Privacy Policy
Last updated: February 2026
1. Introduction
30M Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.30m.com.
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: 30M Limited
Company Number: 09386561
ICO Registration: ZA127683
Registered Address: Office 3, St Ann's House, 111 Guildford Road, Lightwater, Surrey, England, GU18 5RA
Data Protection Contact: Paul Humphreys
Contact Email: privacy@30m.com
2. ICO Registration
30M Limited is registered with the Information Commissioner's Office (ICO) as a data controller.
You can verify our registration on the ICO Public Register.
3. Information We Collect
Personal Information You Provide
When you use our contact form, we collect the following information:
- Name (required)
- Email address (required)
- Phone number (optional)
- Company name (optional)
- Message content (required)
Automatically Collected Information
When you visit our website and accept analytics cookies, we collect certain information through Google Analytics, including:
- IP address (anonymised)
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website
- Geographic location (country/city level)
Note: Analytics data is only collected if you consent to analytics cookies. You can withdraw your consent at any time using the preferences manager on our Cookie Policy page.
4. How We Use Your Information
Contact Form Submissions
When you submit our contact form, your information is used solely to respond to your enquiry. Specifically:
- Your name and email are used to address and reply to your message
- Your phone number (if provided) may be used to contact you if you request a call
- Your company name (if provided) helps us understand the context of your enquiry
- Your message content is used to understand and respond to your request
What We Do NOT Do With Your Contact Form Data:
- We do NOT add you to any mailing lists or newsletters
- We do NOT send you marketing communications or promotional emails
- We do NOT sell, rent, or trade your personal data to third parties
- We do NOT share your data with third parties for their marketing purposes
- We do NOT use your data for profiling or targeted advertising
- We do NOT retain your data longer than necessary
How Your Contact Form Data Is Processed
When you submit the contact form, here's exactly what happens:
- Your submission is sent securely to our server (hosted by Vercel)
- Our server uses Resend (an email delivery service) to send your message to our team
- The email is delivered to our internal mailbox (contactfm@30m.com)
- A team member reads your message and replies directly to your email address
- Your email address is set as the "reply-to" so our response goes directly to you
Your data is processed only by 30M Limited team members who need access to respond to enquiries. We operate on a principle of data minimisation and only collect what is necessary.
Ongoing Correspondence
If you continue to correspond with us after your initial enquiry, the same data protection principles apply. Any emails you send us are stored in our business email systems and are subject to the same retention periods and security measures described in this policy.
Analytics Data
We use analytics data (with your consent) to:
- Understand how visitors use our website
- Improve our website content and user experience
- Identify technical issues
General Principles
We do not use your personal data for automated decision-making or profiling. We process the minimum amount of data necessary for the purposes described above.
5. Legal Basis for Processing
Under the UK GDPR, we process your personal data based on the following lawful bases:
Consent (Article 6(1)(a))
For analytics cookies. You can withdraw consent at any time via the preferences manager on our Cookie Policy page.
Legitimate Interests (Article 6(1)(f))
To respond to enquiries submitted through our contact form. Our legitimate interest is to communicate with potential clients and partners. We have assessed that this does not override your rights and freedoms.
Legal Obligation (Article 6(1)(c))
Where required by law (e.g., fraud prevention, legal proceedings).
6. Data Sharing and Processors
We Never:
- Sell your personal data to anyone
- Rent or trade your personal data
- Share your data with third parties for marketing purposes
- Allow third parties to use your data for their own purposes
- Transfer your data to data brokers or advertising networks
We only share your information with service providers who process data on our behalf and under our instructions:
Service Providers (Data Processors)
| Provider | Purpose | Location |
|---|---|---|
| Google Analytics | Website analytics | USA (with EU SCCs) |
| Resend | Email delivery for contact form | USA (with EU SCCs) |
| Vercel | Website hosting | Global (with EU SCCs) |
All our service providers are bound by data processing agreements and are required to process your data only on our instructions and in compliance with applicable data protection laws.
Legal Requirements
We may disclose your information where required by law, court order, or government regulation.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions | 2 years | Business relationship management |
| Analytics data | 26 months | Google Analytics default |
| Cookie consent preference | 1 year | Remember your choice |
8. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15)
Request a copy of your personal data we hold.
Right to Rectification (Article 16)
Request correction of inaccurate or incomplete data.
Right to Erasure (Article 17)
Request deletion of your data ("right to be forgotten").
Right to Restrict Processing (Article 18)
Request limitation of how we use your data.
Right to Data Portability (Article 20)
Request transfer of your data in a machine-readable format.
Right to Object (Article 21)
Object to processing based on legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time (for analytics cookies).
To exercise any of these rights, please contact our Data Protection Contact at privacy@30m.com. We will respond within one month. In complex cases, we may extend this by a further two months, but we will inform you within the first month if this is necessary.
You will not have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
9. International Transfers
Some of our service providers transfer and process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs): Approved by the UK Information Commissioner's Office
- Data Processing Agreements: With all service providers
- Supplementary Measures: Including encryption and access controls
You can request a copy of the relevant safeguards by contacting us.
10. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure hosting with reputable providers
- Access controls and authentication
- Regular security reviews
However, no internet transmission is completely secure, and we cannot guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the ICO as required by law.
11. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@30m.com, and we will take steps to delete such information.
12. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All decisions regarding enquiries and communications are made by our team members.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- For significant changes, displaying a notice on our website
We encourage you to review this policy periodically.
14. Complaints
If you have concerns about how we handle your personal data, please contact us first at privacy@30m.com. We take all complaints seriously and will work to resolve your concerns.
You also have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Contact:
Data Protection Contact: Paul Humphreys
Email: privacy@30m.com
Address: Office 3, St Ann's House, 111 Guildford Road, Lightwater, Surrey, England, GU18 5RA
Related Policies
Please also review our other policies which govern your use of our website:
- Cookie Policy - How we use cookies and how to manage your preferences
- Terms & Conditions - Terms governing your use of our website