Privacy Policy

Last updated: February 2026

1. Introduction

30M Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.30m.com.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: 30M Limited

Company Number: 09386561

ICO Registration: ZA127683

Registered Address: Office 3, St Ann's House, 111 Guildford Road, Lightwater, Surrey, England, GU18 5RA

Data Protection Contact: Paul Humphreys

Contact Email: privacy@30m.com

2. ICO Registration

30M Limited is registered with the Information Commissioner's Office (ICO) as a data controller.

ICO Registration Reference: ZA127683

Date Registered: 07 July 2015

Registration Expires: 06 July 2026

View Registration Certificate (PDF)

You can verify our registration on the ICO Public Register.

3. Information We Collect

Personal Information You Provide

When you use our contact form, we collect the following information:

  • Name (required)
  • Email address (required)
  • Phone number (optional)
  • Company name (optional)
  • Message content (required)

Automatically Collected Information

When you visit our website and accept analytics cookies, we collect certain information through Google Analytics, including:

  • IP address (anonymised)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring website
  • Geographic location (country/city level)

Note: Analytics data is only collected if you consent to analytics cookies. You can withdraw your consent at any time using the preferences manager on our Cookie Policy page.

4. How We Use Your Information

Contact Form Submissions

When you submit our contact form, your information is used solely to respond to your enquiry. Specifically:

  • Your name and email are used to address and reply to your message
  • Your phone number (if provided) may be used to contact you if you request a call
  • Your company name (if provided) helps us understand the context of your enquiry
  • Your message content is used to understand and respond to your request

What We Do NOT Do With Your Contact Form Data:

  • We do NOT add you to any mailing lists or newsletters
  • We do NOT send you marketing communications or promotional emails
  • We do NOT sell, rent, or trade your personal data to third parties
  • We do NOT share your data with third parties for their marketing purposes
  • We do NOT use your data for profiling or targeted advertising
  • We do NOT retain your data longer than necessary

How Your Contact Form Data Is Processed

When you submit the contact form, here's exactly what happens:

  1. Your submission is sent securely to our server (hosted by Vercel)
  2. Our server uses Resend (an email delivery service) to send your message to our team
  3. The email is delivered to our internal mailbox (contactfm@30m.com)
  4. A team member reads your message and replies directly to your email address
  5. Your email address is set as the "reply-to" so our response goes directly to you

Your data is processed only by 30M Limited team members who need access to respond to enquiries. We operate on a principle of data minimisation and only collect what is necessary.

Ongoing Correspondence

If you continue to correspond with us after your initial enquiry, the same data protection principles apply. Any emails you send us are stored in our business email systems and are subject to the same retention periods and security measures described in this policy.

Analytics Data

We use analytics data (with your consent) to:

  • Understand how visitors use our website
  • Improve our website content and user experience
  • Identify technical issues

General Principles

We do not use your personal data for automated decision-making or profiling. We process the minimum amount of data necessary for the purposes described above.

5. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following lawful bases:

Consent (Article 6(1)(a))

For analytics cookies. You can withdraw consent at any time via the preferences manager on our Cookie Policy page.

Legitimate Interests (Article 6(1)(f))

To respond to enquiries submitted through our contact form. Our legitimate interest is to communicate with potential clients and partners. We have assessed that this does not override your rights and freedoms.

Legal Obligation (Article 6(1)(c))

Where required by law (e.g., fraud prevention, legal proceedings).

6. Data Sharing and Processors

We Never:

  • Sell your personal data to anyone
  • Rent or trade your personal data
  • Share your data with third parties for marketing purposes
  • Allow third parties to use your data for their own purposes
  • Transfer your data to data brokers or advertising networks

We only share your information with service providers who process data on our behalf and under our instructions:

Service Providers (Data Processors)

ProviderPurposeLocation
Google AnalyticsWebsite analyticsUSA (with EU SCCs)
ResendEmail delivery for contact formUSA (with EU SCCs)
VercelWebsite hostingGlobal (with EU SCCs)

All our service providers are bound by data processing agreements and are required to process your data only on our instructions and in compliance with applicable data protection laws.

Legal Requirements

We may disclose your information where required by law, court order, or government regulation.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

Data TypeRetention PeriodReason
Contact form submissions2 yearsBusiness relationship management
Analytics data26 monthsGoogle Analytics default
Cookie consent preference1 yearRemember your choice

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

Request a copy of your personal data we hold.

Right to Rectification (Article 16)

Request correction of inaccurate or incomplete data.

Right to Erasure (Article 17)

Request deletion of your data ("right to be forgotten").

Right to Restrict Processing (Article 18)

Request limitation of how we use your data.

Right to Data Portability (Article 20)

Request transfer of your data in a machine-readable format.

Right to Object (Article 21)

Object to processing based on legitimate interests.

Right to Withdraw Consent

Withdraw consent at any time (for analytics cookies).

To exercise any of these rights, please contact our Data Protection Contact at privacy@30m.com. We will respond within one month. In complex cases, we may extend this by a further two months, but we will inform you within the first month if this is necessary.

You will not have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

9. International Transfers

Some of our service providers transfer and process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs): Approved by the UK Information Commissioner's Office
  • Data Processing Agreements: With all service providers
  • Supplementary Measures: Including encryption and access controls

You can request a copy of the relevant safeguards by contacting us.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure hosting with reputable providers
  • Access controls and authentication
  • Regular security reviews

However, no internet transmission is completely secure, and we cannot guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the ICO as required by law.

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@30m.com, and we will take steps to delete such information.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All decisions regarding enquiries and communications are made by our team members.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • For significant changes, displaying a notice on our website

We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at privacy@30m.com. We take all complaints seriously and will work to resolve your concerns.

You also have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Phone: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Contact:

Data Protection Contact: Paul Humphreys

Email: privacy@30m.com

Address: Office 3, St Ann's House, 111 Guildford Road, Lightwater, Surrey, England, GU18 5RA

Related Policies

Please also review our other policies which govern your use of our website: