Privacy & Cookies Policy

1. Who is responsible for your data

The data controller is Lecmark. Questions and requests: [email protected].

2. What we collect and why

• Contact form: your name, email, phone (optional) and message - so we can reply to your enquiry.
• Email: when you write to an address at our domain, the message and its attachments are stored in our customer system so the team can answer and keep the history of the conversation.

Legal bases: taking steps to enter into a contract with you, and our legitimate interest in responding to enquiries. We do not use your data for automated decision-making, we do not run marketing mailing lists, and we never sell personal data.

When you send a form we also record which of our own pages you arrived on, which site referred you (for example a search engine), and the pages you viewed here before writing. That list is held in your browser for the current tab only, is never read unless you choose to submit a form, and is deleted when you close the tab.

Separately, we count how our website is used, so we can see which pages help people and where they give up. We record which of our pages was shown, the site that sent you here if there was one, and whether the contact form was opened, begun or sent - never what you type into it. We set no cookie and store nothing in your browser to do this, and we do not record your IP address: it is combined with your browser type and a secret that changes every day into a code that cannot be turned back into either. These counts are kept for thirteen months and are never shared.

The chat window on our website offers two ways to talk to us. If you choose Chat, an AI assistant answers: to produce the answers, your messages are sent to OpenRouter, Inc. and to the AI model provider, Anthropic PBC, both in the United States. If you choose Contact, a member of our team reads and answers your messages. Either way we keep the conversation, so our team can read what you asked and check what was answered. We do not ask for or keep your name, email or phone number unless you give them. Conversations that did not become an enquiry are deleted after thirteen months. Please do not type anything sensitive into it.

3. Where your data goes

• Form submissions are delivered to our team as instant notifications (via the Telegram Bot API and email through Twilio SendGrid) and stored in our customer system on a server hosted in the EU.
• When you send a form or write in the chat, we look up the approximate location of the connection you used - country, town and internet provider - through the ip-api.com service, which receives the connecting IP address and nothing else about you.
• Email to and from our addresses passes through Twilio SendGrid, which delivers it to and from our server.

4. How long we keep it

Enquiries: up to 24 months after our last contact. Contract and transaction records: 6 years, as required for legal and tax purposes.

5. Cookies

We set no advertising or analytics cookies. The site is served through Cloudflare, which may set strictly necessary security cookies to protect the site; these do not track you across other sites.

6. Your rights

Under UK GDPR you may request access to, correction or deletion of your data, object to or restrict processing, and request portability. Write to [email protected] and we will respond within one month. You may also complain to the Information Commissioner's Office (ico.org.uk).