GDPR and data protection
How Starline News meets the UK GDPR and the Data Protection Act 2018, and how to use your rights. Last updated 26 September 2026.
Who is responsible
The data controller is Innoligo Ltd, registered in England and Wales, company no. 15571813, registered office Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. VAT no. GB 472 1970 81. ICO registration number: .
Privacy contact: sales@innoligo.com · 07824 366467. We are not required to appoint a Data Protection Officer, and our privacy contact handles all data protection requests.
How we follow the data protection principles
- Lawful, fair and transparent: every use of personal data is explained in our privacy policy, next to each form.
- Only what we need: forms ask for the minimum. Phone number and message are optional.
- Used only for the purpose given: an enquiry is used to answer that enquiry. We never sell data.
- Kept only as long as needed: enquiries up to 24 months, client records 6 years, newsletter until you unsubscribe.
- Secure: HTTPS only, strict security headers, spam protection on forms, and access limited to the people who respond.
- Private by design: the Licence Waste Audit analyses your Microsoft 365 file inside your own browser. The file is never uploaded to us. The Plan Picker, Quote Builder and games also run on your device.
Lawful basis for each activity
| Activity | Data | Lawful basis |
|---|---|---|
| Free call and assessment requests | Name, company, email, optional phone, company size, message | Steps at your request before a contract; legitimate interests |
| Quote requests | Email, licence numbers | Steps at your request before a contract |
| Buyer Brief newsletter | Consent (unsubscribe any time) | |
| Client records and invoices | Contact and billing details | Contract; legal obligation |
Who processes data for us
| Provider | Purpose | Location |
|---|---|---|
| Formspree | Delivers website form submissions to our inbox | United States |
| Microsoft (Microsoft 365, Bookings) | Email and call scheduling | UK / EU / United States |
| Website hosting provider | Serves the website; security logs | May include United States |
Where data is processed outside the UK, we rely on UK adequacy regulations or the safeguards required by UK law, such as the International Data Transfer Agreement or Addendum.
Your rights
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to fix anything inaccurate.
- Erasure: ask us to delete your data.
- Restriction and objection: ask us to limit or stop using your data.
- Portability: receive your data in a common format.
- Withdraw consent: for the newsletter, at any time.
How to make a request: email sales@innoligo.com with the subject "Data protection request". It is free, and we will reply within one month. We may ask you to confirm your identity first.
If something goes wrong
If a personal data breach is likely to put your rights at risk, we will report it to the Information Commissioner's Office within 72 hours and tell affected people without undue delay, as the law requires.
Other points
- We make no automated decisions with legal or similar effects about you.
- This website is for businesses and is not directed at children.
- We do not use cookies. See our cookie policy.
Complaints
Please contact us first so we can put things right. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.