Privacy notice

This notice covers www.fleurlamont.com (the company website). It does not replace the privacy notices for our products.

1. Who we are

Fleur Lamont Ltd is the data controller for this website. Registered office: 82A James Carter Road, Mildenhall, IP28 7DE, United Kingdom.

Privacy and data-protection enquiries: dpo@fleurlamont.com (reaches the same person as glen@fleurlamont.com).

General / commercial contact: glen@fleurlamont.com.

2. What this website collects

• Enquiry and booking forms - name, contact details, message, and preferred slot when you book a consult. Used to respond to you. Submitted via webhook to our self-hosted n8n at n8n.fleurlamont.com.
• Ebook / email capture forms - name, email, and message when you request the ebook. Also via n8n. Used only to send that resource, not for bulk marketing unless you separately agree.
• Technical logs - standard web server / reverse-proxy logs (e.g. IP address, user agent, requested URL) for security and diagnosing faults.
• Preferences - theme (light/dark) may be stored in the browser; we do not run third-party advertising trackers on this site.

3. Businesses we contact by email

We sometimes email local businesses to ask for a short call. If we emailed you, this is where your details came from and what we do with them.

• What we hold - the business's name, website, address and category; the phone numbers and email addresses published for it, including the one we wrote to; whether that address belongs to a named person; and, where we checked the Companies House register, the company's number, registered name, status and type. We also keep the date we emailed you and how you replied.
• Where it came from - we find businesses on OpenStreetMap, a public map, and, where we search them, in Google's public business listings (Google Places), from which we take only the address of your website. The email address and phone number came from your OpenStreetMap listing or from your business's own public website. Company details came from the public Companies House register. We do not buy lists.
• Who we email - only businesses we have confirmed are limited companies, LLPs or similar organisations. We do not email sole traders or partnerships without their consent.
• Why, and on what basis - to ask for a 15-minute call to learn what problems local businesses face in running their business, so we can see where we could help. Our lawful basis is legitimate interests. The email is our own fixed wording with your business's details filled in; no AI writes it. No email is sent until a person has seen who it is going to and approved it, and we do not send a follow-up.
• Saying no - reply "no thanks" and we will not email that address again or, where our list is set to cover whole businesses, anyone else at your business. We keep the address on a do-not-contact list, with the business's name, the date and what you said, so that your "no" is honoured for good.
• Asking us to erase your details - ask at any time, at dpo@fleurlamont.com or by replying to our email. We blank your email address and phone number wherever Lamont Works holds them, and in the tool we use to find businesses. The records themselves stay, emptied of your details, because our activity log cannot be rewritten. So that we never email you again, we keep your address on the do-not-contact list only as a scrambled code (a salted hash) that cannot be read back; an entry you already had there is turned into the same code. Details that belong to a company and not to a person, such as its name and address, may remain.
• How long - if you do not reply, your details are deleted automatically 12 months after our last email to you, and you are not added to the do-not-contact list. If you reply, we keep them as we keep any business enquiry (section 5). A do-not-contact entry is kept for good, which is what keeps your "no" honoured.
• Where it is stored, and who else sees it - your details are stored in the EU, in our own system, Lamont Works, hosted by Hetzner. Our email provider, Zoho, sends the email. The AI assistant inside Lamont Works handles these details when we work on our list and reads a reply to suggest, for a person to confirm, that you be added to the do-not-contact list; that AI is run by outside model providers and may process data outside the UK and EEA (listed in the Lamont Works privacy notice).

4. Lawful bases

Responding to enquiries and booking consults: legitimate interests and/or steps prior to a contract. Sending an ebook you requested: consent / your request. Emailing businesses (section 3): legitimate interests. Security logs: legitimate interests.

5. How long we keep it

Enquiry and booking messages: typically up to 24 months after the last meaningful contact, then deleted or anonymised unless we need them longer for a live engagement or legal claim. Businesses we emailed: as in section 3. Server logs: retained for a short operational period (usually weeks to a few months). Exact product retention for Asguard and Lamont Works is set out in those products’ notices.

6. Processors for this site

• Hetzner - hosting (EU)
• n8n (self-hosted on our VPS) - form automation
• Email provider - when we reply to you

7. Our products

If you use a product, that product’s own privacy notice applies:

• Asguard privacy
• Lamont Works privacy
• ScaffolderJS - see notices on scaffolderjs.com where you hold an account

8. Your rights (UK GDPR)

You may request access, correction, deletion, restriction, objection, or portability where applicable. Contact dpo@fleurlamont.com. You can also complain to the ICO.

9. Children

This website is aimed at adults and businesses. It is not directed at children.

10. Changes

We may update this notice; the effective date above will change when we do.