Legal: Privacy notice
Last updated 8 October 2026
Who we are
Leahy+King Limited (“we”, “us”, “our”) is responsible for the personal data we collect through leahyking.com (the “site”) and in the course of our business. This makes us the “controller” of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are a private limited company registered in England and Wales (company number 11813297). Our registered office is Highroyd Cottage, Northgate, Holmfirth, HD9 6QL. We are registered with the Information Commissioner’s Office (ICO) under registration number [ICO REGISTRATION NUMBER – PENDING].
We are not required to appoint a Data Protection Officer. If you have any questions about this notice or how we use your personal data, contact us using the details in section 18.
The personal data we collect
When you contact us or enquire about our services (through the contact form, by email or by phone), we collect your name, the name of your firm, your email address, your phone number if you’d like a call back, your preferred call time, the kind of help you’re interested in, how you heard about us, and anything you tell us in your message.
When you book a call through Calendly, we receive your name, email address, the time you choose and any answers you give to the booking questions.
When you sign up for our newsletter or updates, we collect your email address and the date you signed up. Our newsletter provider also tells us whether our emails are opened and which links are clicked [confirm this is switched on in EmailOctopus].
When you become a client, we hold your contact details, information about your firm and its marketing, our correspondence, and the details we need for invoicing and payment.
When you use the site, we and our analytics and advertising partners collect information about your visit through cookies and similar technologies, if you agree to them. This can include your IP address, approximate location, device and browser type, the pages you visit, how long you stay, the website or advert that referred you, and identifiers set by cookies. Our Cookie policy explains this in detail.
Your firm’s information may include business-sensitive details, such as financial or sales performance. We treat this as confidential. We do not ask for special category data (such as information about health, ethnicity or religious beliefs) – please do not include it in messages to us.
How we use your data and our lawful basis
Data protection law says we must have a lawful basis for each way we use your personal data. The table below sets these out.
| What we do | The data we use | Our lawful basis |
|---|---|---|
| Reply to enquiries, arrange calls and discuss how we could help | Enquiry and booking details | Our legitimate interests in responding to enquiries and running our business, and taking steps at your request before entering into a contract |
| Check whether we can work with you (including basic due diligence) | Enquiry details and publicly available information about your firm | Our legitimate interests in choosing who we work with |
| Provide our services to clients | Client contact details, business information and correspondence | Performing our contract with you, or our legitimate interests where you are a member of a client’s team rather than the contracting party |
| Invoice, keep accounts and meet our legal duties | Client contact and billing details | Legal obligation |
| Send our newsletter and updates | Email address, sign-up date and email engagement | Your consent |
| Measure how the site is used (Statistics cookies) | Site usage data | Your consent |
| Measure and deliver our advertising (Marketing cookies and pixels) | Site usage data and cookie identifiers | Your consent |
| Estimate advertising results in aggregate when you have refused cookies (Google Consent Mode) | Limited technical information, such as browser type and approximate country | Our legitimate interests in understanding whether our advertising works, in a way that does not identify you |
| Show relevant adverts to people who already know us, or exclude them (advertising audiences – see section 5) | Email address and phone number, converted into an unreadable code before upload | Our legitimate interests in marketing our services to relevant businesses [or your consent – to confirm before launch] |
| Record your cookie choices | Consent ID, date and choices | Our legitimate interests in showing that we have your consent |
| Keep the site secure and working | IP address and technical data in server logs | Our legitimate interests in running a secure website |
Where we rely on legitimate interests, we have weighed our interests against yours and are satisfied that the use is fair and expected. You have the right to object (see section 10).
Website analytics and advertising
With your consent, we use the following services to understand how people use the site and to measure and deliver our advertising:
- Google Analytics – to see how visitors find and use the site, so we can improve it.
- Google Ads, Meta (Facebook and Instagram), LinkedIn and Reddit – to measure whether our adverts lead to enquiries, and to show adverts to people who have visited the site (often called “retargeting” or “remarketing”).
- Cookiebot – to manage your cookie choices.
We use Google Tag Manager to manage these services, and Google Consent Mode so that Google’s services respect your choices. Our Cookie policy lists the cookies each service uses, explains how Consent Mode works, and tells you how to change your choices at any time.
Advertising audiences
We may upload contact details that people have given us – for example, the email addresses of clients, newsletter subscribers or people who have enquired – to advertising platforms, including Google, Meta, LinkedIn and Reddit.
Before upload, the details are converted into an unreadable code (“hashed”). Each platform compares the code with its own users’ details. Where there is a match, we can show those people relevant adverts, or exclude them from adverts they don’t need to see. We can also ask the platform to find other users with similar characteristics. The platforms delete details that don’t match, and they don’t tell us who matched.
The platforms and we are joint controllers for this matching. Each platform’s privacy policy explains how it uses data:
You can object at any time. Email john.king@leahyking.com and we will stop including your details in future uploads and remove them from any audiences we hold.
Our newsletter and marketing emails
We only send marketing emails, including our newsletter, where you have asked to receive them, or where the law otherwise allows it (for example, to existing clients about similar services, with a clear way to opt out each time).
Every email includes an unsubscribe link. You can also ask us to stop at any time by emailing john.king@leahyking.com. When you unsubscribe, we keep your email address on a “do not contact” list so we don’t email you again by mistake.
