Privacy Notice
Last updated: 20 July 2026
This notice explains how LAYDER LTD ("Layder", "we", "us") processes personal data in connection with this website, layder.co.uk, and enquiries you send to us. We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who we are (data controller)
LAYDER LTD, a limited company registered in England, company number 14123371.
Registered office: 20 Market Place, Kingston upon Thames, Surrey, KT1 1JP, England.
Contact for all data-protection matters: hello@layder.co.uk.
2. What personal data we collect
This website has no user accounts, no contact forms, no analytics and sets no cookies. The personal data we may process is limited to:
- Enquiry data — if you email us: your name, email address, organisation, and whatever you choose to include in your message.
- Business-relationship data — if you become a client or supplier: contact details of your representatives, contract and invoicing details, and correspondence.
- Technical server logs — our hosting infrastructure may record standard web-server logs (IP address, user-agent, requested page, timestamp) for security and operational purposes.
3. Purposes and lawful bases
| Purpose | Data | Lawful basis (Art. 6 UK GDPR) |
|---|---|---|
| Responding to your enquiry | Enquiry data | Legitimate interests (Art. 6(1)(f)) — responding to correspondence you initiated; or steps prior to entering a contract (Art. 6(1)(b)) |
| Delivering services, contracting and invoicing | Business-relationship data | Performance of a contract (Art. 6(1)(b)) |
| Accounting, tax and statutory record-keeping | Business-relationship data | Legal obligation (Art. 6(1)(c)) — e.g. Companies Act 2006, tax legislation |
| Website security and abuse prevention | Server logs | Legitimate interests (Art. 6(1)(f)) — keeping our services secure |
We do not use your data for marketing without your consent, we do not sell personal data, and we do not carry out automated decision-making producing legal or similarly significant effects.
4. Who we share data with
- IT service providers — website hosting and business email providers acting as our processors.
- Professional advisers — our accountants and, where necessary, legal advisers, under confidentiality obligations.
- Authorities — where disclosure is required by law (e.g. HMRC, Companies House).
5. International transfers
Where a service provider processes data outside the UK, we rely on a UK adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep data
- Enquiries that do not lead to an engagement: up to 24 months from our last exchange.
- Contractual, accounting and invoicing records: at least 6 years after the end of the relevant financial year, as required by UK company and tax law.
- Server logs: short rolling retention set by our hosting provider, typically no more than 90 days.
7. Your rights
Under UK GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. To exercise any right, email hello@layder.co.uk. We respond within one month.
You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO), ico.org.uk, helpline 0303 123 1113. We would appreciate the chance to address your concern first.
8. Cookies
This website sets no cookies and uses no tracking or analytics technologies. See our Cookie Policy.
9. Children
Our website and services are directed at businesses and are not intended for children.
10. Changes to this notice
We may update this notice from time to time. The "Last updated" date above reflects the current version; material changes will be highlighted on this page.