Privacy Policy
How we collect, use, and protect your personal data, and the rights you have over it. Last updated 20 July 2026.
Who we are
This website, lift-off.co.uk, is operated by DDDM Consulting Ltd, which trades as Lift-Off Consulting. We are registered in England and Wales, company number 15891109, and our VAT number is GB 492 8150 70. We are based in London, United Kingdom.
For the purposes of UK data protection law, DDDM Consulting Ltd is the data controller for the personal data described in this policy. If you have any questions about how we handle your data, you can reach us at contact@lift-off.co.uk.
The data we collect and why
We only collect personal data that you choose to give us, or that is created automatically when you visit the site. In practice this means the following.
Information you submit through our forms
When you fill in our contact form, request a gated download, or sign up to our newsletter, we collect the details you enter, which are typically your name and email address. We use this information to reply to your enquiry, to send you the material you asked for, or to send you our newsletter if you have subscribed to it. Form submissions are captured and stored by Netlify, which hosts this site and provides the form-handling service. Contact form messages are delivered to us by email using EmailJS.
Newsletter subscriptions
If you subscribe to our newsletter, we keep your email address so that we can send you occasional updates. You can unsubscribe at any time using the link in any email we send, or by contacting us directly, and we will remove your address promptly.
Gated downloads
Some resources on this site are made available after you provide an email address. When you unlock a download, your browser stores a small flag in its local storage so that you are not asked to enter your details again on that device. This flag stays on your device, is not a tracking cookie, and is not sent to us or used to follow you across other websites.
Analytics and cookies
We use Google Analytics 4, loaded through Google Tag Manager, to understand how visitors use the site so that we can improve it. This service sets cookies and collects information such as the pages you view, how you arrived at the site, and general, non-identifying technical details about your device and browser. This information is aggregated and used for statistical purposes; we do not use it to identify you personally.
Scheduling
Where we invite you to book a call, we may link to Calendly, a third-party scheduling tool. If you book through Calendly, any details you enter are collected and processed by Calendly under its own privacy policy. We receive the booking information you provide so that we can attend the meeting.
Server logs
Our hosting provider, Netlify, automatically records standard technical information when you visit the site, such as your IP address, browser type, and the pages you request. These server logs are used to keep the site secure and running reliably.
Our lawful bases for using your data
Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following.
- Consent. When you subscribe to our newsletter, we rely on your consent. You can withdraw it at any time by unsubscribing, without affecting anything we did before you withdrew it.
- Legitimate interests. When you contact us or request a resource, we rely on our legitimate interest in responding to you and providing what you asked for. We also rely on our legitimate interest in understanding and improving the site through analytics. We balance this against your rights, and you can object to this processing at any time.
Who we share your data with
We do not sell your personal data. We share it only with the service providers that help us run the site, and only so that they can provide their service to us. These include:
- Netlify - website hosting, form submission storage, and server logs;
- Google - analytics through Google Analytics 4 and Google Tag Manager;
- EmailJS - delivery of contact form messages to our inbox;
- Calendly - scheduling, where you choose to book a call.
These providers act as our processors, or as separate controllers in their own right, and handle your data under their own privacy terms. We may also disclose personal data where we are required to do so by law.
International transfers
Some of the service providers listed above are based outside the United Kingdom, including in the United States. Where your personal data is transferred outside the UK, we rely on those providers having appropriate safeguards in place, such as the UK's international data transfer arrangements or standard contractual clauses, so that your data continues to receive an equivalent level of protection.
How long we keep your data
We keep personal data only for as long as we need it for the purpose we collected it. Enquiry and contact details are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you get back in touch. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained according to the standard retention settings of the analytics service. When we no longer need your data, we delete it or anonymise it.
Your rights
Under UK GDPR you have the following rights over your personal data:
- the right to be informed about how we use your data;
- the right to access a copy of the data we hold about you;
- the right to have inaccurate data corrected;
- the right to have your data erased in certain circumstances;
- the right to restrict or object to our processing of your data;
- the right to data portability;
- the right to withdraw consent where we rely on it.
To exercise any of these rights, please contact us at contact@lift-off.co.uk. We will respond within the time limits set by law.
How to contact us
If you have any questions about this policy, or you want to make a request about your personal data, please email us at contact@lift-off.co.uk.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. You can find out how at ico.org.uk. We would, however, appreciate the chance to address your concerns first, so please do consider contacting us before you approach the ICO.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date below. This policy was last updated on 20 July 2026.