LORELESSON LOGO
Book a Call

Privacy Policy

Last updated: [DATE]

Loresson is a production service operated by Acornstar Limited ("Loresson", "we", "us", "our"), a company registered in Ireland under company number [COMPANY NUMBER], with a registered office at [REGISTERED ADDRESS].

We are committed to protecting your personal data and being transparent about how we collect, use, and store it. This policy explains our practices in line with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and the Irish Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at [PRIVACY EMAIL].

1. Who we are

Acornstar Limited trades as Loresson and acts as the data controller for the personal data described in this policy. Our Data Protection Officer / privacy contact can be reached at [PRIVACY EMAIL].

2. What data we collect

We collect personal data when you interact with our website, particularly when you:

  • Submit an enquiry through a contact or brief form (name, work email, organisation, and details of your enquiry)
  • Book a call with us
  • Contact us by email or phone
  • Browse our website (via cookies and similar technologies — see our Cookie Policy)

For campaign landing pages specifically, we also capture UTM parameters (source, medium, campaign, and content) associated with your visit, so we can understand which marketing activity led to your enquiry. This data is linked to your form submission but does not itself identify you personally.

3. How we use your data

We use the personal data we collect to:

  • Respond to your enquiry and assess whether we're a good fit to work together
  • Provide quotes, proposals, and contracts if you choose to proceed
  • Maintain records of our business relationship
  • Understand which marketing channels and campaigns are effective (via UTM data)
  • Comply with our legal and regulatory obligations

We do not use your data for marketing unless you have separately given us your consent to do so. If you tick a marketing consent box on any of our forms, we'll only use your details for that purpose in line with the consent you gave, and you can withdraw it at any time.

4. Legal basis for processing

We rely on the following legal bases under UK GDPR / GDPR:

  • Legitimate interests — to respond to enquiries and operate our business development process
  • Consent — where you've opted in to marketing communications
  • Contract — where processing is necessary to perform a contract with you (e.g. if you become a client)
  • Legal obligation — where we need to retain records for tax, accounting, or regulatory purposes

5. Who we share your data with

We do not sell your personal data. We may share it with:

  • Trusted service providers who help us run our business (e.g. form/CRM tools, email providers, hosting providers), under data processing agreements
  • Professional advisors (accountants, solicitors) where necessary
  • Regulators or authorities where required by law

Some of our service providers may be based outside the UK/EEA. Where this is the case, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.

6. How long we keep your data

We retain enquiry data for as long as necessary to respond to your enquiry and for a reasonable period afterward in case you wish to follow up (typically no longer than [X months/years]). If you become a client, we retain data for the duration of our relationship plus any period required by law (e.g. tax records).

7. Your rights

Under UK GDPR / GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data ("right to be forgotten")
  • Object to or restrict our processing of your data
  • Request a copy of your data in a portable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at [PRIVACY EMAIL]. You can also lodge a complaint with:

8. Cookies

Our website uses cookies and similar technologies. For full details on what we use and how to manage your preferences, see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.

10. Contact us

If you have any questions about this policy or how we handle your personal data, please contact us at:

Email: [PRIVACY EMAIL] Post: [REGISTERED ADDRESS]

This document is a draft template and should be reviewed by a qualified solicitor before publication, to confirm compliance with current UK GDPR, EU GDPR, Irish Data Protection Act 2018, and any sector-specific requirements applicable to Loresson's business.