Who runs this site, and what happens to your information.

andylawson.uk is operated by Lawsons Enterprises Ltd, the company through which Andy Lawson provides consultancy. Working with Andy means contracting with Lawsons Enterprises Ltd.

Lawsons Enterprises Ltd is registered in England and Wales, company number 16433965, with VAT registration GB495884223 and Information Commissioner's Office registration ZC120359. The business is based in Kent. The registered office address is available on request using the contact details below.

The contact form is the only place this site asks for information: your name, email address, organisation, an optional line about what you need help with, and your message. Submitting the form sends that information as an email. The site itself keeps no copy and has no accounts, profiles or stored submissions.

The site also uses privacy-first, cookieless analytics to understand aggregate traffic and whether visitors use selected features, such as opening a service or an Insight, downloading a resource or the CV, and submitting the contact form. This sets no cookie, uses no persistent visitor identifier and does not profile you. It is described in full under Cookies and analytics below.

If you arrive from a promoted link, the page address can carry approved campaign labels, such as a LinkedIn source or campaign name. These validated labels may be held for the current browser-tab session so that aggregate page entries and selected actions can be attributed to the campaign, and any labels present when you submit the contact form are also included with that enquiry so it is clear which campaign led to it. The labels carry no visitor identifier, and the browser discards the tab session automatically.

Like any hosted website, the platform serving these pages keeps standard operational logs, such as the requesting IP address and the page requested, used to run and secure the service. Those are infrastructure records, not marketing data, and they are separate from anything you type into the form.

Enquiry information is used to respond to you, to assess whether Andy can help, to discuss potential consultancy work and to keep necessary business correspondence. The lawful basis is legitimate interests: responding to business enquiries, assessing potential work and maintaining necessary business records.

Enquiries are not added to marketing lists, are not used for unrelated marketing and are never sold.

Three service providers are involved in getting your message from the form to a reply:

• Vercel hosts the site and keeps the operational logs described above.
• Resend delivers the contact form email.
• The message arrives in, and is handled from, a Lawsons Enterprises Ltd business mailbox.

Enquiry information is kept while it remains relevant to possible or active consultancy work, and for any period needed to maintain necessary business, contractual or legal records. Information that is no longer required is deleted.

You can ask what is held about you, ask for it to be corrected or deleted, or object to it being processed.

Email hello@andylawson.uk and it will be dealt with directly.

If you are not satisfied with the answer, you can complain to the Information Commissioner's Office (ico.org.uk).

The footer of every page says no cookies, privacy-first analytics, and this is what it means: the site sets no cookies at all, and its analytics are cookieless. Nothing profiles you, recognises you across other sites, or builds a persistent visitor identity, and no advertising click identifier is ever stored.

We use Cloudflare Web Analytics and Lawsons Pulse, our own private analytics platform operated by Lawsons Enterprises Ltd, to understand aggregate page traffic and whether visitors use selected features, such as opening a service or an Insight, downloading a resource or the CV, and submitting the contact form.

The analytics are cookieless and use no persistent visitor identifier. The recorded events do not retain names, email addresses, organisation names, message content, raw IP addresses, complete user-agent strings, full referrer URLs, complete page URLs or arbitrary query parameters. Country-level and device-category information may be recorded in aggregate where the analytics provider supplies it.

Where a link contains approved campaign labels, such as a LinkedIn campaign source or campaign name, we may retain those validated labels to understand which promotional activity led to aggregate page entries and selected actions. The labels are held for the current browser-tab session to support same-tab attribution and do not contain a visitor identifier. Campaign reporting is aggregate and action-based; it does not represent a complete customer journey or a person-level record.

Information submitted through the contact form is processed separately, as described above, so that we can respond to your enquiry. Contact-form contents are never copied into the analytics. This section is about analytics and tracking; it does not mean the hosting platform keeps no operational logs, which are covered in their own section.