Privacy Policy

Last updated: 15 July 2026

1. Who we are

SearchSoda ("we", "us", "our") is a digital marketing agency based in London, United Kingdom. We are the data controller for personal data collected through this website and in the course of providing our services. You can contact us about anything in this policy at support@searchsoda.com.

This policy explains what personal data we collect, why we collect it, the legal bases we rely on, who we share it with and the rights you have. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies to visitors in the European Economic Area, the EU GDPR.

2. The data we collect

Information you give us. When you contact us, request a quote, use the quote builder or free consultation form, book a call, sign up for a Launchpad website, or message our AI assistant, we collect the details you choose to provide — typically your name, email address, phone number, business name and details of what you need. If you subscribe to Launchpad, we also collect your account details and the information needed to set up your website.

Payment information. Launchpad subscriptions are billed by Stripe. Your full card details are collected and held by Stripe, not by us; we receive confirmation of payment, the subscription status and limited billing metadata.

Information collected automatically. With your consent (given through our cookie banner), we use Google Analytics to collect statistics about how visitors use the site, such as pages viewed, approximate location and device type. Independently of consent, our hosting provider keeps standard server logs (IP address, request time, user agent) for security and troubleshooting, and Cloudflare Turnstile runs on our forms to distinguish people from bots.

3. Why we use it and our lawful bases

• Responding to enquiries and quotes — legitimate interests, and steps taken at your request before entering a contract (Article 6(1)(b) and (f) UK GDPR).
• Providing our services and Launchpad subscriptions — performance of a contract (Article 6(1)(b)).
• Billing, accounting and business records — legal obligation (Article 6(1)(c)).
• Analytics — your consent (Article 6(1)(a)); nothing is collected unless you accept.
• Marketing emails — your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
• Site security, spam prevention and abuse protection — legitimate interests (Article 6(1)(f)).

4. The AI assistant

Our website chat assistant is powered by Anthropic's Claude API. Messages you type into the chat are sent to Anthropic (a US company) to generate a reply, and Anthropic processes them as our service provider. If you share contact details in the chat so we can follow up, we store those as an enquiry. Please don't submit sensitive personal information (for example health or financial details) through the chat — email us instead.

5. Who we share data with

We never sell personal data. We share it only with service providers who process it on our behalf under contract, and only for the purposes above:

• SiteGround — website and email hosting.
• Google — analytics (with your consent) and tag management.
• Anthropic — AI assistant responses.
• Cloudflare — Turnstile bot protection on forms.
• Stripe — Launchpad payment processing.
• MailerLite — email delivery.

We may also disclose personal data where the law requires it, to professional advisers under confidentiality, or in connection with a business sale or restructuring, in which case this policy would continue to apply.

6. International transfers

Some of our providers (including Google, Anthropic, Cloudflare and Stripe) process data in the United States. Where personal data leaves the UK or EEA, we rely on appropriate safeguards recognised under UK and EU law — the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the International Data Transfer Agreement / EU Standard Contractual Clauses otherwise.

7. How long we keep it

• Enquiries and quotes — for as long as needed to handle them and any work that follows, then up to 24 months in case you come back to us, after which they are deleted.
• Client and Launchpad account records — for the life of the engagement, then up to 6 years to meet tax, accounting and legal obligations.
• Analytics data — retained in Google Analytics for the shortest period the tool supports before automatic deletion.
• Server and security logs — short rolling periods set by our hosting provider.

8. Your rights

Under UK GDPR (and EU GDPR where it applies) you have the right to: access a copy of your personal data; have inaccurate data corrected; have data deleted; restrict how we use it; object to processing based on legitimate interests; receive data you provided in a portable format; and withdraw any consent at any time without affecting processing that happened before you withdrew it.

To exercise any right, email support@searchsoda.com. We respond within one month. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office, at ico.org.uk — though we'd appreciate the chance to resolve any concern first.

9. Launchpad customer websites

Websites we host for Launchpad customers (at addresses like yourbusiness.launchpad.searchsoda.com or a customer's own domain) belong to those customers. For personal data submitted by visitors to those sites — for example through their contact forms — the customer is the data controller and we act as their processor, hosting and delivering that data on their instructions. Each customer site carries its own privacy policy naming the business responsible.

10. Security

We protect personal data with HTTPS everywhere, access controls, hardened server configuration and reputable infrastructure providers. No online service can promise absolute security, but we work to keep risk low and would inform you and the ICO of any breach where the law requires it.

11. Children

Our website and services are aimed at businesses and are not directed at children under 16. We do not knowingly collect their data; if you believe a child has provided us personal data, contact us and we will delete it.

12. Cookies

Details of the cookies and similar technologies this site uses, and how to control them, are in our Cookie Policy.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed; significant changes will be highlighted on this page.

14. Contact

SearchSoda, London, United Kingdom · support@searchsoda.com