Privacy Policy

Welcome to Sherlock Intelligence Ltd (“Company,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.sherlockintelligence.co.uk and use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

Information You Provide to Us

We collect information that you voluntarily provide when you:

• Fill out contact forms or enquiry forms
• Subscribe to our newsletter or marketing communications
• Request a quote or consultation
• Communicate with us via email or phone

This information may include:

• Full name
• Email address
• Phone number
• Business name
• Job title
• Mailing address
• Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Date and time of visits
• Device information

We collect this information using a combination of essential cookies and a cookieless analytics tool (Vercel Web Analytics). The analytics tool does not place cookies, does not identify individual visitors, and is used only for aggregate site usage measurement. See Section 6 for more details.

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support
• To deliver the services you request
• To send administrative information, such as updates to our terms and policies
• To send promotional communications, with your consent
• To personalise your experience and deliver content relevant to your interests
• To improve our website, products, and services
• To monitor and analyse usage trends
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations

Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases depending on the purpose:

• Performance of a contract: where processing is necessary to deliver services you have requested or to fulfil a contractual obligation.
• Legitimate interests: where we have a legitimate business interest in processing your data (for example, responding to enquiries, improving our services, or detecting fraud) and that interest is not overridden by your rights.
• Consent: where you have given clear consent for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with a legal requirement.

We may share your information in the following circumstances:

Service Providers: We may share your information with third-party vendors, service providers, and contractors who perform services on our behalf, such as payment processing, email delivery, hosting, and customer service. These parties are contractually obligated to protect your information and use it only for the purposes we specify.

AI Processing Providers: We use AI-powered tools to assist with processing enquiries and delivering our services. Some of these tools are provided by third-party providers based outside the UK. See Section 9 for full details on international transfers and AI processing.

Business Transfers: If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court or government agency.

Protection of Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.

With Your Consent: We may share your information for other purposes with your explicit consent.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the information, and applicable legal requirements.

When we no longer need your personal information, we will securely delete or anonymise it.

We use essential cookies to enable our website to function properly. Essential cookies are strictly necessary and cannot be disabled without affecting the operation of the site.

We do not currently use analytics cookies, marketing cookies, or other tracking technologies that collect personal data for advertising or profiling purposes.

We use Vercel Web Analytics for cookieless, aggregate site usage measurement. It does not place cookies, does not identify individual users, and does not share data with advertising networks. Vercel acts as our data processor under our hosting agreement.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our website may not function properly without essential cookies.

Under UK GDPR, you have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
• Deletion: You have the right to request that we delete your personal information, subject to certain exceptions.
• Object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time. You can do this by clicking the “unsubscribe” link in our emails or by contacting us directly.
• Data Portability: Where applicable, you have the right to receive your personal information in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at john@sherlockintelligence.co.uk.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We use AI-powered tools to assist with processing enquiries, analysing information, and delivering our services. Some of these tools are provided by third-party providers based outside the UK, including providers in the United States. For example, we use Claude, an AI service provided by Anthropic, Inc. (USA), to assist with aspects of our business operations.

Where personal data is transferred to providers outside the UK, we rely on appropriate transfer mechanisms to ensure your data remains protected. These include UK International Data Transfer Agreements (IDTAs) or UK Addendums to Standard Contractual Clauses, as approved by the Information Commissioner's Office (ICO).

If you are accessing our website from outside the UK, please be aware that your information may be transferred to, stored, and processed in the UK or other countries where our service providers are located.

Our website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not complied with applicable data protection laws.