Privacy

Who we are

Lawnomic Ltd is responsible for the personal information described here. We are registered in England and Wales, company number 17155819, at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This policy covers lawnomic.com, our research, newsletter, contact form and related correspondence. It does not cover a separate product application. Angus McLeod, our Director, is responsible for privacy matters. Contact privacy@lawnomic.com, or write to our registered address.

Information we use and why

We collect information you provide and limited technical information needed to run the website.

The contact form requires your name, email address and message so we can answer you. Organisation and phone are optional. The newsletter requires an email address. Please avoid sending confidential case files or sensitive personal information. We may ask for further information only where needed to handle your enquiry or verify a request.

Newsletter choices

Submitting the newsletter form asks us to send a confirmation email. You subscribe only after following its link and pressing the confirmation button. The link expires after 48 hours. We do not subscribe you simply because you contact us or open an email.

Every newsletter includes an unsubscribe link. You can also reply or email privacy@lawnomic.com. Withdrawal stops future newsletters and does not affect the lawfulness of earlier use. A later subscription requires a fresh email confirmation. Email open and click tracking are off.

Analytics and browser storage

We use Plausible to understand visits. Our analytics setup uses no analytics cookies, identifiers that recognise visitors across days, advertising profiles or tracking across different websites. Plausible briefly processes IP addresses and browser information to produce daily identifiers. It stores event and session records to calculate statistics; its documentation says it does not retain raw IP addresses or full user-agent strings. We do not send form contents, newsletter addresses, URL queries or referrer paths to analytics.

You can switch off analytics for this browser using the analytics choice below. This does not prevent you from reading the website or using its forms. We remember an opt-out in this browser's local storage until you switch analytics back on or clear that storage. Theme and research reading preferences also use local storage. We do not use a consent cookie for analytics.

Cloudflare Turnstile checks whether form activity is likely to be automated. These checks start when you interact with a form and run in the background without a visible widget. They can process technical information including IP address, browser and connection details. We do not enable Turnstile's optional pre-clearance cookie. Cloudflare also uses information as an independent controller to improve Turnstile, as explained in its Turnstile Privacy Addendum. If verification prevents you from using a form, email contact@lawnomic.com.

Providers and international processing

We use these providers for the purposes shown. They receive only the information needed for their role, subject to their contracts and any separate processing explained in their notices.

London hosting does not mean that all processing takes place in the UK. In particular, Resend stores customer data in the United States even though our sending domain uses its Ireland region. Other providers may also process information internationally, including for support and their subprocessors.

Where a transfer requires safeguards, we use applicable adequacy arrangements or contractual safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum where relevant. You can ask us about the safeguards that apply to your information. We may also disclose information where necessary to comply with law, respond to lawful requests or establish or defend legal claims.

How long we keep information

We use automatic deletion for scheduled retention. The periods depend on the record's purpose:

• Ordinary enquiries and replies: 12 months after the last exchange, unless ongoing work, a dispute or a legal requirement justifies longer retention.
• Active newsletter details: while you remain subscribed and the newsletter continues. After withdrawal, we stop marketing and remove the unnecessary active profile.
• Minimal consent evidence: while subscribed and for three years after that consent period ends, to help resolve complaints.
• Minimal opt-out information: for as long as needed to prevent unwanted marketing. We review that need and do not use the record to send marketing.
• Unconfirmed requests: the confirmation expires after 48 hours; unnecessary identifying records are removed in the following daily cleanup. Copies of the confirmation email follow the provider's retention period.
• Routine form-delivery metadata: 90 days. This category does not include the message itself or long-term consent evidence.
• Minimal privacy, rights and security case evidence: normally three years after closure. Underlying correspondence is normally removed 12 months after closure; unnecessary details and attachments are removed sooner.

Provider records and recovery copies have separate periods:

• Our privacy-record store schedules old recovery versions to expire after 35 days. Forms-service volume snapshots are configured for five days.
• Resend states 30 days for emails and logs on our current Free plan, and seven days for backups. Newsletter contact records follow our subscription and deletion rules above.
• Sentry retains new error events for 30 days on our current Developer plan and backups for up to 90 days after creation. Events collected under an earlier plan can keep that plan's period.
• We currently use Plausible's trial. Its trial ends after 30 days; it says unused trial statistics are subsequently deleted after notice, without specifying a fixed deletion deadline. Our intended Starter plan has three-year analytics retention once activated. Its recovery backups are retained for 30 days.
• After we permanently remove correspondence from our managed mailbox, Google allows up to 180 days to complete deletion from its systems, subject to legal obligations.

Scheduled cleanup may take until the next daily run. Restricted backup copies can remain until the provider's recovery period expires. We preserve specific records longer where a justified legal or incident hold applies, and resume deletion when it ends. Restored data must respect earlier withdrawals and deletion decisions.

Your rights and complaints

Depending on the law and circumstances, you can request access, correction, erasure, restriction or a portable copy of your information. You can object to use based on legitimate interests and object to direct marketing at any time. You can withdraw newsletter consent as described above. These rights are subject to legal conditions; we will explain any limit that affects a request.

Email privacy@lawnomic.com. We normally answer rights requests within one month. If the law allows an extension, we will tell you within that month and explain why. We may need proportionate information to confirm your identity. Requests are normally free.

You can also send a privacy complaint to that address. We acknowledge complaints within 30 days, investigate, keep you informed and explain the outcome without undue delay. You can complain directly to the UK Information Commissioner's Office. Where EU GDPR applies, you can also complain to the relevant supervisory authority, including where you live or work. You do not have to complain to us first.

Security and changes

Our security policy explains our approach and how to report a vulnerability. No system can guarantee complete security. We do not use this website to make decisions with legal or similarly significant effects about you.

We date changes to this policy. If a change materially affects how we use your information, we will provide an appropriate notice. A policy update does not itself expand your newsletter consent.