Who is responsible?
LEO Consulting is responsible for processing personal data on this website. Our legal business details and contact address are available in the Imprint. You can also reach us through the contact form or by telephone on +44 (0) 208 191 1524.
Hosting and server logs
The website is hosted by Hostinger. When you visit it, the hosting infrastructure may process technical data such as your IP address, time of access, requested page, referrer, browser and operating system. This is needed to deliver the site, keep it secure and investigate faults or abuse.
The legal basis is our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR. Host retention periods depend on the configured server and security logs.
Contact form and enquiries
If you use the contact form, we process your name, business email, company if supplied, service interest and message. The website sends these details to LEO Consulting by SMTP email. It does not write the enquiry to a website database, spreadsheet or CRM.
The resulting email is stored in our normal business mailbox and backups for as long as needed to answer the enquiry, manage a possible business relationship and meet legal obligations. Depending on the enquiry, processing is based on steps before entering a contract, our legitimate interest in responding to business enquiries, or your consent under Article 6(1)(b), (f) or (a) GDPR.
Spam protection
The arithmetic question uses a short-lived session cookie. To prevent repeated automated submissions, the server temporarily records submission times against a one-way hash derived from the visitor's IP address. The raw IP address is not written into this rate-limit file. These controls expire or become irrelevant after a short period and are not used for profiling.
Google Tag Manager and Google Analytics
We use Google Tag Manager, container GTM-KV2JJ3SW, to manage measurement tags. Tag Manager is supplied by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It does not create our analytics reports itself, but it can load Google Analytics after your choice is known.
Google Analytics helps us understand visits, popular pages and how people use the site. The standard implementation can process page views, session information, approximate location, browser and device data, and a random client identifier. Google states that IP addresses from users in the EU, Switzerland and the UK are used to derive coarse location and then discarded before they are logged or stored.
Analytics cookies and full measurement are enabled only after you choose “Allow analytics”. Until then, Google Consent Mode receives a denied consent signal and analytics storage remains denied. Advertising storage and personalisation remain disabled. The legal basis for analytics is your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.
Google may process data in countries outside the EEA. Applicable transfer safeguards may include the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Learn more in Google's Privacy Policy and Google's explanation of data from partner sites.
Your cookie choice
Your selection is stored locally in your browser under leo-analytics-consent-v1. You can change it at any time using “Cookie settings” in the footer. You may also delete browser storage or use the Google Analytics opt-out browser add-on.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction, data portability or object to processing. You can withdraw consent at any time without affecting earlier lawful processing. You also have the right to complain to a competent data protection authority.
We update this statement when our website, providers or legal requirements change.