01Who we are
Leander Media Group Ltd (“Leander”, “we”, “us”) provides advertising, branding, signage and digital media services to businesses across South Wales. We are the “controller” of the personal information described in this policy.
Leander Media Group Ltd
Registered in England and Wales, company number 17573389. Registered office: Cardiff House, Priority Business Park, Barry, CF63 2AW.
Email: [email protected]
02What we collect and why
| When | What we collect | Why, and our legal basis |
|---|---|---|
| You send the enquiry form | Your name, business name, email or phone number, type of business, what you need and your message. | To reply to you and discuss our services. Legitimate interests. |
| You become a client | Your contact details, business details, the package you chose, and the information on your set-up form. | To deliver the services you asked for. Performance of a contract. |
| You pay us | Your name, email, billing details and what you paid. Card details go straight to our payment provider. We never see or store them. | To take payment and keep accounts. Contract and legal obligation. |
| You sign in to the client dashboard | Your name, email, a scrambled (hashed) version of your password, and a record of sign-ins including the IP address. | To give you secure access and protect accounts. Contract and legitimate interests. |
| You visit this website | A count of page views, the site you came from and whether you used a phone, tablet or computer. See “How we count visits” below. | To understand how the website is used. Legitimate interests. |
We only ask for what we need. You do not have to give us any information, but we cannot reply to an enquiry without a way to reach you.
03How we count visits
We count visits ourselves, without cookies and without any outside analytics company. To count a visitor only once a day, the website makes a one-way code from your IP address and browser type. That code cannot be turned back into your IP address and is deleted the next day. We do not build a profile of you and we do not track you across other websites.
For security, we also keep the IP address of form submissions and sign-in attempts for up to 24 hours, so that we can block abuse.
04Cookies
This website does not use advertising or tracking cookies, so you will not see a cookie banner.
We use one cookie, and only if you sign in to the client dashboard:
| Name | What it does | How long it lasts |
|---|---|---|
| __Host-lmg | Keeps you signed in to the dashboard. It is strictly necessary, so the law does not require consent for it. | Up to 14 days, or until you sign out. |
If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this page.
05Who we share information with
We never sell personal information. We share it only with companies that help us run our business, under contracts that protect it:
- Cloudflare, which hosts this website and stores our database.
- Stripe, which processes payments.
- Resend, which delivers our emails, such as your welcome email and dashboard login link.
- Advertising and listing platforms such as Meta, Google and TikTok, when we run advertising for a client on their instructions.
- Our accountants and professional advisers, and the authorities where the law requires it.
Some of these companies may process information outside the UK. Where they do, they use safeguards approved under UK data protection law.
06How long we keep it
- Enquiries that do not become clients: up to 24 months, then deleted.
- Client records: for as long as you are a client, and up to 6 years afterwards where we need them for tax and accounting.
- Dashboard sign-in records: up to 13 months.
- Visit counts: kept as totals only, which do not identify anyone.
07Information we handle for our clients
When we collect enquiries or customer details on behalf of a client, for example through one of their adverts, that client decides how the information is used and we handle it only on their instructions. If you contacted one of our clients and have a question about your information, please contact that business first.
08Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you;
- correct anything that is wrong;
- delete your information;
- stop or limit how we use it, or object to our use of it;
- send your information to you or another organisation in a usable format.
To use any of these rights, email [email protected]. We will reply within one month, and it is free.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
09Security
The website and dashboard are served over an encrypted connection. Dashboard passwords are stored in a scrambled form that we cannot read, team accounts need a second sign-in step, and each client can only see their own information.
10Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If a change affects how we use information we already hold about you, we will tell you.