Privacy Policy
Cloud Drift privacy policy – how we collect, use, and protect your personal information under UK GDPR and the Data Protection Act 2018.
Last updated: 2026-05-22
1. Introduction
Cloud Drift Ltd. ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website at https://clouddrift.co.uk (the "Site") or interact with us.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Data Controller: Cloud Drift Ltd., 128 City Road, London EC1V 2NX, United Kingdom. Company registered in England and Wales.
Contact for privacy matters: contact@clouddrift.co.uk or +44 20 3882 0896.
2. What Information We Collect
Information you provide to us
When you submit our contact form, we collect:
- Your name
- Your email address
- Your company name (optional)
- The contents of your message
- Your explicit consent to be contacted
When you communicate with us by email, phone, or other means, we collect any information you choose to share.
Information collected automatically
When you visit our Site, we may automatically collect:
- Your IP address (anonymised where possible)
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
- Date and time of visit
This information is collected via cookies and similar technologies, only with your consent where required.
3. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to contact form enquiries | Name, email, company, message | Consent (Article 6(1)(a) UK GDPR) |
| Pre-contractual communications | Contact details, message content | Legitimate interest / Pre-contract (Article 6(1)(b) UK GDPR) |
| Website analytics | Log data, cookies | Consent (Article 6(1)(a) UK GDPR) |
| Marketing communications | Email, name | Consent (Article 6(1)(a) UK GDPR) |
| Legal compliance | As required | Legal obligation (Article 6(1)(c) UK GDPR) |
| Service improvement | Aggregated analytics | Legitimate interest (Article 6(1)(f) UK GDPR) |
4. Contact Form
When you submit our contact form:
- We require your explicit, freely given consent before processing your message
- You must tick the consent checkbox to submit the form
- Your data is sent to contact@clouddrift.co.uk and stored in our systems
- We use your information to respond to your enquiry and any follow-up communications about your request
- We will not add you to marketing lists without separate, explicit consent
- You can withdraw consent at any time by contacting us
Retention: Contact form submissions are retained for 24 months from the date of last contact, unless you become a client (in which case standard client retention applies) or you ask us to delete the data sooner.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our Site. Cookies are small data files stored on your device.
Categories of cookies we use
Strictly Necessary Cookies (always active) Required for the Site to function. These cannot be disabled.
Analytics Cookies (only with your consent)
- Google Analytics – Helps us understand how visitors use our Site. Data is anonymised where possible. Google Privacy Policy
- Salesflare – Tracks website activity to support our sales communications. Salesflare Privacy Policy
Marketing Cookies (only with your consent)
- LinkedIn Insight Tag – Used for measuring effectiveness of our LinkedIn campaigns and remarketing. LinkedIn Privacy Policy
Managing your cookie preferences
When you first visit our Site, you'll see a cookie banner letting you accept or reject non-essential cookies. You can change your preferences at any time by [clicking here to update cookie settings] or by clearing your browser cookies.
You can also configure your browser to block or alert you about cookies. Note that disabling certain cookies may affect Site functionality.
6. Who We Share Your Data With
We do not sell your personal information. We share data only with:
Service providers acting on our behalf:
- Email infrastructure – for delivering email communications
- Google (Analytics) – for website analytics
- Salesflare – for CRM and sales tracking
- LinkedIn (Microsoft) – for marketing analytics
- Cloud hosting providers – for hosting our Site and data
All processors are bound by data processing agreements consistent with UK GDPR.
Legal requirements – We may disclose information when required by law, regulation, court order, or to protect our legal rights.
Business transfers – If Cloud Drift Ltd. is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
7. International Data Transfers
Some of our service providers (e.g., Google, LinkedIn) may process data outside the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- UK Adequacy Decisions
- Standard Contractual Clauses approved by the UK Information Commissioner's Office
- Other lawful transfer mechanisms
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten") |
| Restriction | Ask us to limit how we use your data |
| Portability | Receive your data in a portable format |
| Object | Object to certain types of processing, including marketing |
| Withdraw consent | Withdraw consent at any time where we rely on consent |
| Not be subject to automated decisions | We do not make solely automated decisions about you |
To exercise any of these rights, contact us at contact@clouddrift.co.uk. We will respond within one month.
You will not have to pay a fee to access your personal data or exercise any other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
9. Right to Complain
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the opportunity to address your concerns first, so please contact us before approaching the ICO.
10. Data Retention
We retain personal data only as long as necessary for the purposes stated in this policy:
| Data type | Retention period |
|---|---|
| Contact form enquiries | 24 months from last contact |
| Client communications | Duration of engagement + 7 years (legal/tax obligations) |
| Marketing consent records | Until consent is withdrawn |
| Website analytics | 14 months (Google Analytics default) |
| Salesflare CRM data | Duration of business relationship + 24 months |
After retention periods expire, data is deleted or anonymised.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit (HTTPS/TLS)
- Access controls and authentication
- Regular security reviews
- Staff training on data protection
- Incident response procedures
- ISO 9001 and ISO 27001 certified processes
While we strive to protect your data, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but commit to responding promptly to any data breach in accordance with UK GDPR requirements.
12. Children's Privacy
Our Site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via:
- A prominent notice on our website
- Email notification where we have your contact details
The "Last updated" date at the top indicates when this policy was last revised. Continued use of the Site after changes constitutes acceptance of the revised policy.
14. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: contact@clouddrift.co.uk Phone: +44 20 3882 0896 Post: Cloud Drift Ltd., 128 City Road, London EC1V 2NX, United Kingdom
We aim to respond to all privacy-related enquiries within 5 working days.
Our insights
Case studies, articles, and thought leadership from our senior engineering team.
View all →Building a Client Collaboration Portal for Grant Thornton
From concept to working product – how Cloud Drift built a secure, structured client collaboration portal for Grant Thornton's Tax teams.
Read more → blog 27 Jun 2026RAG Beyond the Demo: Practical Lessons from Implementing Retrieval-Augmented Generation in Real Enterprises
Most RAG demos look impressive. Then the real documents arrive. Here are seven lessons from implementing Retrieval-Augmented Generation in real enterprise environments.
Read more →