Last updated: 18 July 2026
This Privacy Policy explains how ONE ROAD LTD. (“One Road”, “we”, “us” or “our”) collects and uses personal information when you visit our website, contact us, make a project enquiry or communicate with us in a professional capacity.
Controller: ONE ROAD LTD.
Company number: 10556033
Registered office: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
Email: [email protected]
1. Who this policy applies to
This website is intended for businesses and professionals. This policy applies to website visitors, prospective and current client contacts, suppliers, collaborators and other professional contacts. Even where we contract with a company, information about the people representing that company may still be personal data.
2. Information we collect
Information you provide
- Your name, professional email address and company.
- Information submitted through the project enquiry form, including project type, budget range, preferred timeline, project details and referral source.
- Correspondence, meeting notes and other information you choose to share with us.
- Commercial, contractual and project information when we work together.
Technical information
Our hosting and security providers may process technical information such as your IP address, browser, device, request time and pages requested. The contact form also uses a short-lived, one-way technical identifier for basic rate limiting. We do not use this identifier for advertising or profiling.
Information from professional sources
We may receive professional contact information through referrals, business networks, a company website, a professional platform or another publicly available business source.
3. How and why we use personal information
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and assessing a potential project. | Our legitimate interests in developing and operating our business; steps requested before entering a contract where applicable. |
| Preparing proposals, contracts, schedules and project plans. | Contract, steps before contract and legitimate interests. |
| Managing client, supplier and collaborator relationships. | Contract and legitimate interests in delivering and administering professional services. |
| Accounting, tax, company administration and legal compliance. | Legal obligation and legitimate interests. |
| Protecting the website, preventing abuse and resolving technical issues. | Legitimate interests in security, continuity and fraud prevention. |
| Establishing, exercising or defending legal claims. | Legitimate interests and legal obligations. |
We do not use website enquiry data for automated decision-making. We do not sell personal information.
4. Contact form information
The project enquiry form collects only the information needed to understand and respond to a potential business project. Required fields are identified on the form. Submitting an enquiry does not create a contract or oblige either party to proceed.
When validation fails, the submitted values may be stored temporarily for up to 10 minutes so that the form can be shown again without losing your work. A short-lived anti-abuse identifier may be retained for approximately 45 seconds.
5. Service providers and other recipients
We may share personal information only where reasonably necessary with:
- Website hosting, email, cloud storage, communications and IT support providers.
- Professional advisers such as accountants, insurers and legal advisers.
- Trusted project collaborators or subcontractors where their involvement is needed for a project and appropriate confidentiality arrangements apply.
- Regulators, courts, law enforcement or public authorities where required by law.
- A buyer, investor or adviser in connection with a genuine corporate transaction, subject to appropriate protections.
6. Vimeo, Google Fonts and external services
Our website uses Google Fonts and may embed video through Vimeo. Loading these resources can cause technical information, including your IP address and browser information, to be sent to the relevant provider.
Vimeo players are configured with the dnt=1 parameter to limit session analytics and prevent Vimeo from setting new non-essential player cookies during that viewing session. Vimeo states that essential technologies may still operate and that cookies already stored from an earlier Vimeo visit may still be sent by your browser. See our Cookie Policy for more detail.
7. International transfers
Some providers or collaborators may process information outside the United Kingdom. Where UK data protection law requires it, we use an appropriate transfer mechanism or other lawful safeguard. You may contact us for further information about the safeguards relevant to your information.
8. How long we keep information
- Enquiries that do not become projects: normally up to 24 months after the last meaningful contact.
- Client and project records: normally up to 6 years after the end of the relationship, unless a longer period is reasonably required for a dispute, legal obligation or continuing rights.
- Financial and tax records: retained for the period required by applicable law, typically at least 6 years.
- Temporary form state: up to 10 minutes.
- Security and server logs: retained according to the relevant provider’s security and operational schedules and no longer than reasonably necessary.
We may delete or anonymise information earlier when it is no longer required.
9. Your rights
Depending on the circumstances, you may have rights to:
- Ask for access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete information.
- Ask us to restrict how information is used.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
These rights are not absolute and may be subject to legal exceptions. To exercise a right, email [email protected]. We may need to verify your identity before acting on a request.
10. Data protection complaints
Please send any data protection concern or complaint to [email protected]. We will acknowledge a complaint within 30 days where required, investigate it appropriately and communicate the outcome without undue delay.
You also have the right to complain to the UK Information Commissioner’s Office. Details are available on the ICO website.
11. Security
We use proportionate technical and organisational measures intended to protect personal information. No website, email system or internet transmission can be guaranteed completely secure, so please avoid sending highly sensitive or confidential material through the initial enquiry form.
12. Changes to this policy
We may update this policy when our website, providers, business activities or legal obligations change. The latest version will be published on this page with a revised date.