Privacy notice

What personal information I collect, why, how long I keep it, and your rights. In plain English.

Last updated: 15 October 2026

Who I am

This notice is from Luke, a sole trader based in the North East of England, trading as LFT. For data protection law, I'm the “controller” of the personal information described here, unless I say otherwise.

The short version

  • This website uses no cookies, no analytics and no trackers, so there's no cookie banner.
  • If you use the contact form or email me, I use your details to reply to you, and that's all.
  • I only send unsolicited sales emails or messages to limited companies and LLPs, never to sole traders or partnerships, and every one has an easy way to opt out.
  • If you're a customer of one of my clients, that business is in charge of your details; I only handle them on its behalf.
  • I never sell personal information.

What I collect and why

1. When you use the contact form or email me

What: your name, business name, email address, what you're interested in, your message, and anything else you choose to tell me. When you use the form, my website host (Netlify) also records technical details such as your IP address and browser type, to block spam.

Why: to reply to you and, if you want, to give you a quote.

Lawful basis: legitimate interests (replying to people who contact me) and, if you ask for a quote, taking steps at your request before a contract.

How long: if you don't become a client, I delete your enquiry within 12 months of our last contact.

2. If you become a client

What: your contact details, business details, what we've agreed, invoices and payments, our emails, and, if you ask me to order printing for you, the delivery name and address.

Why: to provide the service you've asked for, send invoices and keep proper records.

Lawful basis: contract (to do what we've agreed), and legal obligation (tax law requires me to keep financial records).

How long: for as long as you're a client, then 6 years after our contract ends, because of tax rules. After that I delete it.

3. When I contact businesses about my services

I sometimes contact limited companies and limited liability partnerships (LLPs) to tell them about my services, by email, through the contact form on their website, or through their business social media page. I never send unsolicited marketing emails or messages to sole traders or partnerships, and if I can't confirm a business's legal form, I don't contact it.

What: the business's name, area and website, the business contact details it publishes (such as a general email address, contact form or business social media page), its legal form (checked on Companies House), where I found it, when I contacted it and what happened. A business email address can sometimes identify a person, so I treat it as personal information. For a few businesses I also make a private concept page using the business's own public details and reviews (each linked to where it was left). These pages are not listed anywhere, are hidden from search engines, and are taken down if the business isn't interested.

Where it comes from: the business's own website, Companies House and public business listings.

Why: to tell businesses about services that may help them, and to avoid contacting anyone twice or after they've said no.

Lawful basis: legitimate interests. I've weighed this against your interests: I only use published business contact details, send at most one follow-up, say clearly who I am and that it's a sales message, and make it easy to opt out.

How long: if there's no reply, or the answer is no, I delete the record within 12 months of my last message. If you opt out, I keep just the business name and the contact details I used on a “do not contact” list, for as long as I do this kind of outreach, so that I never contact you again.

4. When you visit this website

This site sets no cookies and uses no analytics, trackers, advertising, social media plug-ins or third-party fonts, and it doesn't store anything in your browser.

Like any website host, Netlify keeps standard server logs (such as IP address, the page requested, and the date and time) to run and protect the service. I don't use these logs to identify visitors.

5. If you're a customer of one of my clients

Some of my services mean handling personal information about my clients' own customers, members or staff, for example messages sent through a client's website contact form, details stored in a custom tool, or phone numbers used for missed-call text-back or review-request messages. In these cases the business is the controller and I'm its “processor”: I only use the information to run the service the business has asked for, under a written data processing agreement, and I delete or return it when the service ends.

If you have questions about how a business uses your details, please ask that business first. I'll help it answer you. To stop review-request messages, reply STOP to any of them.

Who I share it with

Only the service providers I need to run my business, and only what they need:

  • Netlify (website hosting and the contact form).
  • My email provider (to send and receive email).
  • The software and online services I use to run my business and prepare work (for example for documents, file storage and building websites), only as far as they need it to do that job, and under terms that protect the data.
  • An online printer, only when a client asks me to order printing: the design files and the delivery name and address.
  • A text-message provider, only for clients who use missed-call text-back or review-request messages.
  • Google, only for clients who add me as a manager of their Google Business Profile, which Google runs under its own privacy terms.
  • An accountant, if I use one, for my business records.
  • HMRC or other authorities, if the law requires it.

Some providers, including Netlify, are based in the United States or store data outside the UK. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK-US data bridge or approved contract clauses.

I never sell personal information or share it for other people's marketing.

How to stop my emails

Every sales email or message I send says how to opt out. Just reply STOP, or tell me through the contact form. I'll stop straight away, normally the same day I see it, and add you to my “do not contact” list so it doesn't happen again.

Your rights

You have the right to:

  • ask for a copy of the personal information I hold about you;
  • ask me to correct anything that's wrong;
  • ask me to delete your information;
  • ask me to limit how I use it;
  • object to how I use it, including an absolute right to object to direct marketing;
  • ask for information you gave me in a format you can take elsewhere, where that applies.

To use any of these rights, email me or use the contact form. It's free, and I'll reply within one month. I may need to check who you are first.

I don't make any decisions about people using fully automated processing.

Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll try to put it right.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

Changes to this notice

If I change how I use personal information, I'll update this page and the date at the top.