Privacy notice

Last updated: 12 October 2026

This notice explains how Four Smart Limited uses personal data when you visit foursmart.uk or contact us through it. We aim to collect as little as we need and to be clear about what we do with it.

1. Who we are

Four Smart Limited ("Four Smart", "we", "us") is the controller of your personal data. We are registered in England & Wales, company no. 16776979, registered office 20 Wenlock Road, London, England, N1 7GU.

You can contact us about privacy at hello@foursmart.uk or at the address above.

2. What personal data we collect

• Contact form: your name, email address, company (optional), the service you are interested in, and the contents of your message. Please do not include sensitive information (such as health details) in your message.
• Email: if you email us, we receive your email address, name and whatever you choose to tell us.
• Technical data: when you load the site, our hosting provider receives your IP address, browser and device details, and the pages requested. This is used to deliver the site, keep it secure and diagnose problems.
• Spam protection: the contact form uses Cloudflare Turnstile, which runs a short challenge in your browser to tell people from bots. It may process your IP address and browser signals for that purpose.

We do not use advertising or analytics cookies and we do not track you across other websites. We do not set non-essential cookies, so no cookie banner is needed. Turnstile may store limited information on your device where this is strictly necessary for security.

3. Why we use it, and our lawful basis

• To respond to your enquiry and, if you ask, to discuss or provide our services. Lawful basis: taking steps at your request before entering into a contract, or our legitimate interests in running our business and answering the people who contact us.
• To keep the site and our systems secure and prevent spam and abuse. Lawful basis: our legitimate interests in protecting our business and visitors.
• To meet legal, accounting and regulatory obligations, and to establish or defend legal claims. Lawful basis: legal obligation or legitimate interests.

We do not use your personal data for automated decision-making or profiling, and we do not sell it. We will only send you marketing if you have asked us to or where the law otherwise permits it, and you can opt out at any time.

4. Who we share it with

We use a small number of service providers to run the site. They act on our instructions and only for the purposes described:

• Cloudflare, Inc.: website hosting, content delivery, security, Turnstile spam protection and email routing.
• Resend, Inc.: delivers contact form messages to us by email.
• Microsoft Corporation: provides Microsoft 365, which hosts the mailbox that receives enquiries.

We may also share personal data with our professional advisers (such as accountants and lawyers), and with regulators, law enforcement or other third parties where the law requires or permits it.

5. International transfers

Some of these providers are based in, or process data in, the United States and other countries outside the UK. Where this happens we rely on an adequacy arrangement (such as the UK-US data bridge for certified providers) or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.

6. How long we keep it

• Enquiries that do not lead to a working relationship: up to 12 months after our last contact with you, then deleted.
• Records relating to clients and contracts: for the period required for tax, accounting and legal purposes, normally six years after the end of the relationship.
• Server and security logs: kept by our providers for short periods, typically no more than 30 days unless needed to investigate an incident.

7. Your rights

Under UK data protection law you have the right to:

• be told what personal data we hold about you and receive a copy (access);
• have inaccurate data corrected and incomplete data completed;
• have your data erased in certain circumstances;
• restrict how we use your data in certain circumstances;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• receive data you gave us in a portable format, where processing is based on a contract or consent and is automated; and
• withdraw consent at any time where we rely on it.

To use any of these rights, email hello@foursmart.uk. We will normally respond within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may need to confirm your identity first.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@foursmart.uk so we can try to put it right. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls and reputable infrastructure providers. No online service is completely secure, so please take care over what you send us.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.