Privacy notice

Last updated: 31 October 2026

Who we are

Fusion PM Ltd (“Fusion”, “we”, “us”) is responsible for the personal data collected through this website, fusion.pm. In data protection law, we are the controller of that data.

For any question about this notice or your personal data, email support@fusion.pm.

This notice covers this website only. When we provide services to a client, a separate agreement covers the personal data we handle for that client.

What we collect

• Contact form. Your name, email address, organisation (if you give it) and your message.
• Email. The details you include when you email us.
• Form security records. When you send the contact form, we keep a coded (hashed) form of your IP address, the time you sent the form and whether the message was delivered. We do not keep your message in this record. We use it to stop spam and abuse, and we delete it after 30 days.
• Technical data. Our hosting provider processes IP addresses and basic request data to deliver this website and to protect it from attacks.

Cookies

We use one cookie, fusion_contact, on the contact page only. It confirms that a form was sent from our own page and not forged. It expires after 24 hours. This cookie is strictly necessary for the form to work, so we do not ask for consent to use it.

We do not use analytics, advertising or tracking cookies.

How we use your data and our lawful basis

• To reply to your enquiry and to discuss the services you asked about. Our lawful basis is our legitimate interest in responding to people who contact us. If you ask us about working together, it is also to take steps before a possible contract.
• To keep this website and the contact form secure. Our lawful basis is our legitimate interest in protecting our systems and the people who use them.

We do not send you marketing emails unless you ask us to. We do not sell your data. We do not make decisions about you by automated means alone.

Who we share it with

We use trusted service providers who process data for us, under contract and only on our instructions:

• website hosting and security (Cloudflare);
• delivery of contact form messages by email (Postmark);
• our email and office systems.

We may also share data if the law requires it.

International transfers

Some of our service providers process data outside the UK, including in the United States. When they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or on approved contract terms, such as the International Data Transfer Agreement or the UK Addendum.

How long we keep it

We keep form security records for 30 days. We keep enquiries and the emails that follow only for as long as we need them to deal with your enquiry and any work that follows. Then we delete them.

Your rights

You have the right to ask for a copy of your personal data, and to ask us to correct it, delete it or limit how we use it. You can also object to how we use it, and ask us to transfer it to you or to someone else. Email support@fusion.pm. We reply within one month.

Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice. The date at the top shows when we last changed it.