Privacy Policy

Welcome to Sherlock Intelligence Ltd (“Company,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.sherlockintelligence.co.uk and use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

Information You Provide to Us

We collect information that you voluntarily provide when you:

• Fill out contact forms or enquiry forms
• Subscribe to our newsletter or marketing communications
• Request a quote or consultation
• Communicate with us via email or phone

This information may include:

• Full name
• Email address
• Phone number
• Business name
• Job title
• Mailing address
• Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Date and time of visits
• Device information

We collect this information using a combination of essential cookies and a cookieless analytics tool (Vercel Web Analytics). The analytics tool does not place cookies, does not identify individual visitors, and is used only for aggregate site usage measurement. See Section 6 for more details.

Information About Business Contacts

As part of our business development activities, we may process personal information about individuals at organisations we contact as prospective clients. This information is sourced from publicly available directories, professional networking platforms, company websites, and B2B data providers. It may include:

• Full name
• Work email address
• Job title
• Company name and business address
• Business telephone number

If you are a business contact and would like to be removed from our records, please contact us at john@sherlockintelligence.co.uk.

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support
• To deliver the services you request
• To send administrative information, such as updates to our terms and policies
• To send promotional communications, with your consent
• To personalise your experience and deliver content relevant to your interests
• To improve our website, products, and services
• To monitor and analyse usage trends
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations
• To contact business representatives in their professional capacity as part of our business development and direct marketing activities

Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases depending on the purpose:

• Performance of a contract: where processing is necessary to deliver services you have requested or to fulfil a contractual obligation.
• Legitimate interests: where we have a legitimate business interest in processing your data (for example, responding to enquiries, improving our services, or detecting fraud) and that interest is not overridden by your rights.
• Consent: where you have given clear consent for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with a legal requirement.

Direct Marketing and Cold Outreach

Where we contact business representatives by email or telephone for marketing purposes, we rely on legitimate interests (UK GDPR Article 6(1)(f)). We carry out a Legitimate Interests Assessment before such processing to confirm our interest is not overridden by individual rights. For electronic (email) marketing we comply with PECR: its consent requirement does not generally apply to corporate subscribers such as registered companies, and where a recipient is an individual subscriber, such as a sole trader or certain partnerships, we obtain consent or rely on the soft opt-in. Before making unsolicited calls, we check the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS) registers. Where calls are recorded or transcribed using AI tools, we inform recipients of this at the start of the call.

We may share your information in the following circumstances:

Service Providers: We may share your information with third-party vendors, service providers, and contractors who perform services on our behalf, such as payment processing, email delivery, hosting, and customer service. These parties are contractually obligated to protect your information and use it only for the purposes we specify.

AI Processing Providers: We use AI-powered tools to assist with processing enquiries and delivering our services. Some of these tools are provided by third-party providers based outside the UK. See Section 9 for full details on international transfers and AI processing.

Business Transfers: If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court or government agency.

Protection of Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.

With Your Consent: We may share your information for other purposes with your explicit consent.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the information, and applicable legal requirements.

When we no longer need your personal information, we will securely delete or anonymise it.

For business contacts we have reached out to as prospective clients, we retain contact records until you request removal or until we determine the contact is no longer relevant to our services, and for no longer than two years in the absence of an ongoing business relationship. Where we record or transcribe a call, the recording and full transcript are retained for a maximum of 30 days and then deleted. We may retain summaries, notes, and documents created from the call as part of the relevant enquiry or client record, subject to the retention period applicable to that record.

We use essential cookies to enable our website to function properly. Essential cookies are strictly necessary and cannot be disabled without affecting the operation of the site.

We do not currently use analytics cookies, marketing cookies, or other tracking technologies that collect personal data for advertising or profiling purposes.

We use Vercel Web Analytics for cookieless, aggregate site usage measurement. It does not place cookies, does not identify individual users, and does not share data with advertising networks. Vercel acts as our data processor under our hosting agreement.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our website may not function properly without essential cookies.

Under UK GDPR, you have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
• Deletion: You have the right to request that we delete your personal information, subject to certain exceptions.
• Object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time. You can do this by clicking the “unsubscribe” link in our emails or by contacting us directly.
• Data Portability: Where applicable, you have the right to receive your personal information in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.
• Complain to us directly: under the Data (Use and Access) Act 2025 (effective 19 June 2026), you have the right to raise a data protection complaint with us before escalating to the ICO. We will acknowledge your complaint within 30 days, keep you informed of our investigation, and communicate the outcome without undue delay.

To exercise any of these rights, please contact us at john@sherlockintelligence.co.uk.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We use third-party cloud and AI service providers, acting as processors on our behalf, to help us process enquiries, research prospective clients, analyse information, and deliver our services. Where AI processing involves personal data, we configure that processing to take place within the UK or European Economic Area. The content of your prompts and outputs is not shared with the underlying AI model provider or used to train their models. We do not use AI to make solely automated decisions that have legal or similarly significant effects on you.

Personal data used for AI processing may be transferred from the UK to the EEA; those transfers are covered by UK adequacy regulations. Some of our other service providers, for example website hosting, analytics, and payment processing, may process personal data outside the UK. Where a transfer is not covered by UK adequacy regulations, we rely on an appropriate safeguard, such as the UK Extension to the EU-US Data Privacy Framework or the UK Addendum to the EU Standard Contractual Clauses.

Further information about the providers we use and, where applicable, a copy of the relevant transfer safeguards is available on request.

Our website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not complied with applicable data protection laws.