Website policies

Privacy Notice.

How Rogue Sparrow Digital collects, uses and protects personal information when you visit our website, contact us, interact with our social profiles or become a client.

Last updated 30 August 2026Controller: Wain Levin Limited

01. Overview

Who is responsible for your information?

Wain Levin Limited, trading as Rogue Sparrow Digital, is the controller of the personal information described in this notice. This means we decide why and how that information is used.

Rogue Sparrow Digital is a trading name of Wain Levin Limited, a company registered in England and Wales under company number 13943818.

Registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ info@roguesparrow.co.uk +44 7539 579 197

02. Information

Information we may collect.

We may collect your name, business name, email address, telephone number, service interests, enquiry details and correspondence. If you become a client, we may also process project, contract, billing and payment-record information.

Our website and service providers may collect device, browser, IP address, security log, consent and usage information.

How we collect information

We collect information directly from you when you submit a form, email, telephone us or communicate through a social platform. We may also collect technical information through the website and receive limited information from service providers where you have permitted this.

Information we do not ask for

The website is intended for business enquiries and is not directed at children. Please do not submit special-category information, criminal-offence information or information about another person unless it is necessary and you are authorised to do so.

03. Purposes

How and why we use information.

Responding to enquiries and preparing work

We use the details you provide to respond to your enquiry, understand what you need, arrange a conversation, prepare a proposal and take steps towards a contract. We rely on steps requested before entering a contract and, where appropriate, our legitimate interests in managing genuine business enquiries.

Delivering services and keeping records

Where you become a client, we use relevant information to deliver and manage our services, communicate about the work, administer contracts, issue invoices, maintain appropriate business records and meet legal obligations. The lawful bases may include contract, legitimate interests and legal obligation.

Operating and securing the website

We may use limited technical information to operate, diagnose and protect the website, prevent misuse and maintain service reliability. We rely on legitimate interests where that processing is necessary and proportionate, and on consent where storage or access technology is not exempt.

Contact-form details

Information submitted through the contact form will be sent to info@roguesparrow.co.uk and used to respond to you and communicate about the services or problem you asked us to discuss. Submitting the form does not automatically add you to a general marketing list.

Marketing communications

We will send electronic marketing only where we have a lawful basis to do so. Where consent is required, we will ask for it separately and make it as easy to withdraw as it was to give. Every marketing message will provide a clear way to opt out.

Google and social tracking

With your consent, we may use Google tags and Meta technologies to understand website use, measure campaigns, build audiences or improve advertising. These tools may use identifiers and combine information across websites, apps or devices. They will remain blocked until you make an affirmative choice through the consent controls.

Automated decision-making

We do not currently use the website information described in this notice to make solely automated decisions that produce legal or similarly significant effects.

04. Providers

Sharing and international processing.

We may use trusted providers for website hosting, content management, email, forms, security, analytics, advertising, reviews and professional support. They receive only the information reasonably required for their role and must handle it under applicable data-protection obligations.

We may also disclose information where required by law or to establish, exercise or defend legal claims.

Google, Meta and Elfsight

If enabled, Google and Meta may receive online identifiers, device or interaction information in accordance with the choices you make. The Google Reviews display is supplied through Elfsight and may connect to Elfsight or Google services. Each provider also publishes its own privacy information.

Processing outside the United Kingdom

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires a safeguard, we will use an applicable adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful mechanism. You may contact us for information about the relevant safeguard.

Facebook and Instagram

If you visit or interact with our Facebook or Instagram profiles, Meta may process information under its own privacy policy. Rogue Sparrow Digital receives only the information and engagement data made available to us by the platform and your settings.

05. Protection

Retention and security.

Rogue Sparrow Digital keeps personal information only for as long as it is needed for the purpose for which it was collected, while observing any statutory or regulatory minimum retention period.

  • Financial, accounting, invoice and tax records are normally kept for at least six years from the end of the relevant company financial year, or longer where HM Revenue and Customs or another legal requirement applies.
  • Records relevant to a contract, dispute or legal claim may normally be kept for up to six years from the date a claim could arise, and longer only where the law permits and the circumstances justify it.
  • Enquiries that do not lead to client work are normally kept for up to 24 months after the last meaningful contact.
  • Routine security logs are normally kept for up to 12 months.
  • Consent records are kept for as long as needed to demonstrate and respect the choice, while analytics information follows the documented live-system setting.

Every period is reviewed and information is deleted or anonymised when it is no longer required.

How we protect information

We use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. No internet service can be guaranteed completely secure, so controls are reviewed in proportion to the information and risks involved.

06. Your rights

Your data-protection rights.

Depending on the circumstances, you may have rights to be informed, access your information, correct it, ask for deletion or restriction, receive certain information in a portable form, and object to processing. You may also withdraw consent at any time without affecting processing that was lawful before withdrawal. Some rights are subject to legal limits.

Your right to object

You have an absolute right to object to the use of your personal information for direct marketing. You may also object to processing based on legitimate interests, in which case we will consider your circumstances and whether there are compelling lawful reasons to continue.

To change your optional website tracking choices, use the Cookie Settings control in the footer.

07. Contact

Questions and complaints.

Please contact us first if you have a question or concern so that we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom regulator for data protection. Visit the ICO complaints service.

Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The latest version will be published here with an updated date. We will provide additional notice where a change materially affects how information is used.