Privacy Policy

Lauson Consultancy Privacy Policy
Last updated: September 2025

Lauson Consultancy (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, and protect your information in compliance with:

• UK GDPR and Data Protection Act 2018
• EU GDPR (if applicable)
• US privacy laws including CCPA/CPRA (California Consumer Privacy Act), and applicable state-level laws.

What Data We Collect

• Contact Data: Name, email, phone number, company name, job title.
• Business Information: Details you provide about your company during enquiries or consultancy engagements.
• Marketing & Outreach Data: Publicly available business contact details (e.g. LinkedIn, company websites) and data processed via AI-driven outreach tools.
• Website & Technical Data: IP address, browser type, cookies, analytics.
• Communication Records: Emails, calls, meeting notes.

How We Use Your Data

We use your personal data for the following purposes:

1. Service Delivery: Responding to enquiries, providing consultancy, vendor recommendations.
2. Business Development: Conducting targeted outreach using AI-enabled platforms.
3. Marketing: Sending you relevant updates or information, only where lawful (consent or legitimate interest).
4. Compliance & Security: Meeting legal obligations, preventing fraud, and safeguarding data.
5. Analytics: Improving our website and communications.

Lawful Basis for Processing (GDPR)

• Consent – where you opt into marketing or cookie tracking.
• Legitimate Interest – for B2B outreach, client communications, and service improvements.
• Contract – processing necessary to perform consultancy services.
• Legal Obligation – where required by regulators or law enforcement.

Sharing Your Data

We do not sell your data. We may share it with:

• Technology & AI Vendors (e.g. CRM providers, analytics tools).
• Trusted Partners/Vendors where needed to deliver a service.
• Regulatory or Legal Authorities if required by law.
      All third parties are required to safeguard your data under relevant legal frameworks.

International Transfers

If we transfer data outside the UK/EU, we use appropriate safeguards (e.g. Standard Contractual Clauses, adequacy decisions).

Data Retention

• Lead/contact data: kept for up to 3 years unless you request deletion.
• Client engagement data: retained for 7 years to comply with legal and financial obligations.
• Cookies/analytics data: retained in line with our Cookie Policy.

Your Rights (GDPR / CCPA)

You have the right to:

• Access, correct, or delete your data.
• Object to or restrict processing.
• Withdraw consent for marketing.
• Request data portability.
• Under CCPA: request disclosure of what data we hold and opt out of sale (we do not sell data).

Requests can be made at: mike@lausonconsultancy.com 

Security

We use encryption, access controls, and two-factor authentication across systems and AI tools to safeguard personal data.