How we handle and protect personal data on leonico.com.

Last updated: September 2026

Leonico Ltd is the data controller for this website. This statement explains what information we collect, why we collect it, and how we keep it safe. It is written for this corporate and marketing site about outsourcing and related services for SMEs. It is not a will-writing service and it is not legal advice.

We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Leonico Ltd is a company registered in Scotland, United Kingdom, company number SC255241. We are registered with the Information Commissioner's Office (ICO) for data protection under number ZB331793.

You can write to us at:

Leonico Ltd
Centrum House
38 Queen Street
Glasgow G1 3DX

You can also use our contact form.

2. Information we collect

We collect the information needed to run this website and to respond to people who contact us. That includes:

Contact form data. If you use our contact form, we collect your first name, last name, email address and message. The form is protected by Cloudflare Turnstile and a security token. Successful messages are emailed to our office so we can reply, and you are taken to a thank-you page.

Email you send us. If you contact us by email or via the form, we process the content of that message and any details you choose to include.

Technical data. Our servers and security tools may record your IP address, browser type, device information, the pages you visit, and the date and time of the request. This is normal website log information.

Cookies and similar technologies. We use cookies and similar tools as described in our Cookies Policy. Optional analytics and marketing cookies are managed through Cookie Options and are only used if you allow them.

This website does not currently offer a newsletter sign-up, member registration, forums or online surveys. We do not collect account passwords on leonico.com.

3. How we use your information

We use personal data for the following purposes:

To reply to enquiries and carry on a business conversation you have started.

To operate, secure and improve the website, including preventing spam and abuse of the contact form.

To understand how the site is used, and to measure marketing, where you have consented to analytics or marketing cookies.

To keep records we need for our business and to comply with the law.

We do not sell your personal data. We do not use contact form messages for third-party advertising lists.

4. Lawful bases

In plain language, we rely on these lawful bases under UK GDPR:

Legitimate interests. Responding to enquiries, running a business website, keeping it secure, and keeping ordinary business records. We consider your interests and rights when we do this.

Consent. Optional cookies in the analytics and marketing categories, set through Cookie Options. You can withdraw that consent at any time using Cookie settings.

Legal obligation. Where we must keep or disclose information to meet a legal requirement, for example if a regulator or court requires it.

If we later enter a contract with you, we may also process relevant details because they are needed to take steps at your request before a contract, or to perform that contract.

5. Cookies

Cookies on this site fall into strictly necessary, analytics and marketing categories. Cookie Options asks for your choices before optional cookies are used. You can change your mind later through Cookie settings in the footer. Full details are in our Cookies Policy.

6. Storage, security and retention

We take reasonable steps to keep personal data secure. This website is served over HTTPS/TLS. The contact form uses a security token and Cloudflare Turnstile to reduce automated abuse.

Contact messages are treated as UK business correspondence. We keep them for as long as we need them to reply, follow up, and maintain a normal business record, and then we delete or archive them. Server logs are kept only for a limited period for security and diagnostics. Cookie data lasts for the period set by each cookie or until you clear it.

No internet transmission is completely secure. Please do not send information you would not be content to put in an ordinary business email.

7. Third parties

We use trusted providers to help run the site. They only receive what they need to provide their service:

Email. Contact form messages are emailed to our office so we can reply to you.

Cloudflare Turnstile. Used on the contact form to check that a submission is likely to be from a person.

Cookie Options. Used to record and honour your cookie choices.

Google Analytics (gtag). Used to understand website traffic if you allow analytics cookies.

Meta Pixel. Used for marketing measurement if you allow marketing cookies.

If you follow a link to another website, including social media or other businesses we mention, that site's own privacy information applies.

8. International transfers

Some of the providers above may process personal data outside the United Kingdom, including in the United States. Where that happens, we rely on the safeguards those providers offer for UK data protection, such as an adequacy decision or another lawful transfer mechanism. Optional analytics and marketing tools are not used unless you consent.

9. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.

Ask us to correct inaccurate data.

Ask us to erase your data in certain circumstances.

Ask us to restrict how we use your data in certain circumstances.

Receive a copy of data you provided to us, in a commonly used format, where portability applies.

Object to processing that we carry out on the basis of legitimate interests.

Withdraw consent where we rely on consent, including optional cookies, without affecting processing that already took place.

Complain to the Information Commissioner's Office if you are unhappy with how we have handled your data. The ICO is the UK supervisory authority: ico.org.uk/make-a-complaint.

To use these rights, contact us using the details below. We may need to confirm your identity before we can act on a request.

10. Children

This website is aimed at businesses and adults. It is not intended for children, and we do not knowingly collect personal data from children.

11. Changes to this statement

We may update this statement from time to time. The latest version will always appear on this page, with the date at the top.

12. Contact us

If you have questions about this statement or about how we handle personal data, please contact:

Leonico Ltd
Centrum House
38 Queen Street
Glasgow G1 3DX

Or use our contact form.