Last updated: 27 October 2026
This policy explains how STORM 360 Limited collects, uses and protects your personal information when you use our website, contact us or use our services, and how we use cookies on this site.
1. Who we are
STORM 360 Limited is a company registered in Scotland (company number SC423594). Our registered office is 41a Green Street, Ayr, Ayrshire, KA8 8BQ. We are the data controller for the personal information described in this policy.
If you have any questions about this policy or your information, contact us at [email protected], call 01292 264415, or write to us at the address above.
2. Information we collect
- Enquiries and contact forms – your name, email address, phone number, company name and the details of your enquiry.
- Support tickets – your name, contact details, address and information about the IT issue you report.
- Live chat – your name and email address if you give them, the content of the chat, and technical information such as your IP address, browser and the page you were on.
- Newsletter sign-up – your email address and your marketing preferences.
- Website usage – information about how you use our site, such as pages visited, device and browser type, approximate location and IP address, collected through cookies (see section 9).
- Clients – when we provide IT, hosting, web or other services, we hold contact, billing and account details for you and your business. Personal data we process on your behalf as part of those services is covered by our terms of business.
3. How we use your information and our lawful basis
- To reply to enquiries and give quotes – our legitimate interests in responding to you, or to take steps at your request before entering into a contract.
- To provide our services and support – to perform our contract with you.
- To invoice and take payment – to perform our contract and to meet our legal and accounting obligations.
- To send newsletters and marketing emails – your consent, or our legitimate interests where you are an existing client. You can unsubscribe at any time using the link in any email.
- To understand and improve our website – your consent, where non-essential cookies are used.
- To keep our website and systems secure and prevent spam – our legitimate interests.
We do not sell your personal information.
4. Who we share it with
We use trusted service providers to run our business. They only process your information on our instructions and must keep it secure. These include:
- HubSpot – customer relationship management, website forms and email
- LiveChat – website live chat
- Google – website analytics
- 20i – website hosting
- Microsoft 365 – email and business software
- Syncro – IT support ticketing and client management
- Xero – accounting and invoicing
- GoCardless – Direct Debit payments
We may also share information with our professional advisers, or where we are required to by law.
5. International transfers
Some of our providers are based in, or store data in, the United States or other countries outside the UK. Where this happens we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, standard contractual clauses or the UK Extension to the EU-US Data Privacy Framework.
6. How long we keep it
- Enquiries that do not lead to work: up to 2 years.
- Client, contract and billing records: 6 years after our relationship ends, to meet legal and tax requirements.
- Marketing preferences: until you unsubscribe, plus a record that you opted out.
- Live chat transcripts and website analytics: in line with the retention settings of those services.
7. Your rights
Under UK data protection law you have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to ask for it to be transferred to you or another organisation, and to withdraw consent at any time. To make a request, contact us using the details in section 1. We will reply within one month.
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Security
As an IT company we take security seriously. We use appropriate technical and organisational measures to protect your information, including access controls, encryption, secure hosting and staff training.
9. Cookies
Cookies are small text files stored on your device when you visit a website. We use them to make our site work, to provide live chat, and – with your consent – to understand how visitors use the site.
| Type | Provider | Purpose |
|---|---|---|
| Strictly necessary | STORM 360 (WordPress) | Keep the site secure, remember settings and make forms work. These cannot be switched off. |
| Functional | LiveChat (e.g. __lc_cid, __lc_cst) | Remember your chat session so conversations continue between pages. |
| Analytics | Google (e.g. _ga, _ga_*) | Count visits and see which pages are used, so we can improve the site. |
| Analytics & marketing | HubSpot (e.g. __hstc, hubspotutk, __hssc, __hssrc) | Understand visits and link form submissions to your enquiry. |
You can accept or decline non-essential cookies when you first visit the site, and change your mind at any time. You can also block or delete cookies in your browser settings – see the ICO’s guide to cookies. Blocking some cookies may affect how the site works.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.