Privacy policy
How we use your personal information, in plain English.
Last updated: 2 November 2026
Who we are
Viral Foundry is a marketing business based in Sheffield, UK. Viral Foundry, Sheffield, UK is the “controller” of the personal information described here, which means we decide how it is used.
Contact us about privacy at hello@viralfoundryhq.co.uk.
What we collect and why
When you send an enquiry
We collect what you put in the form or email: your name, business name, email address, phone number (if you give it), area and message. We use it to reply to you and, if you ask, to prepare a quote. Our lawful basis is legitimate interests (responding to people who contact us) and, where you're asking about our services, taking steps before entering into a contract.
When you sign up for updates
We collect your email address and, if you give it, your first name. We only send marketing emails if you've ticked the box to say yes. Our lawful basis is consent. Every email includes a way to unsubscribe, and you can also email us to stop at any time.
When you become a client or advertiser
We keep the contact details, business details, artwork, logos and approvals needed to deliver the work, plus invoices and payment records. Our lawful basis is contract, and for financial records, legal obligation.
Business contacts
We may contact businesses about services that are relevant to them using publicly available business contact details. We always say clearly who we are and give an easy way to opt out. We do not send unsolicited marketing emails or texts to individuals or sole traders without their consent, in line with the Privacy and Electronic Communications Regulations (PECR).
Who we share it with
We don't sell your information. We share it only with services that help us run the business, under contracts that protect it:
- Our website host, Netlify, which also receives form submissions.
- Our email provider.
- For Neighbourhood Noticeboard adverts: printing and delivery partners receive advert artwork only, not your personal details.
Some of these providers may process data outside the UK. Where they do, they use legal safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum or adequacy regulations.
How long we keep it
- Enquiries that don't lead to work are deleted after 12 months.
- Records of work we do together are kept for six years for tax and accounting purposes.
- Email update subscribers: until you unsubscribe. We keep a minimal record that you opted out, so we don't email you again.
Cookies and tracking
This website does not currently use analytics, advertising or tracking cookies. If that changes, we'll update this policy and ask for your consent before setting any non-essential cookies. Our hosting provider may keep basic server logs (such as IP addresses) for security.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct or delete it;
- object to or ask us to restrict how we use it;
- withdraw consent at any time (for example, by unsubscribing);
- ask us to move your data to another organisation, where that applies.
Email hello@viralfoundryhq.co.uk to use any of these rights. We'll reply within one month.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We'll update this page if anything changes and show the date at the top.