Privacy Policy

This Privacy Notice is effective from 28th May 2026.

Welcome

Spirit Advisory Ltd deliver consultancy and an AI platform for the offshore wind and blue economy sectors. We believe trust and transparency should extend to how we handle data.

This Privacy Policy explains how Spirit Advisory Ltd ("Spirit", "we", "our", or "us") collects, uses, and protects personal information when you visit our website at [https://www.spiritaeg.com/] ("the Website") or join our waitlist.

We are committed to handling personal data fairly, lawfully, and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

This policy covers the Website and waitlist only. If we launch additional services (for example, the Spirit platform), a separate privacy notice will apply, and we will let you know.

Who we are
The personal data we collect
How we use your personal data and the lawful basis for doing so
Marketing communications
Who we share your personal data with
International transfers
How long we keep your personal data
Your rights

1. Who we are

Spirit Advisory Ltd is the data controller for the personal information described in this policy.

Registered company number: 13670841
Registered office: 23 Riverside Studios, Amethyst Road, Newcastle Business Park, Newcastle Upon Tyne, NE4 7YL, United Kingdom
Contact for privacy matters: [contact@spiritaeg.com]

If you have any questions about this policy or how we use your data, please contact us using the details above.

2. The personal data we collect

We collect personal data in three ways:

2.1 Information you give us when you join the waitlist

When you submit our waitlist form, we collect:

Your email address
Your company name
Your job role
Any optional information you choose to share with us in the form

The waitlist form is hosted on Google Forms. Submissions are sent to our customer relationship management ("CRM") system, [Squarespace and Google Forms].

2.2 Information you give us when you contact us

If you email us, fill in a contact form, or speak to us at an event, we collect:

Your name and contact details
The content of your message and any follow-up correspondence
Your organisation and role, where you tell us

2.3 Information collected automatically when you visit the Website

When you use the Website, we automatically collect technical information through Squarespace, which provides our website platform and analytics. This may include:

Your IP address (in truncated or anonymised form where possible)
Your device type, browser, and operating system
The pages you view and how you arrived at the Website (referrer)
Session timing and basic interaction events

This information is used in aggregate to understand how the Website performs and is described in more detail in our Cookie Policy.

3. How we use your personal data and the lawful basis for doing so

Under UK GDPR, we must have a lawful basis to process your personal data. The table below sets out what we do, why, and on what basis.

  
      What we do
      Why
      Lawful basis
    
      Add you to our waitlist and confirm your sign-up
      To deliver the service you asked for
      Performance of a contract / your request
    
      Send you marketing communications about Spirit, including product updates, launch announcements, sector insights, and event invitations
      To keep you informed about Spirit’s services that you have expressed interest in
      Consent (you tick the consent box on the waitlist form) — you can withdraw at any time
    
      Send service or transactional communications
      To meet our obligations to you
      Legitimate interests — keeping you informed about your relationship with us
    
      Respond to enquiries and provide consultancy services
      To handle your request and deliver work you ask us to do
      Performance of a contract / pre-contractual steps
    
      Analyse Website usage in aggregate
      To improve the Website and our content
      Legitimate interests — running and improving our business, balanced against your privacy
    
      Keep records for tax, accounting, and legal compliance
      To meet our statutory obligations
      Legal obligation
    
      Investigate or defend legal claims
      To protect Spirit’s rights
      Legitimate interests

You can ask us at any time about the legitimate interests we rely on, and you can object to processing based on legitimate interests (see section 9, Your rights).

4. Marketing communications

If you join our waitlist and tick the marketing consent box, we will send you marketing emails about Spirit. These may include:

Product news and launch updates
Spirit insights, sector commentary, and case studies
Invitations to events, webinars, or research conversations
Service offers and consultancy availability

You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email, or by emailing us at contact@spiritaeg.com. Unsubscribing from marketing does not affect service or transactional communications related to your waitlist sign-up.

We do not sell your personal data to third parties for marketing purposes, and we do not share your contact details with any other organisation for marketing purposes.

5. Who we share your personal data with

We only share your personal data with organisations that help us run the Website and our business. These organisations are bound by contract to keep your data secure and only use it on our instructions. They include:

Squarespace — website hosting and built-in analytics. Privacy information: https://www.squarespace.com/privacy
Google — provider of Google Forms (used to capture waitlist submissions). Privacy information: https://policies.google.com/privacy
Squarespace — stores waitlist contacts and is used to send marketing communications. Privacy information: https://www.squarespace.com/privacy
Professional advisers (e.g. accountants, lawyers) where required for legal, financial, or compliance reasons
Authorities and regulators where we are required to do so by law

We may also share personal data if we sell or restructure our business, in which case we will notify affected individuals.

6. International transfers

Some of our service providers, including Squarespace and Google, are based in the United States. This means your personal data may be transferred outside the UK and the European Economic Area. When this happens, we make sure appropriate safeguards are in place, which usually means relying on:

The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and
Any additional measures the provider has in place to protect your data.

You can ask us for more information about these safeguards using the contact details in section 2.

7. How long we keep your personal data

We only keep your personal data for as long as we need it:

  
      Data type
      Retention period
    
      Waitlist contacts (consented to marketing)
      2 years from your last interaction with us, or until you unsubscribe
    
      Waitlist contacts (unsubscribed)
      Held on a suppression list to prevent re-contact — kept indefinitely for that purpose only
    
      Enquiry correspondence
      2 years from the last contact
    
      Website analytics
      Aggregated and retained for the period set by Squarespace (typically 2 years)
    
      Records required for tax / legal compliance
      6 years from the end of the relevant financial year

Waitlist details are collected through our website and then brought into Spirit's secure internal systems, with access limited to authorised Spirit personnel. We use a small number of trusted service providers to host our website and store data on our behalf; they act only on our instructions, and we do not sell or share your data for marketing purposes.

Some of these service providers may store data outside the UK. Where that happens, we take appropriate steps to ensure your information remains protected.

When we no longer need your data, we delete or anonymise it.

8. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — ask us for a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — ask us to delete your data ("right to be forgotten") in certain circumstances
Right to restrict processing — ask us to pause certain uses of your data
Right to data portability — ask us to send your data in a structured, machine-readable form
Right to object — object to processing we carry out under legitimate interests, and to direct marketing at any time
Right to withdraw consent — where we rely on consent, you can withdraw it at any time
Right not to be subject to solely automated decision-making — we do not currently carry out automated decision-making of this kind

To exercise any of these rights, contact us at contact@spiritaeg.com. We will respond within one month. We may ask you to verify your identity before we act.

9. Cookies

The Website uses cookies and similar technologies to function and to help us understand how it is used. Please see our Cookie Policy for details, including how to manage your cookie preferences.

10. Security

We take appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and supplier due diligence. No system is completely secure, but we work to reduce risk and respond promptly if something goes wrong. If a personal data breach is likely to result in a high risk to you, we will notify you and the Information Commissioner's Office as required by law.

11. Children

The Website and waitlist are not directed at children, and we do not knowingly collect personal data from children under 18. If you believe we hold data about a child, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If changes are significant — for example, a new use of your data — we will let you know directly, where we can, and ask for your consent again if needed.

13. How to complain

If you have a concern about how we have handled your personal data, please contact us first at [privacy@spiritaeg.com], and we will do our best to put things right.

You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 Website: https://ico.org.uk/concerns

Back to top ↑