Privacy Policy
Last updated 3 October 2026. How we collect and use personal information.
This policy explains what personal information Sculpted Digital collects, why we collect it, and the choices you have. We keep it short and plain on purpose.
Who we are
Sculpted Digital is a trading name of KLM Digital Consulting Limited, a company registered in England and Wales under company number 16855231. Contact: hello@sculpteddigital.co. We are the controller of the personal information described here.
What we collect
- Enquiries. When you use the enquiry form we collect your name, email address, brand name, website address and the message you write.
- Purchases. When you buy an audit or a playbook we collect your name, email address, billing details and what you bought. Card details are handled by our payment provider and are not stored by us.
- Information you send us for work. If we carry out an audit or other work, we may be given access to accounts, reports and data about your business. We use it only to do that work.
- Website usage. We collect basic information about how the site is used, such as pages viewed, device type and approximate location. See our Cookie Policy.
How and why we use it
- To reply to your enquiry and provide what you ask for. Our lawful basis is taking steps at your request before a contract, and performing the contract.
- To take payment, deliver downloads and keep financial records. Our lawful basis is performing the contract and meeting our legal obligations.
- To keep the site secure and understand how it is used. Our lawful basis is our legitimate interest in running and improving the site.
- To send marketing emails, only if you ask for them. Our lawful basis is your consent, which you can withdraw at any time.
We do not sell your personal information.
Who we share it with
We use a small number of service providers who process information on our behalf: Squarespace (website hosting, forms, commerce and downloads), our payment provider (processing payments), Google Workspace (email and documents), and professional advisers such as accountants. Where we embed or link to Instagram, Meta may collect information under its own policy.
International transfers
Some providers are based outside the United Kingdom, including in the United States. Where that happens we rely on approved safeguards, such as the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Client and purchase records: for as long as we are required to keep financial records, currently 6 years.
- Website usage data: as set out in our Cookie Policy.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or stop our use of it, or send it to you in a portable format. You can also object to processing based on our legitimate interests and withdraw consent at any time. To use any of these rights, email hello@sculpteddigital.co. If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
We use reputable providers and sensible access controls, and we only share access to your information with people who need it. No system is completely secure, so please do not send sensitive information through the enquiry form.
Children
Our services are for businesses. We do not knowingly collect information from anyone under 18.
Changes to this policy
We will update this page when our practices change and show the date at the top.
Contact
Questions about this policy: hello@sculpteddigital.co.