Last Updated: 6 November 2026
Sugar Rush Creative Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This privacy notice explains how we collect, use, store and protect your personal data when you visit our website, contact us, or use our creative and digital services. It also informs you of your privacy rights under UK data protection law.
1. Who We Are and How to Contact Us
Sugar Rush Creative Ltd is the data controller responsible for your personal information.
Company Name: Sugar Rush Creative Ltd
Postal Address: 23 Bedford Street, Belfast, Northern Ireland, BT2 7EJ
Email: studio@sugarrushcreative.com
Telephone: 028 9507 2031
(Telephone lines are staffed Monday – Friday, 09:00 – 17:00 GMT. Calls may be recorded for quality and training purposes.)
If you have questions about this policy, or wish to exercise any of your statutory rights, please contact us using the details above.
2. The Information We Collect About You
We may collect, use, store and transfer different kinds of personal data depending on your interaction with us:
Identity & Contact Data: Name, business/employer name, job title, email address, telephone number and postal address.
Communication Data: Information contained in any correspondence you send to us via contact forms, emails, or telephone calls.
Technical & Usage Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system and data about how you use our website.
Marketing & Communications Data: Your preferences in receiving direct marketing communications from us.
Providing Information About Third Parties
If you provide us with personal data concerning another individual (such as a colleague or business partner), you confirm that you have informed them and have their authority to provide their details to us for the relevant business purpose.
3. How We Use Your Data and Our Lawful Bases
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we must identify a valid lawful basis for every purpose for which we process your data.
| Purpose / Activity | Type of Data | Lawful Basis for Processing (Article 6 UK GDPR) |
| Responding to inquiries submitted via our website form, email, or telephone | Identity, Contact, Communication | Legitimate Interests (to correspond with prospective clients and address queries). |
| Executing and managing client contracts (providing creative design, web development, billing and project delivery) | Identity, Contact, Transaction | Performance of a Contract (to fulfill our agreement or take steps prior to entering into a contract). |
| Direct marketing and newsletters (sending promotional emails and updates about our services) | Identity, Contact, Marketing | Consent (where requested) or Legitimate Interests (for existing business clients under applicable direct marketing rules). |
| Website security, administration and troubleshooting | Technical, Usage | Legitimate Interests (to ensure network security, maintain system integrity and improve our services). |
| Legal compliance (accounting, tax records, statutory disclosures) | Identity, Contact, Transaction | Legal Obligation (complying with UK statutory requirements, including HMRC). |
4. Who We Share Your Information With
We do not sell, rent, or trade your personal data. We disclose personal information only to:
Third-Party Service Providers (Data Processors): Trusted vendors who support our business operations under strict contractual data processing agreements. These include:
Professional Advisers: Accountants, legal counsel and insurers where necessary for professional advice or risk management.
Law Enforcement & Statutory Authorities: When required to comply with a legal summons, warrant, court order, or applicable statutory duty.
5. International Data Transfers
Where we use third-party service providers (such as cloud hosting, analytics, or communication tools) based outside the United Kingdom, your data may be transferred abroad.
Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded by implementing at least one of the following legal safeguards:
Transferring data to countries deemed to provide an adequate level of protection by the UK Government; or
Using specific approved contracts, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).
6. How Long We Keep Your Data
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including satisfying any legal, accounting, or reporting obligations:
General Inquiries: Unconverted prospective client inquiries are retained for up to 12 months from the date of the last interaction before being deleted or anonymized.
Client & Transaction Records: In accordance with UK statutory accounting and tax guidelines (HMRC), project files, contracts and financial records are retained for a minimum of 6 years following the end of the relevant financial year.
Marketing Lists: We retain your contact information for marketing purposes until you unsubscribe or withdraw your consent.
7. Data Security
We have implemented technical and organizational security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorized way. In addition, we limit access to your personal data to employees, contractors and agents who have a specific business need to know.
We maintain incident response procedures to manage suspected data security breaches. We will notify you and the Information Commissioner's Office (ICO) of a breach whenever we are legally required to do so.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure core website functionality, assess traffic patterns and improve site performance. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.
9. Your Legal Rights
Under UK data protection laws, you have the following rights regarding your personal information:
Request Access (Subject Access Request): Request a copy of the personal data we hold about you.
Request Correction: Request the rectification of inaccurate or incomplete information.
Request Erasure ("Right to be Forgotten"): Ask us to delete your personal data where there is no good reason for us continuing to process it.
Object to Processing: Object to processing where we rely on legitimate interests, including an absolute right to object to direct marketing at any time.
Request Restriction: Request the suspension of the processing of your personal data.
Request Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.
How to Exercise Your Rights
To exercise any of these rights, contact us at studio@sugarrushcreative.com. We do not charge a fee for standard requests and will respond within one calendar month. We may ask you to provide specific information to help us confirm your identity where reasonably necessary before processing your request.
10. How to Complain
If you have a concern about our information handling practices, please contact us first so we can resolve the issue directly.
You also have the right to lodge a complaint with the UK supervisory authority:
Authority: Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
Northern Ireland Regional Office:
Information Commissioner's Office – Northern Ireland
3rd Floor, 14 Cromac Place, Belfast, BT7 2JB
Telephone: 0303 123 1114
11. Changes to This Policy
We review and update this privacy policy periodically to reflect operational, legal, or regulatory changes. Any updates will be published directly on this page with an updated revision date.