Who we are
Slingshot Digital is a trading name of Altave Group Limited, registered in England and Wales, company number 13427835. Registered office: 9-10 Cross Street, Preston, PR1 3LT.
Altave Group Limited is the data controller for the personal data described on this page. That means we decide what is collected and why, and we are accountable for it. If you want to talk to a person about any of this, write to enquiries@slingshotdigital.co.uk and it comes to us directly.
What we collect, and when
We only collect personal data when you give it to us. There is no tracking pixel on this site and no advertising network receives anything about your visit.
| Where | What we collect | Why |
|---|---|---|
| Enquiry and contact forms | Your name, email address, phone number if you give one, company name if you give one, and whatever you write in the message | So we can answer you |
| Booking a call at /book-online | First and last name, email address, phone number, company, the region you are in, and what you said you wanted to talk about | So we can arrange the call and turn up prepared |
| The AI audit and the Board AI Readiness Score | Your answers to the questions, plus your name, email address and company if you ask for the result | So we can produce your result and send it to you |
| Guides and downloads | Your name and email address | So we can send you the thing you asked for |
| Server logs | IP address, browser type, pages requested, timestamps | Keeping the site up and secure. Held by our host, not read by us in the ordinary course |
We do not ask for and do not want special category data. That means health, race, religion, politics, trade union membership, sex life, sexual orientation, genetics or biometrics. Please do not put any of it in a form on this site.
Our lawful basis for holding it
- Legitimate interests for answering an enquiry you sent us and for keeping the site secure. You asked us a question, so replying to it is reasonable and you would expect it.
- Consent for marketing email. You have to tick the box, we record that you did, and you can withdraw it at any time without giving a reason.
- Contract where you are a client, or becoming one, and we need the data to do the work or to quote for it.
- Legal obligation where we have to keep records, for example for accounts and tax.
Who else touches your data
We use a small number of suppliers to run the site. They process data on our instructions, under a contract, and they are not allowed to use it for their own purposes. These are the only ones.
| Supplier | What they do | Where |
|---|---|---|
| Vercel | Hosts this website and holds the server logs | EU and USA |
| Resend | Delivers the emails the forms generate, to us and to you | EU and USA |
| Supabase | Stores audit and enquiry records in our database | EU |
| Microsoft | Our own email and document storage, so your message ends up in our inbox | EU and UK |
Where a supplier processes data outside the UK, that transfer is covered by the UK International Data Transfer Addendum or the equivalent standard contractual clauses. We do not sell your data. We do not share it with advertisers. We have never done either and we do not intend to start.
How long we keep it
- Enquiries that go nowhere: 24 months from your last contact with us, then deleted.
- Audit and readiness results: 24 months, so we can pick up a conversation where it stopped.
- Client records: for the length of the engagement and 6 years after it ends, which is what the accounting and limitation rules require.
- Marketing consent records: until you withdraw consent, and then a note that you did, so we do not email you again by accident.
What you can ask us to do
Under UK GDPR you have the right to:
- ask what we hold about you and get a copy of it
- have anything wrong corrected
- have it deleted, where we have no overriding reason to keep it
- ask us to stop or limit what we are doing with it
- get it in a portable form, or sent to someone else
- object to us processing it on the basis of legitimate interests
- withdraw consent to marketing at any time
Email enquiries@slingshotdigital.co.uk and say what you want. We will answer within one month. There is no charge. We may ask you to confirm who you are first, which is a protection for you rather than an obstacle.
If we get it wrong
Tell us first and we will try to fix it. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can go to them directly. You do not have to come to us first, though we would rather you did.
Automated decisions
The AI audit and the Board AI Readiness Score produce a score from the answers you give. That score is a starting point for a conversation with a person. It is not a decision about you, it has no legal effect, and nothing on this site decides anything about you without a human being involved.
Cookies
Covered separately in the cookie policy. The short version is that this site sets no tracking cookies at all.
Changes to this policy
If we change how we handle data, we change this page and update the date at the top. If the change is significant and we hold your email address, we will tell you.