Legal

Privacy Policy

Last updated: 18 April 2026

Who we are

LDM Consulting is a sole trader consultancy operated by Liam Messham. Contact: liam@ldmbusinessconsulting.com. This policy explains how we handle personal data when you use ldmbusinessconsulting.com, contact us, or subscribe to our newsletter.

What we collect and why

Contact form

If you fill in the contact form we collect your name, email address, optionally your company, your selected service interest, the message you write. We use this to reply to your enquiry.

Lawful basis: legitimate interest (responding to a business enquiry you initiated).
Retention: we keep enquiry messages for up to 24 months so we can continue the conversation if it restarts. After that they're deleted.

If you subscribe to the newsletter we collect your email address and optionally your name. We use a confirmed opt-in flow, so we'll only send you the newsletter after you click the confirmation link we email you.

Lawful basis: consent, which you can withdraw at any time by clicking unsubscribe in any newsletter email, or by emailing liam@ldmbusinessconsulting.com.
Retention: until you unsubscribe. Unsubscribed records are retained for 30 days to prevent accidental re-subscription, then deleted.

Analytics

We use Plausible Analytics, a privacy-first analytics service based in the EU. Plausible does not use cookies and does not collect personal data. It records anonymised, aggregate metrics only (pages, referrers, country, device type). No consent banner is required for this.

Lawful basis: legitimate interest (understanding site usage without tracking individuals).

Server logs and abuse prevention

When you submit a form, we store a hashed version of your IP address (SHA-256) to enforce rate limits and block spam. The raw IP is never stored. Hashed records are kept for 30 days.

Who we share data with

We use a small number of third-party processors to operate the site:

Google Firebase (hosting, Cloud Functions, Firestore), operated by Google. Data is stored in the europe-west2 (London) region.
SMTP email provider used to deliver enquiry notifications and newsletters. Messages pass through their servers for delivery only and are not used for other purposes.
Plausible Analytics, anonymised usage data only.

We do not sell personal data. We do not share it for advertising.

International transfers

Data is processed in the UK and the EU. If a processor transfers data outside these regions (e.g. Google support), they do so under the UK International Data Transfer Agreement and the EU Standard Contractual Clauses.

Your rights

Under UK and EU GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Have your data deleted ("right to be forgotten")
Restrict or object to processing
Data portability (receive your data in a common format)
Withdraw consent at any time (for newsletter)
Complain to the UK ICO or your local EU supervisory authority

To exercise any of these rights, email liam@ldmbusinessconsulting.com. We'll respond within one month.

Cookies

This site does not set tracking cookies. We do not use advertising cookies or social media pixels. The only storage we might use is a small localStorage entry to remember your form state while you're filling it in, and your language preference. This stays on your device and is never sent to us.

Changes

If we update this policy we'll update the "last updated" date above and, for material changes, notify newsletter subscribers by email.