Privacy Notice
Last updated: July 2026
1. Who we are
This privacy notice explains how SC&T Global Ltd, trading as Spitfire Consultancy ("Spitfire", "we", "our" or "us"), collects, uses and protects personal information.
SC&T Global Ltd is registered in Scotland under company number SC446111.
Registered office: Anchor One, Studio 16, 1st Floor, 7 Thread Street, Paisley, PA1 1JR,United Kingdom.
Correspondence address: Abbey Mill Business Centre, Studio 4012, Mile End Mill, 12Seedhill Rd, Paisley PA1 1JS, United Kingdom.
If you have any questions about this privacy notice or how we use your personal information, please contact us at:
2. What this notice covers
This notice applies to personal information we collect through our website, through our business activities and when you communicate or work with us.
This may include information relating to:
website visitors;
clients and prospective clients;
suppliers and business partners;
people who contact us;
professional contacts;
event attendees; and
people who enquire about or apply for opportunities with Spitfire.
We process personal information in accordance with applicable UK data protection and electronic communications laws.
3. The information we collect
The personal information we collect depends on how you interact with us.
Information you provide to us
This may include:
your name;
job title and organisation;
business email address;
telephone number;
information submitted through website forms;
information contained in emails or other communications;
details of enquiries or conversations with us;
information relating to services we provide or may provide to you; and
information provided during recruitment or other business discussions.
Business contact information
As part of our normal business development activity, we may collect professional information about people who we believe may have a legitimate interest in Spitfire's services.
This may come from publicly available business sources, company websites, professional networking platforms, referrals, events or information provided directly to us.
This information may include your name, employer, job title, professional contact details and information relevant to our business relationship with you.
Website and usage information
When you visit our website, we may collect information about how you use it, including:
IP address;
browser and device information;
pages visited;
time spent on the website;
referring websites or sources;
interactions with website content; and
form submissions and other website activity.
Some of this information is collected using cookies and similar technologies. Non-essential tracking will only be used where the required consent has been obtained.
4. How we use your information
We may use personal information to:
respond to enquiries and requests;
provide and manage our consultancy services;
communicate with clients, prospects, suppliers and partners;
manage our business relationships;
maintain records of conversations and business activity;
manage prospective opportunities through our customer relationship management systems;
understand interest in our services and content;
improve our website, services and communications;
measure the performance of our website and marketing activity;
send relevant business communications and marketing where permitted;
organise and follow up meetings, events and networking activity;
manage recruitment enquiries and applications;
maintain the security of our website, systems and business;
meet our contractual and legal obligations; and
establish, exercise or defend legal claims.
We do not sell your personal information.
5. Our lawful bases for processing
UK data protection law requires us to have a lawful basis for using personal information.
Depending on the circumstances, we may rely on the following bases.
Contract
We may process your information where this is necessary to enter into or perform a contract with you or your organisation.
This includes responding to requests for services, delivering consultancy work and managing our client relationships.
Legitimate interests
We may process information where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and interests.
These interests may include:
developing and growing our business;
identifying and communicating with potential clients;
maintaining relationships with clients and professional contacts;
managing opportunities through our CRM;
improving our services;
maintaining appropriate business records; and
protecting our business and systems.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether your rights and interests could be adversely affected.
Consent
We rely on consent where this is required, including for certain cookies, analytics technologies and electronic marketing activities.
Where we rely on consent, you can withdraw it at any time.
Legal obligations
We may process information where necessary to comply with legal, regulatory, tax, accounting or other obligations that apply to us.
6. CRM, website analytics and tracking
We use, or may introduce, digital tools that help us understand how people interact with Spitfire and manage our relationships with clients and prospective clients.
These may include:
Google Analytics or similar website analytics services; and
HubSpot or another CRM and marketing platform.
These services may use cookies or similar technologies to collect information about visits to and interactions with our website.
Analytics information helps us understand matters such as which pages are visited, how visitors arrive at the website and how the website is being used.
CRM and marketing technologies may also help us understand engagement with Spitfire's website and communications. Where technically enabled and legally permitted, website activity may be associated with an existing business contact record, for example where somebody has previously submitted a form or otherwise identified themselves to us.
We use this information to understand engagement, improve our website and communications, manage business relationships and identify areas of potential interest.
Non-essential analytics and tracking technologies will only be activated where the required consent has been provided.
The specific cookies and technologies in use will be described in our Cookie Policy or cookie consent tool. You can change your cookie preferences at any time using the controls provided on our website.
7. Marketing communications
We may contact business and professional contacts with information about Spitfire's services, events, insights or other matters that we reasonably believe may be relevant to their role or organisation.
Depending on the type of communication and the circumstances, we may rely on consent or our legitimate interests.
We will comply with applicable electronic marketing rules when contacting you.
You can ask us to stop sending marketing communications at any time by:
using the unsubscribe option included in an email; or
contacting info@spitfireconsultancy.com.
If you opt out, we may retain limited information about your preference so that we can ensure you are not contacted again for the same marketing purpose.
8. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to operate correctly and securely.
Other cookies may be used for purposes including:
website analytics;
understanding visitor behaviour;
measuring marketing activity;
CRM integration; and
improving the relevance and effectiveness of our website and communications.
Where consent is required, these cookies will not be activated until you have made your choice.
More detailed information about the cookies and technologies currently used on the website, including their providers and purposes, is available through our Cookie Policy or cookie management tool.
9. Who we share information with
We may use carefully selected third-party organisations to help us operate our business.
These may include:
website hosting and technology providers;
CRM and business management platforms;
analytics providers;
email and communications providers;
cloud storage and IT providers;
marketing service providers;
professional advisers such as accountants, lawyers and insurers; and
other suppliers necessary to deliver our services.
Where another organisation processes personal information on our behalf, we require appropriate arrangements to protect that information.
We may also disclose personal information where required by law, a regulator, a court or another competent authority.
We do not sell personal information to third parties.
10. International data transfers
Some of the technology and service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection law.
Depending on the destination and provider, this may include relying on UK adequacy regulations or using appropriate contractual and other safeguards recognised under UK data protection law.
11. How long we keep information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected.
The period will depend on the nature of the information and our relationship with you.
For example, we may retain information:
while providing services to a client;
while there is an active or reasonably anticipated business relationship;
where necessary to maintain appropriate business and financial records;
where required by tax, accounting or other laws;
where necessary to manage or defend legal claims; or
where you have asked us not to contact you and limited information is required to record that preference.
Business development and CRM records are reviewed periodically so that information which is no longer relevant or reasonably required can be removed.
Recruitment information relating to unsuccessful applicants will only be retained for a reasonable period following the recruitment process unless there is another lawful reason to retain it for longer.
12. Keeping your information secure
We take appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
These measures include appropriate controls over access to our systems and the use of reputable technology and service providers.
No internet or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we hold.
13. Your data protection rights
Depending on the circumstances, UK data protection law gives you rights over your personal information.
These may include the right to:
ask us for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your information in certain circumstances;
ask us to restrict how we use your information;
object to certain types of processing, including direct marketing;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
complain about how we use your information.
Some rights only apply in particular circumstances.
To exercise any of these rights, contact:
We may need to confirm your identity before responding to a request.
14. Automated decision-making
We do not currently use personal information to make solely automated decisions that produce legal effects or similarly significant effects on individuals.
We may use CRM and analytics tools to help organise, prioritise or understand business relationships and engagement. These tools support our business activity and do not make significant decisions about individuals without appropriate human involvement.
15. Recruitment
If you provide personal information in connection with a job or other opportunity with Spitfire, we will use it to consider your suitability, communicate with you and manage the recruitment process.
Where necessary, information may also be used to meet legal obligations connected with recruitment or employment.
We will only retain recruitment information for as long as it is reasonably required for these purposes, unless you agree that we may retain your details for consideration for future opportunities.
16. Children
Spitfire's website and services are intended for businesses and professional audiences and are not directed at children.
We do not knowingly collect personal information from children through our website.
17. Links to other websites
Our website may contain links to websites operated by other organisations.
Those organisations are responsible for their own websites and privacy practices. We recommend reviewing their privacy information before providing personal information to them.
18. Complaints
If you have concerns about how we have handled your personal information, please contact us first at:
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.
19. Changes to this privacy notice
We may update this privacy notice as our business, website, technology or legal obligations change.
The latest version will be published on our website and the date at the top of this notice will show when it was last updated.
If we make a significant change to how we use personal information, we will take appropriate steps to make affected individuals aware of that change.
20. Contact us
For questions about this privacy notice, the personal information we hold about you, or your data protection rights, please contact:
SC&T Global Ltd, trading as Spitfire Consultancy
Anchor One Studio 16
1st Floor
7 Thread Street
Paisley
Scotland
PA1 1JR
Email: info@spitfireconsultancy.com