Privacy
Policy

Last updated: 19 August 2026 · Loudsmith LTD

1. Who we are

Loudsmith LTD is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17415656, with our registered office at 61 Bridge, Kington, HR5 3DJ, United Kingdom.

You can reach our data contact at hello@loudsmith.online.

This policy explains how we handle personal data when you visit this website, enquire about our services, or work with us as a client or supplier.

2. What data we collect

Data you give us

• Enquiry details — name, email address, company name, indicative budget and the content of your message, submitted through our contact form or by email.
• Client and supplier records — contact details, billing information, contract documentation and correspondence.
• Marketing preferences — where you have subscribed to updates from us.

Data collected automatically

This website does not run analytics software. The only automatic collection is the standard server log kept by our hosting provider, which records:

• Technical data — IP address, browser type and version, device type, operating system and referring URL.
• Request data — which pages were requested and when.

These logs exist so the site can be kept running and secure. We do not use them to build a profile of you or to track you between visits.

We do not knowingly collect special category data (such as health, ethnicity or political opinions), and we ask that you do not send it to us through this website.

3. How we use it, and our lawful bases

Under UK GDPR we must have a lawful basis for each use of personal data. Ours are as follows.

• Responding to your enquiry — necessary for our legitimate interests in dealing with approaches made to our business, or for taking steps at your request prior to entering a contract.
• Delivering our services and administering contracts — necessary for the performance of a contract with you.
• Invoicing, accounting and statutory record-keeping — necessary for compliance with our legal obligations.
• Keeping the website running and secure — necessary for our legitimate interests in maintaining a reliable, protected service.
• Sending marketing emails — consent, or our legitimate interests where you are an existing client and the content relates to similar services. You can opt out at any time.
• Protecting the site against misuse and fraud — necessary for our legitimate interests in maintaining a secure service.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded they are not. You may object to this processing — see section 9.

4. Cookies and tracking

This website does not use cookies. We set no analytics cookies, no advertising cookies and no tracking pixels, so there is nothing here for you to consent to or opt out of. There is no cookie banner because there is nothing to ask you about.

The one third-party request the site makes is to Google Fonts, operated by Google Ireland Limited, which serves the typefaces used in this design. Delivering a font file requires your IP address to be processed by Google. This does not set a cookie, but it is a transfer of technical data to a third party and we would rather say so plainly. Google's handling of that data is covered by its own privacy policy.

If we later add analytics or advertising tools, we will update this policy and put a proper consent mechanism in place before any such cookie is set — not afterwards.

5. Who we share data with

We do not sell personal data, and we do not share it for anyone else's marketing. The list of parties who touch it at all is short:

• Netlify, Inc. — hosts this website and delivers its pages. Netlify keeps standard server logs and, where you submit the contact form, processes and stores that submission on our behalf.
• Google Ireland Limited — serves the fonts used in this design, which requires your IP address to be processed in order to deliver the font files. No cookie is set.
• Our domain and mail provider — correspondence sent to hello@loudsmith.online is stored on the mailbox attached to our own domain. We do not route business email through a third-party mailbox service such as Google Workspace or Microsoft 365.
• Professional advisers — accountants, insurers or solicitors, where there is a genuine need and only to the extent required.
• Regulators or law enforcement — where we are legally required to disclose.

We do not currently use third-party accounting, payment or CRM software. If that changes, this section will be updated before any personal data is passed to a new provider.

Every processor acting on our behalf is bound by a written agreement requiring them to keep data secure and to use it only on our instructions.

6. International transfers

Two of the parties above are based outside the UK. Netlify, Inc. is a United States company, and Google may process font requests on servers outside the UK.

Where personal data leaves the UK, we rely on the safeguards those providers have put in place — in Netlify's case its Data Processing Addendum, which incorporates the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum. You are welcome to ask us for details of the safeguards applying to any particular transfer.

7. How long we keep data

• Unsuccessful enquiries — 24 months from last contact, then deleted from both our mailbox and the form submissions stored by Netlify.
• Client records and contracts — for the duration of the relationship plus six years, to meet legal and limitation-period requirements.
• Financial and tax records — 6 years from the end of the relevant accounting period, as required by HMRC.
• Marketing subscribers — until you unsubscribe, plus a suppression record so we do not contact you again in error.
• Server logs — retained by our hosting provider for a short period, typically no more than 30 days, for security and troubleshooting.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, multi-factor authentication on business systems, and limiting access to those who need it.

No transmission over the internet is completely secure. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours and, where the risk is high, notify you directly.

9. Your rights

Under UK data protection law you have the right to:

• Be informed about how your data is used — which this policy sets out.
• Access a copy of the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data in certain circumstances.
• Restrict processing in certain circumstances.
• Data portability — to receive data you provided in a structured, machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these, email hello@loudsmith.online. We will respond within one month. There is normally no charge, though we may extend the deadline or charge a reasonable fee for manifestly unfounded or excessive requests. We may ask you to verify your identity first.

10. Client data we process on your behalf

When delivering marketing services we may process personal data belonging to our clients' own customers — for example, contacts within a CRM export, or audience data inside an advertising platform.

In those cases the client is the data controller and Loudsmith acts as a data processor. We process such data only on documented instructions, under a data processing agreement, and we do not use it for our own purposes. Individuals wishing to exercise rights over that data should contact the relevant client, though we will assist them in responding.

11. Children

This website and our services are directed at businesses, not children. We do not knowingly collect personal data relating to anyone under 18. If you believe we have done so, contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes to our practices or the law. The date at the top of this page shows when it was last revised. Where changes are significant, we will make that clear on the site or notify you directly.

13. Contact and complaints

For any privacy question, contact:

Loudsmith LTD
61 Bridge
Kington
HR5 3DJ
United Kingdom
hello@loudsmith.online

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.