Privacy Policy

We may collect personal information that you provide directly when you:

• Complete a contact form
• Send us an email
• Arrange a call or meeting
• Request advice, a concept, quotation or proposal
• Become a client
• Communicate with us during a project
• Interact with our business through social media

This information may include:

• Your name
• Email address
• Telephone number
• Job title
• Company or organisation
• Website address
• Project requirements
• Business information
• Correspondence and feedback
• Billing and transaction information
• Files, content or account information supplied for a project

Please avoid sending passwords or highly sensitive information through an ordinary contact form or unsecured email unless specifically requested.

When you visit our website, certain technical and usage information may be collected automatically.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location
• Referring website or source
• Pages viewed
• Time spent on the website
• Website interactions
• Error and performance information

This information may be collected using server logs, cookies, analytics tools and similar technologies.

We may use personal information to:

• Respond to enquiries
• Understand your business and project requirements
• Provide advice or recommendations
• Prepare concepts, quotations and proposals
• Arrange calls and meetings
• Deliver contracted services
• Manage projects and client relationships
• Process payments and maintain financial records
• Provide website support and maintenance
• Improve our website and services
• Measure website usage and performance
• Protect our systems against fraud, misuse and security threats
• Contact relevant businesses about our services where legally permitted
• Comply with legal, regulatory, accounting and tax obligations
• Establish, exercise or defend legal claims

We do not sell personal information.

UK data-protection law requires us to have a lawful basis for using personal information.

Depending on the circumstances, we may rely on the following bases.

‍

Contract

We may process your information where necessary to take steps at your request before entering into a contract or to fulfil a contract with you.

This may include preparing a proposal, managing a project, communicating with you and delivering agreed services.

‍

Legitimate Interest

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.

These interests may include:

• Responding to business enquiries
• Operating and improving our business
• Managing client and supplier relationships
• Maintaining appropriate records
• Protecting our website, accounts and systems
• Understanding website performance
• Identifying relevant business opportunities
• Sending proportionate business-to-business communications
• Establishing or defending legal claims

Where required, we consider the nature of the information, your reasonable expectations and the possible effect of the processing on you.

‍

Consent

We may rely on your consent for certain optional cookies, marketing communications or other activities where consent is appropriate.

You may withdraw consent at any time. Withdrawal will not affect processing that occurred lawfully before consent was withdrawn.

‍

Legal Obligation

We may process information where necessary to comply with legal, regulatory, accounting or tax requirements.

‍

When you submit an enquiry, we use the information provided to understand and respond to your request.

Submitting an enquiry does not create a contractual relationship or require you to purchase services.

Enquiry information may be stored within our website platform, email provider, cloud-storage service or other systems used to manage communications.

When you become a client, we may retain:

• Project briefs and requirements
• Proposals and contracts
• Emails and meeting notes
• Supplied website content and files
• Design feedback and approvals
• Invoices and payment records
• Website and platform details
• Support and maintenance records

We use this information to provide services, maintain accurate records and manage our relationship with you.

Where you provide personal information relating to another person, you are responsible for ensuring you have an appropriate reason and authority to share it.

Lazaro London may contact businesses where we reasonably believe our services are relevant.

For this purpose, we may use professional contact information that:

• Has been made publicly available by a business
• Appears on a company website
• Is available through a professional platform or business directory
• Was supplied during an earlier business interaction
• Was obtained from another legitimate business source

We aim to make these communications relevant, targeted and proportionate.

You may object to receiving future communications at any time by replying to the relevant message or emailing hello@lazarolondon.com.

We may retain limited information in a suppression record so that we can respect your request not to be contacted again.

‍

Our website may use cookies and similar technologies.

These technologies may help us:

• Provide essential website functions
• Remember your privacy choices
• Understand how visitors use the website
• Measure traffic and website performance
• Diagnose technical issues
• Improve website content and usability

Some technologies are necessary for the website to operate.

Where required by law, optional analytics, advertising or similar technologies will not be activated until you have made a choice through the website’s cookie controls.

You can also control or delete cookies through your browser settings. Restricting cookies may affect the operation of some website features.

We may share personal information with trusted organisations where reasonably necessary to operate our business or provide services.

These may include:

• Website hosting and development platforms
• Email and communication providers
• Cloud-storage providers
• Analytics providers
• Scheduling and video-meeting services
• Payment processors
• Accounting and bookkeeping providers
• Project-management systems
• Contractors assisting with an agreed project
• Professional advisers
• Regulators, courts or public authorities where legally required

Some providers act as processors on our behalf. Others may act as independent controllers under their own privacy terms.

‍

We only share information that is reasonably necessary for the relevant purpose.

Some service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard applies.

This may include:

• UK adequacy regulations
• Approved contractual safeguards
• The UK International Data Transfer Agreement
• The UK Addendum to approved contractual clauses
• Another legally recognised transfer mechanism

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Our typical retention periods are:

• General enquiries that do not become projects: up to 24 months after the latest meaningful communication
• Client and project records: for the duration of the relationship and ordinarily up to six years afterwards
• Contracts, invoices and financial records: for the period required under applicable tax and accounting rules
• Unsuccessful proposal records: ordinarily up to 24 months
• Website analytics information: according to the settings of the relevant analytics platform
• Marketing preferences and suppression records: for as long as reasonably necessary to respect your communication choice

We may retain information for longer where necessary to:

• Resolve a dispute
• Establish or defend a legal claim
• Prevent fraud or misuse
• Comply with a legal obligation
• Enforce an agreement

Information that is no longer required will be deleted, anonymised or securely disposed of where reasonably practical.

We use reasonable technical and organisational measures intended to protect personal information against loss, misuse, alteration, unauthorised access or disclosure.

These measures may include:

• Password-protected accounts
• Multi-factor authentication where available
• Access controls
• Secure website connections
• Reputable software and hosting providers
• Device security
• Restricted access to client information
• Secure sharing methods where appropriate

No internet transmission or storage system can be guaranteed to be completely secure.

You should avoid sending highly sensitive information through unsecured forms or ordinary email.

Depending on the circumstances and the lawful basis used, you may have the right to:

• Request access to your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to erase your information
• Ask us to restrict the use of your information
• Object to certain uses of your information
• Request the transfer of information you provided
• Withdraw consent where processing relies on consent
• Complain about how your information has been handled

These rights are not absolute and may be subject to legal conditions or exemptions.

You will not ordinarily be required to pay a fee to exercise your rights.

We may need to confirm your identity before responding to a request.

You have the right to object to the use of your personal information for direct marketing at any time.

You may also object where processing is based on legitimate interests. We will consider your objection and stop the relevant processing unless we have a compelling lawful reason to continue or the information is needed for legal claims.

To object, email hello@lazarolondon.com.

Please contact us first if you have concerns about how your personal information has been handled.

We will make reasonable efforts to investigate and resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office, the UK regulator responsible for data protection.

Our website may include links to websites operated by other organisations.

We do not control and are not responsible for the privacy, security or content of third-party websites.

You should review the relevant privacy information before providing personal information to another website or service.

Our website and services are intended for businesses and are not directed at children.

We do not knowingly use the website to collect personal information from children.

Please contact us if you believe a child has provided personal information through our website.

We may update this Privacy Policy when our business, website, service providers or legal obligations change.

The latest version will be published on this page and identified by the “last updated” date.

For questions about this Privacy Policy, to exercise a data-protection right or to object to direct marketing, contact:

Lazaro London
Email: hello@lazarolondon.com
Website: lazarolondon.com/contact