Privacy Policy
Last updated: 17 April 2026
mira-spring Limited ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard information when you interact with our website and services.
Information We Collect
Information You Provide
When you contact us or engage our services, we may collect:
- Name and job title
- Email address
- Organisation name and address
- Details about your operational challenges and requirements
- Any other information you choose to share in correspondence
Information Collected Automatically
When you visit our website, we may automatically collect certain technical information:
- IP address and approximate geographic location
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website address
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide requested information
- To deliver our consulting services when engaged
- To send relevant communications about our services (with your consent)
- To improve our website and understand how visitors use it
- To comply with legal obligations
Legal Basis for Processing
Under the UK General Data Protection Regulation, we process your personal data on the following legal bases:
- Consent: Where you have given explicit consent for specific purposes
- Contractual necessity: Where processing is necessary to fulfil a contract with you or take steps at your request before entering a contract
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
- Legal obligation: Where processing is necessary to comply with applicable laws
Data Sharing
We do not sell your personal information. We may share your data with:
- Service providers who assist with our website hosting and business operations, under appropriate contractual protections
- Professional advisers such as lawyers and accountants when necessary
- Regulatory authorities when required by law
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry records are typically retained for three years after our last interaction. Client engagement records are retained for seven years following project completion in accordance with professional standards.
Your Rights
Under data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data in certain circumstances
- Object to processing based on legitimate interests
- Request restriction of processing
- Data portability for data you have provided
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details below.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission, access controls, and regular security assessments.
International Transfers
Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection requirements.
Changes to This Policy
We may update this privacy policy periodically. Significant changes will be communicated through our website. The date at the top indicates when the policy was last revised.
Contact Us
For questions about this policy or our data practices, please contact:
Data Protection Enquiries
mira-spring Limited
Suite 412, Whitmore House
86 Clerkenwell Road
London EC1M 5RJ
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.