Privacy & Cookies Policy

Last updated: 5 November 2026

Ley Hill Solutions Limited, trading as Ley Hill Consultancy Group (“Ley Hill”, “we”, “us” or “our”), is responsible for the personal information described in this policy.

We are registered in England and Wales under company number 04045992.

This policy explains how we collect and use personal information when you visit our website, contact us, book an appointment or subscribe to our communications.

Contact us

You can contact us about your personal information:

Email:
Telephone: +44 (0) 1494 772327

Registered office:
Ley Hill Solutions Limited
C/O Quantum UK Business Solutions Ltd
The Imex Building
575–599 Maxted Road
Hemel Hempstead
Hertfordshire
HP2 7DX

Information we collect

Depending on how you interact with us, we collect:

  • Your name and contact details.
  • Your organisation and job title.
  • The type of support you require.
  • Information you include in enquiries and correspondence.
  • Appointment details and information supplied when making a booking.
  • Newsletter subscriptions, marketing preferences and consent records.
  • Information needed to prepare proposals and provide services.
  • Website usage and technical information, as described below.

Our contact form asks for your name, email address, organisation, the support required and your message. Some fields are required so that we can respond appropriately.

Our newsletter signup form collects contact and professional details and lets you select the types of communication you wish to receive.

Please avoid including sensitive personal information unless it is necessary for your enquiry.

How we collect information

We collect information directly from you when you:

  • Complete our contact form.
  • Contact us by telephone, email or post.
  • Request information, a proposal or a service.
  • Book an appointment through Microsoft Bookings.
  • Subscribe to our newsletter or other communications.
  • Give consent or change your preferences.

We also collect technical and usage information when you visit our website, subject to the applicable cookie choices and legal requirements.

Why we use your information

We use personal information to:

  • Respond to enquiries and provide requested information.
  • Arrange appointments and send related communications.
  • Prepare proposals and manage customer relationships.
  • Deliver our services.
  • Send communications you have subscribed to.
  • Record and respect your preferences.
  • Understand website use and improve our content.
  • Maintain website security and investigate technical problems.
  • Handle complaints and requests concerning personal information.
  • Meet legal obligations and maintain necessary business records.

Submitting an enquiry or booking an appointment does not automatically subscribe you to marketing emails.

Our lawful bases

Legitimate interests

We use information where necessary for our legitimate interests in responding to enquiries, communicating with business contacts, managing relationships, understanding website performance and protecting our systems.

We consider the purpose of the processing, whether it is necessary and its effect on your interests and rights.

Contract

Where you enter into a contract with us, or ask us to take steps before entering into a contract with you, we use information necessary for those purposes.

Consent

We rely on consent for newsletter subscriptions and other marketing communications you agree to receive, and for cookies or similar technologies where consent is required.

You can withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before you withdrew it.

Legal obligation

We use or disclose information where necessary to meet legal requirements, including applicable accounting, regulatory and disclosure obligations.

Newsletters and marketing

We use Constant Contact to manage subscriptions and distribute newsletters and other email communications.

You can select the communications you wish to receive and unsubscribe using the unsubscribe option in our marketing emails or by contacting us.

Depending on the campaign settings, email communications may use tracked links or similar technology to provide delivery and engagement information. This can help us understand whether communications reach their recipients and which content interests them.

After you unsubscribe, we may retain a limited record of your contact details and preference so that we do not send further unwanted marketing.

Unsubscribing does not prevent us from responding to your enquiries or sending necessary communications about services you receive from us.

Appointment bookings

Our website links to Microsoft Bookings for appointment scheduling.

Information you provide through that service is used to arrange and manage your appointment and related communications. Booking information is processed within Microsoft 365.

Website analytics

We use Google Analytics 4 and Metricool to understand website use and improve our content.

Google Analytics

Google Analytics helps us understand visits, pages viewed, visitor sources and interactions with the website. It can use cookies and online identifiers to distinguish visits and sessions.

These identifiers may constitute personal information even when they do not contain your name.

Metricool

Metricool records website visits and page views. Its website tracker processes information including the page requested, referring website where available, IP address and browser window dimensions.

Metricool states that its website tracker does not use cookies, local storage, session storage or persistent visitor identifiers. It states that IP addresses are processed in identifiable form for no more than 36 hours, after which they are deleted or irreversibly anonymised.

We use website reporting to understand which content attracts interest and where improvements are needed.

Cookies and similar technologies

Cookies are small files stored on your device. Websites can also use browser storage and similar technologies to support their functions and remember preferences.

Our website uses Cookie Compliance, provided by Hu-manity, to present privacy choices and record consent preferences. The service can process consent choices, timestamps, IP addresses and browser or device information to maintain consent records.

