Skip to content
Ledger & LockFinance & security

Legal

Privacy policy

Template: review before launch. This page is a starting point only and must be reviewed and completed (all items in [brackets]) to reflect how your business actually processes data. Consider taking legal advice.

Last updated: [Date]

Ledger & Lock Ltd (“we”, “us”) is committed to protecting your personal data. This policy explains what we collect through this website, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Ledger & Lock Ltd is the data controller for personal data collected through this website. Company number: [number]. Registered office: [address]. ICO registration number: [number]. Contact: hello@example.com.

What we collect

  • Details you give us through the enquiry form: name, company, email, telephone, industry, company size and your message.
  • Details you give us when booking a consultation through [booking provider].
  • Your name, email and company (optional) if you request a guide or a copy of your exposure check results.
  • Basic website usage data, if analytics are enabled (see our cookie policy).

The “How exposed is your business?” check runs in your browser. Your answers are only sent to us if you ask us to email you a copy, in which case we receive your name, email address, company (if given) and your answers.

How we use your data and our lawful basis

  • To respond to your enquiry and arrange a consultation: legitimate interests / steps prior to entering a contract.
  • To deliver services if you become a client: performance of a contract.
  • To meet legal and accounting obligations: legal obligation.
  • [Marketing communications, if any: consent, which you can withdraw at any time.]

Who we share it with

We use trusted service providers to operate this website and handle enquiries, including [hosting provider, e.g. Vercel], [email provider, e.g. Resend], [CRM provider] and [booking provider]. They process data only on our instructions. We do not sell your data.

International transfers

[Describe any transfers outside the UK and the safeguards in place, e.g. UK International Data Transfer Agreement or adequacy regulations.]

How long we keep it

[e.g. Enquiries that do not lead to work are deleted after 12 months. Client records are kept for six years after the engagement ends.]

Your rights

You have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, email hello@example.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes

We may update this policy from time to time. The latest version will always be on this page.