privacy policy

who i am

I'm Laurence Lai, a self-employed IT professional based in Ramsbottom, Greater Manchester. I build websites, set up email, provide AI chatbots, and offer IT support for small businesses.

If you have any questions about how I handle your data, you can reach me at:

• Email: [email protected]
• Phone: 07811 279 788

what data i collect

Depending on how you use this website, I may collect the following:

• Contact form submissions - your name, email address, phone number, and message
• Booking system data - your name, email address, and appointment details, collected through Microsoft Bookings
• AI chatbot conversations - if you use Kevin (my AI assistant), your messages, session IDs, and conversation history may be collected
• Website analytics - anonymised usage data collected through Google Analytics (GA4), including pages visited, time on site, and general location
• Server logs - your IP address and browser information, automatically collected by my hosting provider
• CDN data - traffic data processed by the content delivery network that provides security and performance for this site

why i collect it

Under UK GDPR, I need a lawful basis for processing your data. Here is what applies to each type:

• Contact forms: Legitimate interests. I need this information to respond to your enquiry.
• Booking system: Contract. I need your details to provide the service you have booked.
• Kevin chatbot: Legitimate interests. The chatbot provides instant assistance to visitors. Conversations may be logged for quality and improvement purposes.
• Website analytics: Legitimate interests. I use analytics to understand how people use the site so I can improve it.
• Email marketing: Consent only. If I send marketing emails, you will only receive them if you have explicitly opted in. You can unsubscribe at any time.

who i share data with

I do not sell your data to anyone. However, to run this website and provide my services, your data may be processed by third parties in the following categories:

• Website hosting provider - stores the website files and processes server requests (EU-based)
• Content delivery and security provider - speeds up page loading and protects against attacks (US-based, with EU data processing arrangements)
• Analytics provider - collects anonymised usage data to help me improve the site (US-based, with Standard Contractual Clauses)
• Productivity and booking platform - handles appointment bookings and business email (US/EU, with adequate safeguards)
• AI and chatbot infrastructure - powers the AI assistant on this site (US-based)
• Email marketing platform - sends marketing emails only if you have opted in (EU-based)

All third-party providers are selected for their compliance with data protection standards. If you would like to know specifically which providers I use, please contact me.

cookies

This site uses a small number of cookies. Here is what they do:

• _ga - Google Analytics, used to distinguish users. Expires after 2 years.
• _ga_* - Google Analytics, used to maintain session state. Expires after 2 years.
• _gid - Google Analytics, used to distinguish users. Expires after 24 hours.

The Kevin chatbot stores a session ID in your browser's memory to keep your conversation going. This is not a persistent cookie and is cleared when you close your browser.

I do not use any advertising or tracking cookies beyond Google Analytics.

You can disable cookies through your browser settings. Most browsers let you block or delete cookies under their privacy or security settings. Be aware that disabling cookies may affect how some websites work.

how long i keep your data

• Contact form submissions: 2 years, then deleted
• Chatbot conversations: 30 days
• Analytics data: 14 months (the GA4 default)
• Booking data: 1 year after your appointment
• Client records: 6 years after the contract ends, as required by HMRC

your rights

Under UK GDPR, you have the right to:

• Access - request a copy of the personal data I hold about you
• Rectification - ask me to correct any inaccurate data
• Erasure - ask me to delete your data (where there is no legal reason for me to keep it)
• Portability - request your data in a commonly used format
• Objection - object to the processing of your data where I rely on legitimate interests

To exercise any of these rights, email me at [email protected]. I will respond within 30 days.

If you are not happy with how I have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

international transfers

Some of the third-party providers I use are based outside the UK, primarily in the United States and EU. Where data is transferred outside the UK, these transfers are protected by Standard Contractual Clauses, adequacy decisions, or equivalent safeguards as required by UK GDPR.

children

My services are not directed at anyone under the age of 16. I do not knowingly collect personal data from children.

updates to this policy

If I make changes to this privacy policy, I will update this page with the new version and change the date at the top. For significant changes, I may also notify you by other means where appropriate.