Privacy Policy

Overview

Blue Sky Strategy Ltd (“we”, “us”, “our”) respects your privacy and is committed to handling personal data lawfully, fairly and transparently.

This policy explains what personal data we collect, how we use it, how long we keep it, and the rights you have under UK data protection law.

Data controller

The data controller for this website and for Blue Sky Strategy Ltd’s own business operations is:

Data we collect

We only collect personal data that is necessary for the operation of our website, services and client work.

This may include:

• Contact information, such as your name, email address, phone number, job title and organisation.
• Information you provide through website forms, email enquiries or direct communications.
• Client and supplier information required for project delivery, invoicing, administration and legal compliance.
• Technical information, such as IP address, browser type, device information, pages visited and website interaction data.
• Campaign-related information where you choose to use a campaign tool we operate or support.

We do not intentionally collect special category personal data through this website unless it is clearly necessary for a specific service and appropriate safeguards are in place.

How we use your data

We may use personal data to:

• Respond to enquiries and communications.
• Provide consultancy, digital strategy, communications and campaign services.
• Manage client relationships, proposals, contracts, invoices and project delivery.
• Operate, test and improve our website and campaign tools.
• Monitor website performance, security and usage.
• Comply with legal, regulatory, accounting and tax obligations.

We do not sell personal data.

Lawful basis for processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Legitimate interests: to operate our business, respond to enquiries, provide services, maintain website security and develop our work.
• Contract: where processing is necessary to enter into or perform a contract with a client, supplier or partner.
• Consent: where you have actively agreed to a specific use of your data, such as receiving communications or submitting information through a campaign tool.
• Legal obligation: where we are required to keep or disclose information for legal, regulatory, tax or accounting reasons.

Sharing your data

We only share personal data where necessary and proportionate.

This may include sharing data with:

• Website hosting, analytics, email, cloud storage and technology providers.
• Professional advisers, including accountants, lawyers and insurers.
• Clients or campaign partners where this is necessary to deliver an agreed service.
• Regulators, public authorities or law enforcement bodies where required by law.

Where we use third-party processors, we expect them to handle personal data securely and in accordance with applicable data protection law.

Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting or reporting requirements.

As a general guide:

• Website enquiry data is usually retained for up to 12 months unless it becomes part of an active client or supplier relationship.
• Client, supplier and financial records are retained for the period required by law and normal business practice.
• Campaign tool data is retained only for as long as necessary for delivery, reporting, audit, troubleshooting or legal compliance.
• Analytics data may be retained in aggregated or anonymised form.

Campaign tools and Email Your MP services

Blue Sky Strategy Ltd may build, operate or support digital campaign tools, including tools that allow members of the public to contact elected representatives, public bodies or campaign targets.

Where a campaign tool is used, the specific information collected will normally be explained at the point of submission. This may include your name, email address, postcode, constituency, representative details, message content, consent status and basic technical information required for delivery and security.

How campaign tool data is used

Campaign tool data may be used to:

• Identify the relevant elected representative or campaign target.
• Send or prepare the message you have chosen to submit.
• Record that an action has taken place.
• Provide campaign reporting in aggregate or operational form.
• Maintain security, prevent misuse and troubleshoot delivery issues.

Messages to elected representatives

If you use a tool to send a message to an elected representative, the information needed to send that message may be shared with that representative or their office. They may process your data under their own privacy arrangements once they receive it.

Supporter communications

We will not add you to a mailing list or use your data for wider campaign communications unless you have been clearly told this and, where required, have given consent.

Client campaign data

For some client campaigns, Blue Sky Strategy Ltd may act as a processor on behalf of a client organisation. In those cases, the client’s privacy notice may also apply, and we process the data in accordance with our agreement with that client.

Cookies and tracking

Our website may use cookies and similar technologies to make the site work properly, understand how visitors use it, improve performance and support security.

Depending on the tools used on the site, cookies may include:

• Essential cookies required for basic website functionality.
• Analytics cookies that help us understand website traffic and usage.
• Marketing or advertising pixels where these are deployed for specific campaign activity.

You can control cookies through your browser settings. Where legally required, we will ask for your consent before setting non-essential cookies.

Your rights

Under UK data protection law, you may have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data in certain circumstances.
• Object to or restrict certain types of processing.
• Withdraw consent where processing is based on consent.
• Request the transfer of your data where the right to data portability applies.

To exercise your rights, contact rebecca@blueskystrategy.co.uk.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your data has been handled. We would, however, appreciate the opportunity to address any concern first.

Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

No website or online service can be guaranteed to be completely secure, but we take reasonable steps to protect the data we handle.

International transfers

Some service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place, such as adequacy regulations, approved contractual protections or equivalent safeguards recognised under UK data protection law.

Changes to this policy

We may update this policy from time to time. The latest version will be published on this page with the date of the most recent update.

Contact

For privacy questions, data protection requests or concerns about how your data has been handled, contact:

This privacy policy is intended to provide clear information about our data handling practices. It does not constitute legal advice.