This policy explains how we collect and use personal data when you use Spark — our web app at www.get-spark.co.uk that helps new UK businesses get set up. Please read it alongside our Terms of Service.
Spark is operated by LP LABS LTD, a company registered in England & Wales (company number 17293785), trading as "Spark". We are the data controller for the personal data described here.
| Why we use it | Legal basis (UK GDPR) |
|---|---|
| To create your account and provide the Spark service and its tools | Performance of our contract with you |
| To send service messages about your account and any deadlines you ask us to track | Performance of our contract / legitimate interests |
| To keep Spark secure, prevent abuse, and fix problems | Legitimate interests |
| To send optional tips and product updates by email | Your consent (you can withdraw it any time) |
| To meet legal, accounting and regulatory obligations | Legal obligation |
Where we rely on consent (marketing emails), you can withdraw it at any time using the unsubscribe link or by emailing us — this won't affect the service messages that are part of running your account.
Spark uses cookies and similar storage in two ways.
Strictly-necessary storage keeps the service working and secure — a sign-in session (set by our backend provider) and, where enabled, Cloudflare Turnstile bot-protection. These can't be switched off.
Analytics. We use Google Analytics (provided by Google) to understand how Spark is used so we can improve it — for example which pages people visit and where they get stuck. Google Analytics sets cookies, so we only enable it with your consent: the first time you visit you'll see a banner where you can Accept or Decline, and you can change your choice at any time. Until you accept, analytics cookies are not set — Google Analytics runs in a cookieless "consent denied" mode. The information generated is processed by Google as described in its own privacy policy, and may involve a transfer outside the UK under Google's safeguards (see section 6).
We use no advertising cookies — Spark products are ad-free. We also load web fonts from Google, which may expose your IP address to Google; we are reviewing self-hosting these.
We don't sell your personal data. We share it only with service providers ("sub-processors") who help us run Spark, under contracts that require them to protect it:
| Provider | What they do for us |
|---|---|
| Supabase | Database, sign-in, file storage and backend functions |
| Vercel | Hosting and serving the Spark app |
| Resend | Sending sign-in and service emails |
| OpenAI | AI generation for documents, emails and tailoring (your prompts and outputs; not used to train their models via the API) |
| Cloudflare | Bot protection (Turnstile), where enabled |
| Pexels | Stock-photo search in the website builder |
| Web fonts (and business email, where you choose to use it) | |
| Google Analytics | Website analytics — how Spark is used, only with your consent |
| Stripe | Subscription billing, if and when paid plans launch (cards are handled by Stripe, never by Spark) |
| Companies House | Public company-register lookups |
We keep a current list of sub-processors and will update it before adding a new one that handles personal data. We may also disclose data where the law requires it.
Referral partners are different. When you choose to be handed over to a partner (for example a bank or accounting provider), you continue on the partner's own website and they become an independent controller of the data you give them under their own privacy policy. We may earn a referral fee. See our Affiliate & Referral Disclosure for more.
Some of our providers process data outside the UK (for example in the US or EU). Where they do, we rely on appropriate safeguards recognised under UK data-protection law, such as the UK International Data Transfer Agreement or Addendum and adequacy regulations, to keep your data protected.
We keep your personal data while your account is active and for as long as needed to provide the service and meet our legal obligations. If you delete your account, we delete your account and associated business, site and usage data; some records may be retained where the law requires (for example, basic records for tax or to handle disputes). You can delete your account at any time from Account & privacy in the app.
Under UK data-protection law you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and withdraw consent. We've built two of these straight into the app — you can export all your data and delete your account from Account & privacy. To exercise any other right, email jp@get-spark.co.uk. We'll respond within one month.
If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.
We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls and reputable infrastructure providers. No service can be guaranteed 100% secure, but we take this seriously and have an incident-response process if something goes wrong.
Spark is a tool for running a business and is not intended for anyone under 18. We don't knowingly collect data from children.
We may update this policy as Spark grows. We'll change the "last updated" date above and, for significant changes, tell you in the app or by email.
Privacy questions or requests: jp@get-spark.co.uk
LP LABS LTD (trading as Spark), company no. 17293785, England & Wales.