cookies only. Google reCAPTCHA may set cookies or local storage items for fraud prevention. We do not use advertising or tracking cookies.

10. Contact

For any data protection queries or requests, email us at privacy@sparkworks.tech.