Privacy notice
Who we are
This website is run by the data controller named below ("we", "us").
Lashed & Secured is a trading name of Paul Johnstone, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.
ICO registration: pending.
Contact: hello@lashedandsecured.com
What we collect and why
- Newsletter: your email address, and optionally your first name and job role. We use these to send the newsletter you asked for. The sign-up form on our pages is provided by beehiiv (beehiiv, Inc., USA), which collects and stores subscriber details and sends the newsletter on our behalf as our processor. When the form loads, beehiiv also receives basic technical data (such as your IP address) needed to display it. Lawful basis: consent (UK GDPR Art. 6(1)(a)) and PECR reg. 22.
- Offers: only if you tick the separate offers box, we'll send occasional offers on our templates and selected partner products. Lawful basis: consent. You can withdraw it at any time.
- Enquiries: if you email us, we use your message and details to reply. Lawful basis: legitimate interests.
- Purchases (when the template shop opens): order and payment details, processed by our shop provider. Lawful basis: contract and legal obligation (tax records).
- Website use: our host may log basic technical data (such as IP address and browser) for security, and we count visits with cookieless analytics (see below). Lawful basis: legitimate interests.
- Analytics cookies (only with your consent): if you click Accept on our cookie banner, Google Analytics 4 records how pages and tools are used. Lawful basis: consent (UK GDPR Art. 6(1)(a)) and PECR reg. 6.
Cookies and analytics
- Cloudflare Web Analytics: counts page views and page load speed without cookies, without fingerprinting and without tracking you across sites. It doesn't store anything on your device, so it doesn't need consent.
- Google Analytics 4 (optional): only loads after you click Accept, or switch on analytics in Settings, on our cookie banner. It sets first-party cookies named
_gaand_ga_<ID>, which last up to 2 years, and tells us things like which pages are visited, roughly which country visitors are in, and what device they use. We don't use Google's advertising features or Google signals, and ad storage stays switched off. Google acts as our processor and may transfer data to the US under the UK-US data bridge. - Your choice: we store your cookie choice in your browser's local storage (
ls_consent) so we don't ask again on every page. We ask again after 12 months. You can change your mind at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, we stop Google Analytics and delete its cookies. - We don't use advertising, social media tracking or marketing cookies.
Who we share it with
We use trusted processors only: beehiiv (newsletter sign-up, subscriber list and sending; beehiiv privacy policy), Google Workspace (email), Google Analytics (only if you consent), Cloudflare (website hosting and cookieless analytics) and Payhip (template shop, when live). Some of these may process data outside the UK under UK-approved safeguards, such as the UK International Data Transfer Addendum or adequacy regulations. We never sell or rent your data.
How long we keep it
We keep newsletter data until you unsubscribe, plus up to 30 days to process it. We keep enquiries for up to 2 years and purchase records for 6 years (HMRC).
Your rights
You can ask for access to your data, or for it to be corrected, deleted, restricted or moved, and you can object to processing or withdraw consent at any time. Every email has an unsubscribe link. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.