Privacy Policy

Last updated: 19 October 2026

This policy explains how Lawton’s Sustainability Ltd (“we”, “us”) collects and uses personal information when you visit www.lawtonssustainability.co.uk, contact us or book a meeting with us.

Who we are

Lawton’s Sustainability Ltd is a company registered in England and Wales (company number 16287538). We are the controller of the personal information described in this policy. You can contact us about this policy or your information at tom@lawtonssustainability.co.uk.

What we collect

Enquiries: when you use our contact form or email us, we collect your name, company, email address, phone number (if given), the service you are interested in and your message.
Meeting bookings: when you book a call, our booking provider collects your name, email address, the time you choose and any notes you add.
Client work: if you become a client, we hold the contact details and business information needed to deliver and invoice our services.
Website use: our hosting provider records basic technical information (such as IP address, browser type and pages requested) to keep the site secure and working. With your consent, we may also use analytics cookies. See our Cookies page.

How and why we use it

To reply to your enquiry and arrange meetings. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
To deliver services and manage our relationship with clients. Our lawful basis is performance of a contract.
To meet legal, tax and accounting obligations. Our lawful basis is legal obligation.
To keep the website secure and understand how it is used. Our lawful basis is legitimate interests, or your consent for analytics cookies.

We do not sell your information, and we do not use it for automated decision-making. We will only send you marketing emails if you have asked to receive them, and you can opt out at any time.

Who we share it with

We use a small number of trusted providers to run the website and our business. They only process your information on our instructions:

Website hosting (Vercel)
Email delivery for the contact form (Resend)
Meeting booking (our calendar booking provider)
Email, file storage and accounting tools used to run the business

We may also share information with professional advisers (such as our accountant) or where required by law.

International transfers

Some of our providers are based in, or store data in, countries outside the UK, including the United States. Where this happens, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.

How long we keep it

Enquiries that do not lead to work: up to 2 years from our last contact.
Client records: for as long as we work together, then up to 7 years to meet legal and accounting requirements.
Website logs: for a short period set by our hosting provider.

Your rights

Under UK data protection law you have the right to:

access the personal information we hold about you
ask us to correct or delete it
object to or restrict how we use it
ask for a copy in a portable format
withdraw consent at any time, where we rely on consent

To exercise any of these rights, email tom@lawtonssustainability.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.