Privacy Policy
How we handle information, why we use it, and the rights you have.
Last updated: 8 October 202601Who we are
LLAMAS GROWTH LTD is the controller of personal information used for our website and our own business contact activities. We are registered in England and Wales, company number 17506475. Our company address is 15-17 Middle Street, Brighton, East Sussex, United Kingdom, BN1 1AL. Contact us about privacy at contact@llamas-growth.com or by post to this address.
This notice concerns the UK GDPR and Data Protection Act 2018, as amended, including by the Data (Use and Access) Act 2025. It covers visitors, prospective clients, client representatives, and other business contacts. Where we process information on a client’s instructions, the client’s privacy notice and our agreed data-processing terms apply instead.
02Information we use
- Contact and business information you email to us: name, email address, business details, role, project requirements, and correspondence.
- Information needed to manage a business relationship, where applicable: contractual communications, billing details, invoices, and payment records. This website does not accept online payments.
- Technical information used to deliver and protect the website: IP address, browser and device information, request time, requested pages, and security events processed by our hosting and security providers, including Cloudflare.
We obtain information directly from you, from the organisation you represent, and through website requests. If someone gives us your contact details, we will provide this notice at our first contact or within the period required by law. Please do not include sensitive personal information, payment-card details, or unnecessary information about other people in an enquiry.
03The website project brief
The current project brief form creates a text file locally in your browser. The name, email, project focus, and project description entered in that form are not submitted to us or saved in an online enquiry system by the form. The download remains on your device, under your control.
If you subsequently email the brief to us, we receive and process its contents as an enquiry. Selecting an email link opens your chosen email application; it does not send a message automatically. Any future online submission functionality will require this notice to be updated before it is enabled.
04Why we use information
- Responding to business enquiries and managing relationships: our legitimate interests in communicating with prospective and existing business clients and understanding their requirements. We balance these interests against your rights and reasonable expectations.
- Taking steps towards, or performing, a contract: contractual necessity where you personally are the contracting party, for example a sole trader. For employees and representatives of corporate clients, we normally rely on legitimate interests instead.
- Website delivery, security, and prevention of misuse: legitimate interests in providing a reliable service and protecting it and its visitors.
- Accounting, tax, and responding to lawful regulatory requests: compliance with legal obligations.
- Handling disputes and establishing or defending legal claims: legitimate interests in protecting legal rights.
Providing enquiry information is optional, but we may be unable to respond meaningfully without contact or project details. Information required by an agreed contract or law will be identified when requested. We do not currently operate a newsletter or advertising-tracking programme on this website. Any future marketing will require an appropriate lawful basis and compliance with electronic-marketing rules; you can object to direct marketing at any time.
06International processing
Website infrastructure and external font services can process technical information outside the UK. Where we make a restricted transfer, UK data-protection law requires an applicable adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum with the necessary transfer assessment, unless a lawful exception applies.
Provider locations and the applicable contractual transfer arrangements must be checked for the specific service used; this notice does not assume that a provider’s certification covers every service. Contact contact@llamas-growth.com to request information about relevant safeguards or a copy where available, subject to necessary redactions.
07How long information is kept
Information is retained only for as long as needed for the stated purpose. For enquiries, the criteria are whether the conversation is active, a follow-up is reasonably expected, or a related dispute requires preservation. For client and financial records, the criteria are the duration of the relationship, applicable accounting and tax obligations, and relevant legal limitation periods. Technical logs are kept for the hosting provider’s configured operational and security retention period.
When information is no longer needed, it should be deleted or anonymised, subject to lawful recordkeeping and backup cycles. The downloaded project brief is controlled by you, not by us.
09Your data-protection rights
Depending on the circumstances, you may request access, correction, deletion, restriction, and portability of your information, and object to processing based on legitimate interests. You have an absolute right to object to use for direct marketing. Where we rely on consent, you can withdraw it without affecting processing that was lawful before withdrawal.
We do not use your information for solely automated decisions that produce legal or similarly significant effects. Rights are subject to legal conditions and exemptions. Email contact@llamas-growth.com or write to our company address to exercise them. We may need proportionate information to verify your identity.
We normally respond to rights requests within one month, subject to lawful extensions or pauses. If a request is complex or involves numerous requests, the law may permit up to two additional months; we will explain any extension. Requests are normally free; where the law permits a fee or refusal, we will explain why.
10Privacy questions and complaints
You have the right to complain to us about our handling of your personal information. Send a data-protection complaint to contact@llamas-growth.com, with “Data protection complaint” as the subject if convenient, or write to our company address. Our Data Complaint Process includes an electronically completable complaint form, alternative contact methods and the steps we follow. We will acknowledge receipt within 30 days, investigate without undue delay, keep you informed, and communicate the outcome without undue delay.
You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office (ICO). The ICO generally asks you to raise your concern with us first and allow us to respond; this does not remove your right to complain to the regulator. Visit ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11Updates and implementation review
We will update this notice when our processing changes. The date above identifies this version. Material changes will be communicated where required.
Implementation review: the email provider, exact log retention settings, and provider-specific international transfer arrangements have not yet been confirmed for this website. These operational details must be verified and this notice brought into line with them before relying on it as a complete account of all processing. A privacy notice alone does not establish compliance.