Data Protection Policy

Our commitment

Learel Ltd is committed to protecting and respecting the privacy of individuals whose personal data we process. This Data Protection Policy sets out how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller

Learel Ltd is the data controller for personal data collected via this website and in connection with our services. Our registered details are:

Company: Learel Ltd
Company number: 16259034
Registered address: The Hall, 38 Greenside Court, New Crofton, Wakefield WF4 1JX
Contact: [email protected]

Principles of data processing

We process personal data in accordance with the following principles:

Lawfulness, fairness, and transparency — we process data lawfully and are transparent about how it is used
Purpose limitation — data is collected for specified, explicit, and legitimate purposes and not processed further in a way incompatible with those purposes
Data minimisation — we only collect data that is adequate, relevant, and limited to what is necessary
Accuracy — we take reasonable steps to ensure personal data is accurate and kept up to date
Storage limitation — we retain data only for as long as necessary for the purposes for which it was collected
Integrity and confidentiality — we process data in a manner that ensures appropriate security and protection against unauthorised or unlawful processing

Data we collect and why

Website contact form

When you submit an enquiry via our website, we collect your name, email address, company name, and the details of your enquiry. This data is used to respond to your enquiry and assess whether an engagement with Learel is appropriate. The legal basis is legitimate interest.

Client data

In the course of providing services, we may process personal data relating to client contacts, including names, email addresses, phone numbers, and professional information. This is processed on the basis of contract performance and legitimate interest.

Supplier and partner data

We hold contact details for suppliers and business partners for the purpose of managing those relationships. This is processed on the basis of legitimate interest.

Data processors

We use the following third-party services that process personal data on our behalf:

HubSpot — CRM and contact management. HubSpot is certified under the EU-US Data Privacy Framework and processes data in accordance with its own privacy policy.
Cloudflare — website hosting and DNS. Cloudflare may process IP addresses and traffic data in accordance with its privacy policy.

All data processors are subject to contractual obligations to protect personal data and process it only in accordance with our instructions.

Data retention

We retain personal data only for as long as necessary:

Enquiry data where no engagement results: deleted within 12 months
Client data: retained for the duration of the engagement and for 6 years thereafter in accordance with statutory requirements
Supplier and partner data: retained for the duration of the relationship and for 2 years thereafter

Data security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include password protection, encrypted communications, and access controls on all systems holding personal data.

Individual rights

Under UK GDPR, individuals have the following rights in relation to their personal data:

The right to access their data
The right to rectification of inaccurate data
The right to erasure
The right to restrict processing
The right to data portability
The right to object to processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers

Some of our data processors (including HubSpot) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses or reliance on adequacy decisions.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page reflects the most recent update.

Contact

For any questions about this policy or our data protection practices, please contact us at [email protected].