Privacy policy and cookie information

Website visitors:

Every request to our website passes through Cloudflare, which handles your IP address and browser details to deliver and protect the site. Our legal basis is our legitimate interest in running a secure website.

If you allow statistics cookies, PostHog also records your IP address, your device and browser, the pages you visit, what you click, the address you came from and any campaign tags in it, how quickly pages load and, on articles, how far you read. We use this to see which pages are useful and to improve the site. It is not linked to your name or to any account. Our legal basis is your consent, and none of this is collected without it.

Clients and people who contact us:

We hold business contact details and correspondence in order to answer enquiries, deliver our services and bill for them. Our legal bases are our contract with you and our legitimate interest in responding to enquiries and running our business.

People who submit a CV:

The CV form collects your email address and your CV, which we use to consider you for opportunities with us. A Cloudflare Turnstile check protects the form from automated abuse and handles your IP address and browser details. Our legal basis is our legitimate interest in finding people for our work.

Users of our signed-in tools:

Accounts hold your name, email address and sign-in details, including your authenticator. We use them to give you access to the tools you are entitled to. Our legal bases are our contract with you or your employer and our legitimate interest in keeping the tools secure.

Contractors using timesheets:

We hold your name, email address, the days you submit, your invoices and your bank details in order to process your timesheets and pay you. Uploaded invoices are checked automatically, and our team reviews and approves them. Our legal bases are our contract with you and our legal duty to keep financial records.

Data Storage:

Personal information is stored on secure servers. Accounts, timesheets, invoices and CVs are held in Amazon Web Services' London region, and website analytics in PostHog's EU cloud. Some of our providers operate outside the UK, including in the United States. For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.

Data Hosting Partners: We partner with reputable data hosting providers committed to using state-of-the-art security measures. These partners are selected based on their adherence to stringent data protection standards.

Data Protection Measures:

• Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.
• Access Control: Access to personal information is strictly limited to authorised personnel who have a legitimate business need to access the data. We enforce strict access controls and regularly review permissions.

Retention:

We keep personal information only for as long as we need it for the purposes in this policy, then delete it, unless the law requires us to keep it longer, as it does for accounting records.

Sharing Personal Information:

Third-Party Service Providers: We may share your information with third-party service providers who perform services on our behalf. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential. These partners are prohibited from using your personal information for any purpose other than to provide these services to Lamp Group LLP, and they are required to maintain the confidentiality of your information.

Third-Party Services:

Data Processing Agreements:

When we share your data with third-party service providers, we do so under the protection of Data Processing Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data protection laws. These agreements mandate that third parties implement adequate technical and organisational measures to ensure the security of your data.

Transparency and Control:

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how we share and disclose personal information, please reach out to us at admin@lamp-group.com.

Your Rights:

• Right of Access (UK GDPR and EU GDPR Article 15): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
• Right to Rectification (UK GDPR and EU GDPR Article 16): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
• Right to Erasure ('Right to be Forgotten') (UK GDPR and EU GDPR Article 17): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• Right to Restriction of Processing (UK GDPR and EU GDPR Article 18): You have the right to request that we restrict the processing of your personal information under certain conditions.
• Right to Data Portability (UK GDPR and EU GDPR Article 20): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• Right to Object (UK GDPR and EU GDPR Article 21): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
• Right to Withdraw Consent (UK GDPR and EU GDPR Article 7(3)): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint (UK GDPR and EU GDPR Article 77; Data Protection Act 2018 section 165): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws. In the UK, this is the Information Commissioner's Office (ICO).

Exercising Your Rights:

To exercise any of these rights, please contact us at admin@lamp-group.com. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

UK Supervisory Authority: Information Commissioner's Office (ICO), ico.org.uk

Understanding Cookies and Tracking Technologies:

Cookies are small data files placed on your device that enable us to remember your preferences and collect information about your website usage. Browser storage works in a similar way: PostHog uses it alongside its cookie, under the same consent, and your browser's session storage, which clears when you close the tab, lets the home page animation play once and keeps your work in training exercises.

How We Use These Technologies:

• Essential Cookies: Necessary for sign-in, security and remembering your cookie choices. They do not require consent.
• Statistics Cookies: Set by PostHog, only with your consent. They show how visitors use our website, which pages are visited most frequently and how well pages perform. These cookies help us improve our website.

We do not use advertising or targeting cookies.

The Cookies We Set:

Your Choices and Consent:

Upon your first visit, our website will present you with a cookie consent banner, where you can:

• Allow all: Consent to all cookies, including statistics cookies.
• Deny: Only essential cookies will be used to provide you with necessary website functions.
• Customize: Choose which categories of cookies you wish to allow.

You can change or withdraw your consent at any time using the controls in the Cookie Information section below. Withdrawing stops statistics being collected from that point.

Changes to Our Cookie Use:

We may update our use of cookies and tracking technologies to improve our services or comply with legal requirements. We will notify you of any significant changes and seek your consent where necessary.