Privacy Notice

Who we are

Lawneds Ltd, trading as The Lawneds, is the data controller for the personal data described in this policy.

• Registered address: 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE
• Company number: 16129388
• Email: consult@thelawneds.com
• Telephone: +44 7429 852384

Our registered office is in London. We are based in Nottingham and support organisations across the United Kingdom.

What this website collects

This website collects personal data in one place only: the contact form.

When you send us an enquiry, the form asks for:

• your name (required)
• your email address (required)
• the type of enquiry (required)
• your message (required)
• your organisation (optional)
• your telephone number (optional)

The form also asks you to answer a simple arithmetic question. This is a spam check. Your answer is not stored and is not personal data.

The website does not use analytics. It does not track you, profile you, build an advertising audience from you, or share anything about your visit with a third party. There is no tracking pixel, no advertising tag and no social media embed on any page.

What happens to your enquiry

When you send the form, your message is emailed to us. That is the whole mechanism.

Your enquiry is not saved in the website’s database. Nothing you type is stored on the website itself, so there is no record of it there to be lost, leaked or requested. Once the email has been sent, the website retains nothing.

The email arrives with your email address set as the reply address, so that we can reply to you directly.

After that, your enquiry lives in our email system. We keep enquiry emails for 24 months and then delete them. If your enquiry becomes a client relationship, the correspondence is retained for the duration of that relationship and for six years afterwards, which is the period our professional and tax record keeping obligations require.

Why we are allowed to process it

Under UK GDPR we rely on legitimate interests, Article 6(1)(f), for responding to an enquiry you have chosen to send us. Our legitimate interest is in answering people who contact us about our services. We have considered your interests and rights and take the view that someone who sends an enquiry expects a reply.

We do not send marketing email. The contact form does not ask for marketing consent and we do not add enquirers to a mailing list. If that ever changes, the form will ask you first, with a box that starts unticked, and this policy will be updated to say so.

We do not ask for, and do not want, special category data such as health information. Please do not include it in the message field.

Technical data

To stop the contact form being abused to send bulk email, the website counts how many messages have been sent from a given internet connection in the past hour and refuses more than five.

To do this it stores a one way hash derived from your IP address, together with a count. It is held for one hour and then deleted automatically. Your IP address itself is not stored, and the hash cannot be used to identify you or to link one visit to another.

The website’s own files, including its fonts, are served from our own hosting. No fonts, scripts or images are loaded from another company’s servers, so visiting a page does not disclose your visit to anyone but us and our hosting provider.

Who else is involved

Two other organisations process personal data on our behalf:

• a hosting provider, which runs the server this website is served from
• a business email provider, which carries the enquiry emails and our correspondence with you

Both are engaged under written terms that require them to process personal data only on our instructions and to keep it secure. Our hosting provider keeps server logs, which typically record IP addresses, for a limited period, and uses them only for security and for diagnosing faults.

We do not sell personal data, and we do not share it with anyone for their own purposes.

If you want to know which organisations these are before you contact us, email consult@thelawneds.com and we will tell you.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use it
• object to our processing it on the basis of legitimate interests
• ask us to transfer it to you or another organisation in a portable format

To exercise any of these, email consult@thelawneds.com. We will respond within one month.

If you are not satisfied with our response you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

We would rather you came to us first, so that we have the chance to put it right.

Cookies

This website does not set cookies on visitors. There is a separate cookie policy which explains this in more detail.

Changes to this policy

If we change how we handle personal data, we will update this policy and change the date at the top. Where the change is significant, we will say what changed.