Last updated: January 1st, 2026.

Lord & Thomas (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, or use our services.

If you have questions about this Privacy Policy or how we handle your personal data, please contact us using the details in the Contact page.

1) Who we are (Data Controller)

For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the data controller is:

Lord & Thomas
4th Floor, Silverstream House
45 Fitzroy Street
Fitzrovia
London
W1T 6EB
United Kingdom

2) What personal data we collect

We may collect and process the following types of personal data:

Information you provide to us

• Name

• Email address

• Phone number

• Company name (if applicable)

• Any information you send in emails, messages, or enquiries

Information collected automatically
When you visit our website, we may collect:

• IP address

• Browser type and version

• Device type

• Pages viewed and how you navigate the site

• Approximate location (country/city-level)

Cookies and analytics (if enabled)
We may use cookies or similar technologies to improve website performance and understand how visitors use our site.

3) How we use your data

We use your personal data to:

• Respond to enquiries and messages

• Provide our advertising, marketing, and consultancy services

• Communicate with you about projects, proposals, or contracts

• Improve our website and user experience

• Maintain security and prevent fraud or abuse

• Comply with legal, tax, and regulatory obligations

4) Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

• Consent: where you have given clear consent (e.g., optional cookies, where applicable)

• Contract: where processing is necessary to deliver a service or take steps at your request before entering into a contract

• Legitimate interests: where it is necessary for running our business (e.g., responding to enquiries, improving services, site security)

• Legal obligation: where we must comply with the law (e.g., accounting and tax records)

5) How we share your data

We do not sell your personal data.

We may share personal data with trusted third parties only where necessary, including:

• Website hosting, security, and IT providers

• Email and communications providers

• Call routing / phone services providers

• Professional advisers (accountants, solicitors)

• Authorities where required by law

These providers process data only under our instructions and must implement appropriate security measures.

6) International transfers

If you are located outside the UK, your personal data may be processed in the UK or in other countries where our service providers operate.

Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

7) Data retention (how long we keep your data)

We keep personal data only for as long as necessary for the purposes described in this policy.

Typical retention periods:

• Enquiries: up to 12–24 months after last contact

• Clients/contracts: for the duration of the relationship and for a reasonable period afterward

• Financial records: retained for as long as required by UK tax and accounting laws

8) How we protect your data

We take appropriate security measures to protect personal data, including:

• Secure website hosting and encryption where applicable

• Access controls and restricted permissions

• Malware and security monitoring

• Good internal handling procedures

However, no method of transmission or storage is 100% secure.

9) Your data protection rights

Depending on your location and applicable law (including UK GDPR), you may have the right to:

• Access your personal data

• Correct inaccurate personal data

• Request deletion of your personal data

• Restrict or object to processing

• Request portability of your data

• Withdraw consent (where processing is based on consent)

To exercise these rights, contact us using the details below.

10) Cookies

We may use cookies or similar technologies.

You can manage cookies via your browser settings, and where applicable, via any cookie banner or consent tool shown on our website.

If you disable cookies, some parts of the website may not function as intended.

11) External links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of third-party sites. Please review their privacy policies before providing personal information.

12) Children’s privacy

Our website and services are not intended for children under 16, and we do not knowingly collect personal data from children.

13) Contact

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details on our Contact page.

14) Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

15) Updates to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date shown at the top.