Privacy Policy
How we handle your data.
Last updated: 24 February 2026
Who we are
Drake Simpson Strategy is the data controller for personal data collected through this website. We advise growing organisations on digital systems, AI strategy, and operational structure.
Contact address:
Drake Simpson Strategy
Unit 2 Office 1 Western Hangar
Lawrence Rd, Mount Batten
Plymouth PL9 9SJ
United Kingdom
What data we collect
When you submit our contact form, we collect the following information:
- Name
- Email address
- Phone number
- Company name (optional)
- Message content (optional)
We also collect anonymised usage data through analytics services when you have given consent. See the analytics and cookies sections below for details.
How we use your data
Your information is used solely to respond to your enquiry. We do not use it for marketing purposes unless you become a client and provide separate consent for such communications.
Under UK GDPR Article 6, we rely on the following lawful bases:
- Contact form enquiries: Legitimate interests (Article 6(1)(f)) — responding to business enquiries from prospective clients.
- Analytics and marketing cookies: Consent (Article 6(1)(a)) — only activated after you provide consent via our cookie banner.
How your data is processed
Contact form submissions are processed by Web3Forms, a US-based third-party form handling service that acts as a data processor on our behalf. Your data is transmitted securely over HTTPS and delivered to us via email.
We share your data with Web3Forms on the basis of our legitimate interests in processing business enquiries. Web3Forms does not use your data for any purpose other than delivering your submission to us. As a US-based service, this constitutes an international data transfer — see the international data transfers section below.
Google Analytics
We use Google Analytics 4 (measurement ID: G-BM511TE3L3), provided by Google LLC, to understand how visitors use this website. This service is only active after you provide consent via our cookie banner. Google Analytics collects:
- Pages visited and time spent on each page
- Referral source (how you arrived at our website)
- Device type, browser, and operating system
- Approximate geographic location (country and region level)
This data is processed by Google in the United States. For further details, see Google's privacy policy. You may opt out at any time using the Google Analytics Opt-out Browser Add-on.
Meta Pixel
We use the Meta Pixel (formerly Facebook Pixel), provided by Meta Platforms, Inc., to measure advertising effectiveness and understand visitor behaviour. This service is only active after you provide consent via our cookie banner. It collects:
- Page views and navigation patterns
- Browser and device information
- Interaction data used for advertising optimisation
This data is processed by Meta in the United States. For further details, see Meta's privacy policy.
Microsoft Clarity
We use Microsoft Clarity, provided by Microsoft Corporation, to understand how visitors interact with this website through heatmaps and session recordings. This service is only active after you provide consent via our cookie banner. It collects:
- Mouse movements, clicks, and scroll behaviour
- Pages visited and navigation patterns
- Device type, browser, and screen resolution
This data is processed by Microsoft in the United States. For further details, see Microsoft's privacy statement.
International data transfers
Some of the third-party services we use are based in the United States. This means your personal data may be transferred to and processed outside the United Kingdom. These services are:
- Web3Forms — processes contact form submissions (US-based)
- Google Analytics — processes website usage data (Google LLC, US-based)
- Meta Pixel — processes advertising data (Meta Platforms, Inc., US-based)
- Microsoft Clarity — processes interaction and behaviour data (Microsoft Corporation, US-based)
Where personal data is transferred outside the United Kingdom, we rely on the EU-US Data Privacy Framework (for Google, Meta, and Microsoft, who are certified participants) and standard contractual clauses as appropriate safeguards under UK GDPR Articles 46–49.
Data retention
We retain personal data for the following periods:
- Contact form enquiries: Retained for up to 12 months from the date of your enquiry, or until the enquiry is resolved, whichever is later.
- Client engagement data: Retained for the duration of the engagement plus 6 years (in line with HMRC record-keeping requirements).
- Analytics data: Google Analytics retains data for 14 months (GA4 default setting). Meta Pixel data is retained per Meta's own data retention policy. Microsoft Clarity data is retained for 30 days.
You may request deletion of your data at any time by contacting us. We will action deletion requests within 30 days.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Restrict the processing of your data
- Data portability (receive your data in a structured, machine-readable format)
- Object to the processing of your data
To exercise any of these rights, please contact us at privacy@drakesimpsonstrategy.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. The ICO can be contacted at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
Changes to this policy
We may update this privacy policy from time to time. The last updated date at the top of this page will reflect the most recent revision.
Contact
For any questions regarding this privacy policy or your personal data, please email privacy@drakesimpsonstrategy.co.uk. You may also wish to review our terms of service or our accessibility statement.