Privacy policy

This policy explains what personal data loco-solutions.com collects, why, who it is shared with, how long it is kept and what your rights are.

Who we are

loco-solutions.com is the website of Loco Solutions Limited, which is the controller of any personal data collected through it. "We" and "us" in this policy mean Loco Solutions Limited.

• Registered in England and Wales, company number 08978534
• Registered office: Belmont Suite, Paragon Business Park, Chorley New Road, Lostock, Bolton, BL6 6HG
• VAT registration number GB183957264
• Registered with the Information Commissioner's Office, registration number ZB237273

For any question about this policy or your data, use the contact form and mention privacy in your message, or write to us at the registered office above. We are not required to appoint a data protection officer and have not done so.

What we collect

When you use the contact form

• Your name and email address
• Your phone number, if you give it
• The message you write
• The address of the page you were on when you opened the form, so we know which part of the site prompted your enquiry

When you visit the site

Like any web server, ours records your IP address and browser details when you load a page. These are used to keep the site secure and working, for example to stop the contact form being flooded with automated submissions.

If you accept cookies

Google Ads cookies record whether you arrived from one of our adverts and whether you then got in touch. See Cookies below.

Why we use it, and our lawful basis

• Replying to your enquiry and following it up. Our lawful basis is legitimate interests: when you ask about work, we have a legitimate interest in answering you, discussing the work and keeping a record of the conversation.
• Keeping the site secure. Legitimate interests again: we have a legitimate interest in protecting the site and the contact form from abuse and spam.
• Measuring which Google adverts lead to enquiries. Our lawful basis is your consent, which you give or refuse in the cookie banner.

We will not add you to a mailing list or send you marketing, and we do not sell your data.

Who we share it with

• Our own enquiries system. Contact form messages are stored in the internal business system we use to manage enquiries. It runs on our own servers, hosted in London, UK, and managed through Laravel Forge.
• Resend (Plus Five Five, Inc.) sends us an email notification when a new enquiry arrives, so the notification includes your name, email address and message.
• Our email provider, which receives that notification and any replies we exchange with you.
• Google, only if you accept Google Ads cookies.
• Professional advisers or public authorities, only where the law requires it.

International transfers

Resend and Google are US companies, so using them can involve your data being transferred to the United States. Both are certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which the UK government recognises as giving adequate protection. Resend's data processing addendum also includes the UK International Data Transfer Addendum to the standard contractual clauses. You can ask us for a copy of these safeguards using the contact details above.

How long we keep it

• Enquiries: up to 2 years after our last contact with you. If your enquiry leads to a contract, the related correspondence becomes part of our business records and is kept for 6 years after the contract ends, as company and tax law requires.
• Server logs: up to 14 days.
• Session and security data: 2 hours for the session, and 1 minute for the record used to limit repeated requests to the site.
• Cookies: as listed in the table below.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct anything that is wrong or incomplete
• Ask us to delete your data
• Ask us to restrict how we use your data
• Withdraw your consent to Google Ads cookies at any time, using Cookie settings. Withdrawing is as easy as accepting was

To use any of these rights, contact us using the details in Who we are. It is free, and we will reply within one month.

Your right to object

Because we rely on legitimate interests, you have the right to object at any time to our use of your personal data. If you object, we will stop using it unless we have compelling legitimate grounds that override your interests, or we need it to establish, exercise or defend a legal claim.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator:

• Online: ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Do you have to give us your data?

No. You do not have to use the contact form. If you do, we need your name, email address and a message to be able to reply, and the form will not send without them. Your phone number is optional.

Automated decisions

We do not make any decisions about you using only automated means, and we do not profile you.

Cookies

The site sets two cookies that it needs in order to work. These are exempt from consent because the site, including the contact form, cannot work securely without them. Google Ads cookies are only set if you accept them in the cookie banner, and you can change your choice at any time using Cookie settings.

Your cookie choice itself is remembered in your browser's local storage, so the banner does not ask again on every page. If you accept, Google may also set cookies on its own domains; see how Google uses cookies. We do not use Google Analytics or any other analytics service.

Changes to this policy

We will update this page if the way we use personal data changes. The date at the top shows when it was last changed.