Who we share your data with
We do not sell your personal data. We share it only with:
- Suppliers who process it on our behalf (our “processors”), under contracts that require them to keep it secure and use it only as we instruct. These are listed below.
- Analytics and advertising partners (Google, Meta, LinkedIn and Reddit), as described in sections 4 and 5. They also use the data for their own purposes, as set out in their privacy policies.
- Professional advisers, such as our accountants, lawyers and insurers, where needed.
- Authorities and regulators, such as HMRC, where the law requires it.
- A buyer or successor, if our business is sold or reorganised, under the same protections described in this notice.
The suppliers who process personal data for us are:
- Netlify – hosts the site and receives contact form submissions
- Google Workspace – our email, documents and calendar
- Calendly – call booking
- EmailOctopus – our newsletter
- Cookiebot (Usercentrics) – cookie consent management
Transfers outside the UK
Some of our suppliers and partners are based outside the UK, or store data outside the UK, including in the United States and the European Economic Area. Where personal data is transferred outside the UK, we make sure it is protected by:
- UK adequacy regulations, which recognise that a country (such as those in the European Economic Area) protects personal data to the UK’s standard. For certified US organisations, this includes the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”); or
- contracts approved for UK transfers, such as the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
Contact us if you would like more information about these safeguards.
How long we keep your data
We keep personal data only for as long as we need it for the purpose we collected it for, or for as long as the law requires.
| Data | How long we keep it |
|---|---|
| Enquiries and call bookings that don’t lead to work | 18 months from our last contact with you, then deleted |
| Client records and correspondence | Six years after our work together ends, so we can deal with any questions or claims [confirm] |
| Invoices and accounting records | Six years from the end of the financial year they relate to, to meet tax and company law requirements |
| Newsletter subscribers | Until you unsubscribe; we then keep your email address on our “do not contact” list |
| Advertising audience lists | We refresh lists at least every [6] months and remove anyone who has objected [confirm] |
| Cookie data | As set out in our Cookie policy |
Where the law requires us to keep data for longer, or we need it to establish, bring or defend a legal claim, we may keep it for longer.
Your rights
You have the following rights over your personal data. Some only apply in certain circumstances.
- Access – to ask for a copy of the personal data we hold about you.
- Rectification – to ask us to correct data that is wrong or incomplete.
- Erasure – to ask us to delete your data, for example where we no longer need it or you have withdrawn your consent.
- Restriction – to ask us to limit how we use your data, for example while we check whether it is accurate.
- Objection – to object to our use of your data where we rely on legitimate interests. You can object to direct marketing (including advertising audiences) at any time, and we will stop.
- Portability – to receive data you gave us in a structured, commonly used format, or have it sent to another organisation, where we rely on consent or a contract.
- Withdrawing consent – where we rely on your consent, you can withdraw it at any time. This doesn’t affect anything we did before you withdrew it.
- Automated decisions – not to be subject to decisions made solely by automated means that have legal or similarly significant effects. We do not make decisions like this.
To use any of these rights, email john.king@leahyking.com. There is usually no charge. If we need to confirm your identity, we will ask only for what is reasonable. We will respond within one month, or tell you within that month if we need longer (up to two further months) because your request is complex.
Complaints
If you are unhappy with how we have used your personal data, please tell us first by emailing john.king@leahyking.com. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Complaining to the ICO does not affect any other legal remedies you may have.
Keeping your data secure
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include:
- using reputable suppliers that meet UK data protection standards, under written data processing terms
- encrypting data in transit (the site uses HTTPS) and relying on our suppliers’ encryption of stored data
- protecting our accounts with strong passwords and multi-factor authentication
- encrypting and password-protecting our devices, and keeping software up to date
- limiting access to personal data to the people who need it [confirm these measures match your set-up]
No method of sending data over the internet is completely secure, but we work hard to protect the data you share with us.
Personal data breaches
A personal data breach is a security incident that leads to personal data being lost, destroyed, changed or disclosed without authorisation, by accident or otherwise.
If a breach happens, we will assess the risk to the people affected without delay. If it is likely to put your rights and freedoms at risk, we will report it to the ICO within 72 hours of becoming aware of it. If the risk to you is high, we will also tell you directly, in plain language, without undue delay.
Cookies
The site uses cookies and similar technologies. Necessary cookies are always on; we only use Statistics and Marketing cookies if you agree. Our Cookie policy explains which cookies we use, why, and how to change your choices. You can change your choices at any time by selecting Cookie settings in the footer of any page.
Links to other sites
The site links to other websites, including Calendly (to book a call) and LinkedIn. Those sites have their own privacy policies, and we are not responsible for how they use your data. Please read their policies when you visit them.
Children
Our site and services are for businesses. They are not aimed at children, and we do not knowingly collect personal data from anyone under 18.
Changes to this notice
We review this notice regularly and will update it when the way we use personal data, or the law, changes. The date at the top shows when it was last updated. If we make significant changes, we will make this clear on the site and, where the changes affect anything based on your consent, ask for your consent again.
Contact us and alternative formats
If you have any questions about this notice, would like to use your rights, or would like this notice in another format, please contact us:
- Email: john.king@leahyking.com
- Phone: 07926 560093
- Post: Leahy+King Limited, Highroyd Cottage, Northgate, Holmfirth, HD9 6QL