Privacy Policy

Introduction

This Privacy Policy explains how Lawsons Enterprises Ltd (Company No: 16433965), trading as Lawsons Creative ("we", "us", or "our"), collects, uses, stores, and protects your personal data.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all personal data we collect through our website, contact forms, booking systems, and during the provision of our services.

By using our website or services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

Data Controller: Lawsons Enterprises Ltd, trading as Lawsons Creative

Company Number: 16433965

Registered in: England and Wales

Contact Email: hello@lawsonscreative.co.uk

Location: Kent, United Kingdom

2. What Personal Data We Collect

We collect and process the following types of personal data:

Information you provide directly:

• Contact Form Submissions: Name, email address, phone number (optional), and any message or enquiry details you provide
• Calendly Bookings: Name, email address, phone number (if provided), and appointment details when you book a consultation
• Project Communications: Any information you share with us via email, phone, or other communication channels during project discussions or service delivery
• Payment Information: Billing name, address, and payment details (processed securely through third-party payment providers—we do not store full card details)

Information collected automatically:

• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referring website
• Cookies: We use essential cookies to ensure our website functions properly. See our Cookie Policy section below for more details.

3. Why We Collect Your Data (Legal Basis)

We collect and use your personal data for the following purposes, based on these legal grounds:

Legitimate Interests:

• Responding to enquiries: To reply to contact form submissions and answer questions about our services
• Scheduling consultations: To arrange and manage appointments booked through Calendly
• Marketing and business development: To understand how visitors use our website and improve our services

Contract Performance:

• Service delivery: To provide website design, development, and related services as agreed in our contract with you
• Project management: To communicate about project progress, deliverables, and timelines
• Invoicing and payment: To process payments and maintain financial records

Legal Obligations:

• Record keeping: To comply with accounting, tax, and legal requirements
• Dispute resolution: To defend legal claims or exercise our legal rights

Consent (where applicable):

• Marketing communications: To send promotional emails or newsletters (you can opt out at any time)

4. How We Store and Protect Your Data

Data Security: We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure, encrypted communication channels (HTTPS/SSL)
• Password-protected systems and access controls
• Regular security reviews and updates
• Secure hosting with reputable providers

Data Storage Locations: Your personal data is stored in the United Kingdom and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure adequate safeguards are in place in accordance with UK GDPR.

Data Backup: We maintain regular backups of data to prevent loss. Backups are stored securely and protected with the same security measures as live data.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties. However, we may share your data with the following categories of recipients:

Essential Service Providers:

• Formspree: Contact form processing service that receives form submissions (name, email, message)
• Calendly: Appointment scheduling service that receives booking information (name, email, phone)
• Hosting Providers: Vercel, Netlify, or similar platforms where our website and data are hosted
• Email Services: Email service providers used to send and receive communications
• Payment Processors: Secure payment gateways for processing invoices and payments

Legal and Professional Advisors:

• Accountants, auditors, lawyers, or other professional advisors
• Law enforcement or regulatory authorities (if required by law)

All third-party service providers are required to implement appropriate security measures and only process your data as instructed by us, in compliance with UK GDPR.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Data Retention Periods:

• Enquiry and consultation data: Up to 2 years from last contact (unless you request earlier deletion)
• Client project data: 6 years from project completion (to comply with UK accounting and tax requirements)
• Financial records: 6 years (as required by HMRC and UK tax law)
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: Up to 26 months (anonymized after 6 months)

After the retention period expires, we will securely delete or anonymize your personal data. If you have not engaged with us for 2 years, we may delete your enquiry data unless there are legal or business reasons to retain it.

7. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you (known as a "Subject Access Request")
• Right to Rectification: You can ask us to correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, subject to certain legal exceptions (e.g., if we need to retain data for legal or accounting purposes)
• Right to Restrict Processing: You can ask us to limit how we use your personal data in certain circumstances
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, machine-readable format, or ask us to transfer it to another organization
• Right to Object: You can object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: If we process your data based on consent, you can withdraw that consent at any time
• Right to Lodge a Complaint: You can complain to the Information Commissioner's Office (ICO) if you believe we have mishandled your personal data

To exercise any of these rights, please contact us at hello@lawsonscreative.co.uk. We will respond to your request within one month (extendable by two months for complex requests).

How to make a request: Please provide your full name, email address, and details of your request. We may ask for proof of identity to ensure we only disclose data to the correct person.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience and understand how visitors use our site.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and improve functionality.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly (e.g., remembering form inputs during your session)
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics or similar tools—anonymized after 6 months)
• Functionality Cookies: Remember your preferences (e.g., language settings, if applicable)

Managing cookies: You can control and delete cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

Third-party cookies: Services like Calendly may set their own cookies. Please refer to their privacy policies for details.

9. Links to Other Websites

Our website may contain links to third-party websites (e.g., portfolio client sites, social media, or external tools). We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@lawsonscreative.co.uk, and we will promptly delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last updated" date at the top.

If we make significant changes that materially affect your rights, we will notify you via email (if we have your email address) or by displaying a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

12. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Information Commissioner's Office (ICO): If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the UK's data protection authority:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF