Privacy Policy

This policy applies to:

• Visitors to our websites and landing pages.
• Prospective, current, and former clients and their representatives.
• Recipients of our marketing communications.
• Job candidates and contractors.

Longbow Works Limited is the data controller for processing described in this policy.

Legal entity: Longbow Works Limited
Company number: 15841462 (registered in England and Wales)
Registered office: 128 City Road, London, EC1V 2NX
Contact email: hello@longbowworks.co.uk

We collect and process the following categories of personal data, depending on your interactions with us:

• Identity data: name, job title, company.
• Contact data: email address, phone number, postal address, country.
• Account and contract data: proposals, statements of work, invoices, payment status, authentication data for client portals.
• Marketing and communications data: preferences, engagement with emails, event registrations.
• Usage and device data: your IP address, browser type and the pages requested, as recorded in our hosting provider’s server logs and by the spam check on our contact form.
• Lead and CRM data: public LinkedIn/website info, notes from discovery calls, form submissions.
• Recruitment data: CV/resume, cover letters, interview notes, references.
• Enquiry form data: the name, email address and message you send through our contact form.
• Content you provide: support requests, briefings, creative assets and metadata.

We use personal data to:

• Provide and improve our services, websites, and client support.
• Create, perform, and manage proposals, contracts, and billing.
• Respond to enquiries made through our contact form or by email.
• Send service notices and marketing communications (you can opt out at any time).
• Detect, prevent, and investigate security incidents and fraud.
• Recruit, assess, and onboard candidates and contractors.
• Comply with legal obligations and enforce our agreements.

Where UK/EU data protection law applies, we rely on the following legal bases:

1. Contract: processing necessary to perform a contract or take steps at your request before entering into a contract.
2. Legitimate interests: running and protecting our business, marketing to business contacts, improving services, and preventing fraud (balanced against your rights).
3. Consent: where required for specific marketing or non-essential cookies. You can withdraw consent at any time.
4. Legal obligation: compliance with accounting, tax, and regulatory requirements.

Our website uses only strictly necessary cookies and similar technologies: a sign-in session cookie that is set for authorised editors of the site, never for ordinary visitors, and the Cloudflare Turnstile check that protects our contact form from spam. We do not use analytics, advertising, retargeting or social-media tracking cookies. Our Cookie Policy describes exactly what is used.

We do not currently use website analytics, tag managers, advertising networks or tracking pixels. If we introduce any of them, we will update this policy and our Cookie Policy first, and ask for your consent where the law requires it.

We share personal data only as necessary and with appropriate safeguards:

• Service providers (processors): hosting and infrastructure (for example Amazon Web Services), spam protection for our contact form (Cloudflare), email, CRM, invoicing and payment processing, project management and support tools.
• Professional advisors: lawyers, accountants, auditors.
• Business transfers: in connection with a merger, acquisition, or asset sale.
• Legal and compliance: when required by law or to protect rights, safety, and security.

Where data is transferred outside the UK/EEA, we use appropriate safeguards such as UK/EU Standard Contractual Clauses and (where applicable) the UK–US Data Bridge/adequacy decisions, supplemented by transfer risk assessments when required.

We retain personal data only as long as necessary for the purposes described or to comply with legal obligations:

• Client/contract data: generally kept for the contract term plus up to 7 years for legal/financial records.
• Marketing data: retained until you opt out or after a defined inactivity period.
• Recruitment data: typically 6–12 months for unsuccessful candidates, unless you consent to longer.

We implement technical and organisational measures appropriate to the risk, including access controls, encryption in transit where applicable, least-privilege access, backups, and vendor due diligence. No method of transmission or storage is 100% secure.

Subject to conditions and exemptions, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase data (“right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to processing based on legitimate interests and to direct marketing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority (e.g., the UK ICO).

To exercise your rights or make a privacy request, contact us at hello@longbowworks.co.uk. We may request information to verify your identity and will respond within the timeframes required by law.

If you are unhappy with how we have handled your personal data, please tell us first at hello@longbowworks.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Our services are not directed to children and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us to request deletion.

Our websites may include links to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing personal data.

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated via our website or direct notice where appropriate.

If you have questions or concerns about this policy or our data practices, contact:

Longbow Works Limited
Company number 15841462, registered in England and Wales
Registered office: 128 City Road, London, EC1V 2NX
Email: hello@longbowworks.co.uk