Effective Date: 14 October 2025
Website: https://www.tomlyes.com
Data Controller: Tom Lyes Consultancy Ltd 16771784
Registered Address: Shiftworks,Royal House, 14 Upper Northgate Street. Chester. CH1 4EE. United Kingdom
Contact: tom@tomlyes.com
1. Introduction
Tom Lyes Consultancy Ltd (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains how we collect, use, store, and protect your personal information when you visit our website, complete a contact form, subscribe to our newsletter, or otherwise interact with us online.
2. What Information We Collect
We may collect and process the following types of personal information:
Contact Information:
Name, email address, phone number, and any other details you provide via contact forms or newsletter signups.
Newsletter Subscriptions:
Email address and communication preferences.
Website Usage Data:
Information about how you use and interact with our website, collected via cookies and analytics tools.
Technical Data:
IP address, browser type, operating system, referral source, and other metadata used for security and analytics purposes.
3. How We Use Your Information
We use your personal information to:
- Respond to enquiries and communication
- Provide updates or information you have requested
- Send newsletters or marketing emails (only if you have opted in)
- Improve website functionality, performance, and user experience
- Monitor and analyse usage, traffic, and security
- We never sell or rent your personal data.
4. Legal Bases for Processing
We rely on the following lawful bases under UK GDPR:
- Consent – for newsletters and cookies (where required)
- Legitimate Interests – for handling enquiries, analytics, and website operations
- Legal Obligation – where processing is necessary to comply with the law
You can withdraw consent at any time by contacting us or clicking “unsubscribe” in our emails.
5. Data Sharing and Third Parties
We may share your personal information with trusted third-party service providers that help us operate our website and deliver services, such as:
- Email marketing and newsletter platforms
- Website hosting and maintenance providers
- Analytics providers (e.g. Google)
All third parties are contractually required to handle your data securely and in compliance with data protection laws.
International Transfers
Some of our service providers may be based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office (ICO).
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and understand how visitors interact with our website.
What Are Cookies?
Cookies are small text files placed on your device that help websites function properly and gather anonymous usage data.
Types of Cookies We Use:
- Strictly Necessary Cookies: Required for core site functions.
- Analytical/Performance Cookies: Help us understand visitor behaviour and improve website usability.
- Functionality Cookies: Remember your preferences when you return.
Targeting Cookies:Record visits and browsing patterns to make content and advertising more relevant.
Google Analytics: We use Google Analytics to track anonymised website traffic and performance data such as pages visited and referring websites.
You can opt out of Google Analytics tracking here: https://tools.google.com/dlpage/gaoptout
Google Fonts: Our site uses Google Fonts, which may require your browser to request font files from Google servers, potentially logging your IP address.
Managing Cookies: You can manage or disable cookies at any time through your browser settings.
Please note that some website features may not function correctly without cookies.
For more information, please refer to our Cookie Policy or use our cookie preference banner.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Contact form submissions: up to 12 months
- Newsletter data: until you unsubscribe or request deletion
- Analytics data: anonymised and retained for trend analysis
When data is no longer required, it is securely deleted or anonymised.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete information
- Request deletion of your personal data (where applicable)
- Object to or restrict processing
- Withdraw consent (for marketing or analytics)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
If you wish to exercise any of these rights, please contact us at tom@tomlyes.com
If you are unhappy with how we handle your data, you can lodge a complaint with the ICO: https://ico.org.uk/concerns
9. How We Protect Your Data
We implement appropriate technical and organisational security measures, including:
- SSL encryption for all data transmissions
- Secure hosting environments
- Access controls and password protection
- Regular monitoring for security vulnerabilities
These measures help ensure your personal data remains safe and confidential.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on our website with the updated effective date.
Tom Lyes Consultancy Ltd
For any questions about this policy or your personal data, please contact: tom@tomlyes.com