Privacy Policy

Last updated: 27 October 2026

 

Who we are

Sweet Spot Consulting Ltd (trading as Sweet Spot) is the controller of the personal data described here. We are registered in England and Wales (company number 14226039), with our registered office at 167-169 Great Portland Street, London W1W 5PF. We are registered with the Information Commissioner’s Office (ICO), registration number ZB601022. For any privacy question, email tina@thesweetspotstrategy.com.

 

What we collect

• Contact and business details you give us when you book a call, request a sample, email us or message us on LinkedIn: name, email, job title, company, phone number and LinkedIn profile.
• Your booking answers, such as your brand, category and the challenge you want to talk through.
• Call recordings and transcripts, when we record a call with Fathom. We always tell you at the start, and you can ask us not to.
• Project information you share with us, such as sales data or research. It is mostly business data, but may include names and work contact details.
• Website usage data from cookies, only with your consent where the law requires it (see our Cookie Policy).
• Public social and search data used in our research. We look at conversations in aggregate to understand a category. We do not build profiles of individuals or contact the people behind public posts.

 

Why we use it, and our legal basis

• Replying to enquiries, booking and preparing for calls: legitimate interests, or steps before entering a contract.
• Recording and transcribing calls, so we can focus on you and keep accurate notes: legitimate interests (you are told first and can say no).
• Delivering our services, invoicing and managing our client relationship: contract.
• Keeping accounting and tax records: legal obligation.
• Business-to-business marketing, such as LinkedIn messages and occasional emails about our services: legitimate interests (you can opt out at any time).
• Website analytics and LinkedIn advertising: consent.
• Aggregated research using public social and search data: legitimate interests.

 

If we contacted you first

We contact people in senior roles at consumer brands whose work our services could help, usually by LinkedIn message and sometimes by email. If you hadn’t contacted us before we contacted you, this is how it works.

• Where we found your details: your LinkedIn profile, your company’s website, Companies House and other public business directories.
• What we keep: your name, job title, company, work email address and LinkedIn profile, plus a note of when and how we contacted you. We do not use personal email addresses or collect sensitive information.
• Why, and our legal basis: legitimate interests, to tell businesses about services relevant to their role. We have weighed this against your rights: we only contact people about their work, in roles where our services are relevant, and we make it easy to say no.
• Email: we only send unsolicited emails to work addresses at limited companies and LLPs. Every email says who we are and how to opt out. We do not send marketing emails to sole traders or partnerships unless they have agreed to hear from us.
• Phone: we do not make unsolicited marketing calls to numbers registered with the Telephone Preference Service (TPS) or Corporate TPS.
• Telling you: our first message links to this policy.
• Saying no: reply “no thanks” or email tina@thesweetspotstrategy.com and we will stop straight away. We keep only your name, company and email on a do-not-contact list, so we never contact you again by mistake.
• How long: if you don’t reply or become a client, we delete your details 2 years after our last contact.

 

Who we share it with

We never sell personal data. We share it only with the service providers that help us run Sweet Spot, under contracts that protect it:

• Wix (our website, forms and hosting)
• Calendly (call booking)
• Usercentrics (our cookie consent banner, which records your cookie choices)
• Google Workspace (email, Google Meet and file storage)
• Fathom (call recording and transcription)
• HubSpot (our client and contacts records)
• Google Analytics (website analytics)
• LinkedIn (messaging, advertising and the LinkedIn Insight Tag)
• Our accountant, and trusted specialists working on your project under confidentiality

We may also share data if the law requires it.

 

International transfers

Some of these providers store data outside the UK, mainly in the United States. Where they do, the transfer is protected by the UK Extension to the EU-US Data Privacy Framework, or by the UK International Data Transfer Agreement or Addendum.

 

How long we keep it

• Enquiries and contacts who don’t become clients: up to 2 years after our last contact.
• Client records: 6 years after the end of the work, for accounting and tax purposes.
• Call recordings and transcripts: up to 12 months, unless they form part of client project records.
• Cookie data: see our Cookie Policy.

 

Your rights

You have the right to access your personal data, correct it, ask us to delete it, restrict or object to how we use it (including for marketing), receive a copy in a portable format, and withdraw consent at any time. Email tina@thesweetspotstrategy.com and we will respond within one month.

 

Keeping it safe

We use providers with strong security, two-factor sign-in where available, and access only for the people who need it.

 

Complaints

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the ICO: ico.org.uk or 0303 123 1113.

 

Changes

We will update this page if anything changes and show the date at the top.