The website also includes Google Analytics and Google Fonts. Google Fonts supplies website typefaces and can receive technical information, including an IP address, when a font is requested.

Where consent is required, optional technologies must operate in accordance with your consent choices.

Managing your choices

You can reopen the privacy settings using the fingerprint icon at the bottom left of the website, labelled “Update consent”.

The panel offers Private, Balanced and Personalized settings. Select Customize to review individual purpose categories, then choose Save my preferences.

The panel also displays information about your consent record, its duration and services allowed or blocked by your settings.

You can change your choices at any time. You can also delete or block cookies through your browser settings. Blocking cookies needed for a particular function may prevent that function from working.

Metricool’s cookie-free website measurement is described separately above. Browser cookie settings do not necessarily prevent processing that does not use cookies.

Cookie duration

Consent preferences are retained for the duration shown in the cookie settings panel.

Google Analytics commonly uses cookies named _ga and _ga_ followed by an identifier. Google specifies default lifetimes of two years for these cookies, although configuration and browser restrictions can shorten their duration.

A cookie’s lifetime on your device is different from the retention period for information held in an analytics account.

Who we share information with

We do not sell your personal information.

We use providers that help us deliver our services and operate our business, including:

  • Hosting and technical support providers.
  • Microsoft for business communications and appointment bookings.
  • Constant Contact for newsletters and marketing communications.
  • Google for website analytics and fonts.
  • Metricool for website measurement.
  • Hu-manity for cookie preferences and consent records.

Providers receive information relevant to their services. Where they process personal information on our behalf, appropriate data-processing arrangements are required.

We may also disclose information to professional advisers, public authorities or other recipients where necessary to meet a legal obligation or establish, exercise or defend legal claims.

International processing

Our use of service providers can involve processing outside the United Kingdom.

Constant Contact’s published data-processing terms provide for processing in the United States and other countries where it and its service providers operate. Those terms include international transfer protections, including the UK Extension to the EU–US Data Privacy Framework and approved contractual safeguards where applicable.

Other providers may also use international infrastructure or support arrangements. We do not represent that all personal information remains exclusively within the UK or European Union.

International transfers must meet the requirements of UK data protection law. Depending on the arrangement, the applicable protection may be UK adequacy regulations or approved contractual safeguards.

Contact us for information about the locations and safeguards relevant to your personal information, including how to obtain copies of applicable safeguards.

How long we keep information

We retain personal information for the purposes described in this policy and remove or anonymise it when it is no longer needed.

Enquiries and appointments

Retention depends on the time needed to respond, arrange the appointment, complete relevant follow-up and address any resulting complaint or contractual matter.

Marketing information

Information held for consent-based marketing is retained until you unsubscribe, withdraw consent or there has been no meaningful interaction for three years, whichever occurs first.

We may retain a limited record of an unsubscribe request to ensure that your preference is respected.

Customer and business records

Relevant records may be retained for up to seven years after our relationship ends where needed for accounting, contractual or legal purposes. A particular record may require a different period where a legal obligation or ongoing legal matter applies.

Website information

Retention criteria include the period needed to compare website performance, assess relevant campaigns, investigate technical or security incidents and demonstrate consent choices.

Google Analytics retention is controlled through account settings. Cookie expiry does not determine when all analytics records are deleted.

Metricool states that identifiable IP addresses collected by its website tracker are deleted or irreversibly anonymised within 36 hours. Statistical information that no longer identifies individuals may be retained for reporting.

Other websites

Our website contains links to external services, including newsletter signup, appointment booking and social media.

When you visit an external service, its privacy information explains the processing it carries out. Our cookie choices do not automatically control cookies on another organisation’s website.

Protecting your information

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Access should be limited to people and providers who need the information for their work. No electronic transmission or storage method can be guaranteed completely secure.

Your rights

Depending on the circumstances, you have the right to:

  • Request access to your personal information.
  • Ask us to correct inaccurate or incomplete information.
  • Ask us to delete information.
  • Ask us to restrict how we use information.
  • Object to processing based on legitimate interests.
  • Request a transferable copy where data portability applies.
  • Withdraw consent where we rely on it.

You can object to direct marketing at any time.

Contact us using the details above to exercise your rights. We may need information to confirm your identity.

Requests are normally free. We respond without undue delay and normally within one month. If the law permits an extension or another exception applies, we will explain this to you.

Complaints

If you are concerned about our use of your information, contact or call +44 (0) 1494 772327.

We will acknowledge your complaint within 30 days, investigate it and respond without undue delay.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Changes to this policy

We review this policy when our practices or legal requirements change. The date at the beginning shows when it was last updated.

Where required, we will bring significant changes to your attention or obtain fresh consent.