Privacy Policy
This Privacy Policy explains how Laithreach ("we", "us", "our") collects, uses, and protects personal information when you visit laithreach.com or contact us through the website. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. If you have any questions, contact us at claire@laithreach.com.
1. Who we are
The data controller for personal information collected through this website is:
Claire Lauder MCGI
Trading as Laithreach
As data controller, we are responsible for deciding how and why your personal data is processed.
2. What personal data we collect
We may collect the following personal data when you use our website or contact us:
Through the contact form:
Your name
Your email address
Your organisation or company name (if provided)
Your phone number (if provided)
The content of your message
Your CV
Through website analytics (if enabled):
IP address
Browser type and version
Pages visited and time spent on the website
Referring website or search term
Geographic location (country or region level only)
We do not collect sensitive personal data such as health information, financial data, or information about children. We do not use your data for automated decision-making or profiling.
3. How we use your personal data
We use the personal data you provide for the following purposes:
To respond to your enquiry or message submitted through our contact form
To provide information about our services that you have requested
To maintain a record of our correspondence for legitimate business purposes
To improve our website and services using anonymised analytics data
If we introduce email marketing or a newsletter in the future, we will only send marketing communications to you if you have given us your explicit consent to do so. You will always have the option to unsubscribe.
4. Our legal basis for processing your data
Under UK GDPR we must have a lawful basis for processing your personal data. Our legal bases are:
Legitimate interests — responding to enquiries you have submitted and maintaining business records of our correspondence
Consent — if you opt in to receive marketing communications from us in the future
Legal obligation — if we are required to process your data to comply with applicable law
5. How long we keep your data
We retain personal data only for as long as is necessary for the purpose it was collected:
Contact form enquiries — we retain correspondence for up to 3 years from the date of last contact for legitimate business purposes
Client and candidate records — retained for the duration of our relationship and for up to 6 years thereafter in line with standard business record-keeping requirements
Analytics data — anonymised data retained in line with the analytics platform's own retention settings
When data is no longer required we will securely delete or anonymise it.
6. Who we share your data with
We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary to operate our business:
Squarespace Inc — our website hosting and contact form provider, based in the USA. Squarespace is certified under the EU-US Data Privacy Framework and provides appropriate safeguards for international data transfers
Email service providers — for business correspondence
Our accountant and professional advisors — only where legally required or necessary for our business obligations
Analytics providers — if enabled, anonymised data only
All third parties we work with are required to handle your data securely and in compliance with applicable data protection law.
7. International data transfers
Some of our service providers are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place including adequacy decisions, standard contractual clauses, or certification schemes such as the UK-US Data Bridge.
8. Cookies and analytics
Our website may use cookies and similar tracking technologies. Cookies are small text files placed on your device that help us understand how you use our website.
Essential cookies:
Some cookies are necessary for the website to function correctly. These do not require your consent.
Analytics cookies:
If we use analytics tools such as Google Analytics or Squarespace Analytics, these place cookies on your device to help us understand visitor behaviour in aggregate. These are not enabled without your consent where required under UK law.
You can manage or disable cookies through your browser settings at any time. Disabling cookies may affect some website functionality.
9. Your rights under UK GDPR
You have the following rights regarding your personal data:
Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate or incomplete data
Right to erasure — you can ask us to delete your personal data in certain circumstances
Right to restrict processing — you can ask us to limit how we use your data
Right to data portability — you can request your data in a machine-readable format
Right to object — you can object to our processing of your data based on legitimate interests
Right to withdraw consent — where processing is based on your consent, you can withdraw it at any time
To exercise any of these rights, please contact us at claire@laithreach.com. We will respond within one month of receiving your request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
10. How we protect your data
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include using secure, reputable service providers for website hosting and email, and limiting access to personal data to those who need it to do their job.
No method of transmission over the internet is completely secure. If you have any concerns about the security of your data, please contact us at claire@laithreach.com.
11. Links to other websites
Our website may contain links to third party websites including our LinkedIn profile. We are not responsible for the privacy practices of those websites and recommend you read their privacy policies before submitting any personal data to them.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page shows when it was last updated. We encourage you to review this policy periodically.
Where changes are material, we will take reasonable steps to notify you.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Claire Lauder MCGI
Laithreach
Email: claire@laithreach.com
Website: laithreach.com