Who is responsible
Sudo Group Ltd (company number 17484361), registered in England and Wales with its registered office at 66 Paul Street, London, England, United Kingdom, EC2A 4NA, is the controller responsible for personal information collected through sudogroup.co.uk and direct enquiries sent to hello@sudogroup.co.uk. Questions or rights requests can be sent to that email address or to the registered office.
Information we collect
The brief form can collect your name, work email, organisation, selected service, project or decision context, timing and contact preference. It also records the source page and any service-selector choice so that you do not need to repeat context. If you email us directly, we receive the information contained in your message. Hosting and security systems may create technical records such as IP address, request time, browser information and requested page.
Why we use it and our lawful bases
We use enquiry information to understand, route and respond to requests; take steps requested before a possible contract; administer resulting client or supplier relationships; maintain appropriate business records; protect the website and form from misuse; and meet legal obligations. Depending on the circumstances, the lawful bases are steps before entering or performance of a contract, Sudo Group's legitimate interests in handling business enquiries and operating a secure website, and compliance with legal obligations. We do not sell personal information.
Form delivery and service providers
The production form sends information to a server endpoint and then to Sudo Group's designated enquiry mailbox. The endpoint applies a short-window abuse limit using a one-way hash of the source network address and recent request times. Hosting, email-delivery and technology providers may process information only to provide their infrastructure or support. If the form endpoint is unavailable, the page presents a direct-email route rather than reporting a false success.
How long we keep information
We keep enquiry information while a conversation is active and review it when the enquiry closes. We then delete or anonymise it when it is no longer needed to handle the enquiry, maintain a proportionate business record or deal with a dispute or security matter. Contract, finance and service records may be kept longer where needed for delivery or legal and tax record-keeping. Technical logs are retained only for the period needed for hosting operations and security investigations. Retention is reviewed against those purposes rather than treated as indefinite.
Your rights
Depending on the circumstances and lawful basis, you may have rights to access personal information, correct inaccurate information, request erasure, restrict processing, receive portable information and object to processing. You have the right to object to processing based on legitimate interests and an absolute right to object to direct marketing. Contact hello@sudogroup.co.uk to make a request. We may need to confirm identity before acting.
Security
Sudo Group uses proportionate access, configuration and service controls intended to protect enquiry information. No internet or email system can be guaranteed completely secure, so sensitive credentials, special-category information or unnecessary personal data should not be included in the public brief form.
Complaints and changes
Please contact hello@sudogroup.co.uk first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office through ico.org.uk ↗. This notice will be reviewed when the website, providers or information uses materially change.