How we collect, use, and protect your personal data — in plain English, as required by UK GDPR.
lm created it is a web design and digital marketing service operating in the UK. For the purposes of UK GDPR, we are the data controller for personal data collected through this website.
Contact: lm.created.it@gmail.com
If you have any questions about how we handle your data, you can reach us at the email above. We will respond within 30 days.
We only collect personal data that is necessary to provide our services. Here's a breakdown of what we collect, how, and why:
| What | How | Why (Legal Basis) |
|---|---|---|
| Name, email, phone number, business name, enquiry details | Contact / quote form on this website | Legitimate interests — to respond to your enquiry |
| Name, email address, time zone, booking preferences | Calendly scheduling link (when booking a call) | Legitimate interests — to arrange a consultation call |
| Payment details (card number, billing address) | Stripe payment processor (we never see or store your card details) | Contract performance — to process payment for services |
| IP address, browser type, pages visited | Vercel hosting (basic server logs) | Legitimate interests — site security and performance |
To operate this website and deliver our services, we use the following third-party platforms. Each has its own privacy policy governing the data they process on our behalf:
All third-party providers are required to process your data in compliance with UK GDPR.
| Type of data | Retention period |
|---|---|
| Enquiry data (contact form, emails) | 12 months from last contact, then deleted |
| Client project data (briefs, correspondence) | 7 years (UK legal / tax requirement) |
| Payment records | 7 years (HMRC requirement) — held by Stripe |
| Calendly booking records | Managed by Calendly per their policy |
Under UK data protection law, you have the following rights:
To exercise any of these rights, contact us at lm.created.it@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
We take reasonable technical and organisational measures to protect your personal data, including:
No method of transmission over the internet is 100% secure. If you have security concerns, please contact us directly.
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of this website after any changes constitutes acceptance of the updated policy.
Significant changes — such as new types of data collection — will be communicated via a notice on the homepage.
For any privacy-related questions or to exercise your data rights: