Privacy Policy

What you give us

The only information this website collects is what you type into the project form: your name, your business name, a phone number, an email address, and any notes you add about the project. We also record which page you submitted the form from, the site that referred you if there was one, and any campaign tags in the link you followed. We do not store your IP address, user agent or any browser fingerprint alongside your enquiry.

The form contains one hidden field that real visitors never see and never fill in. It exists only to catch automated spam, and anything typed into it is discarded rather than stored. To stop automated abuse of the form we may also keep a scrambled (hashed) version of the sending network address for a few minutes. It is never stored with your enquiry and expires by itself.

We do not ask for payment details on this website, and we do not collect sensitive personal information.

Why we use it

We use those details for one thing: to reply to you about your project and to quote the work. We do not sell your information, rent it, or share it for advertising.

How your message reaches us

When you submit the form, it is sent to a Lamb & Lyon endpoint on this website — your browser posts it directly to us, and you never need an email program of your own. Your details are stored in our own database, hosted by Supabase, and a notification is emailed to us through Resend, our email-delivery provider.

If you gave us an email address, we also send you a short note confirming that the enquiry arrived. That is a one-off transactional message about your own submission. It is not a newsletter, and it does not subscribe you to anything.

Email is not a perfectly private medium. Please do not send anything through this form that you would not be comfortable sending by ordinary email.

Who helps us run this site

The website is hosted by Cloudflare, which processes basic request information such as IP address in order to serve pages and protect the site. Enquiries are stored in a database hosted by Supabase. Notification and confirmation emails are delivered by Resend. Our own inbox is handled by Google.

These providers act on our behalf and under their own privacy terms.

Cookies

This website sets no advertising cookies and no tracking cookies of its own.

Keeping it safe

The site is served over HTTPS. Enquiries are stored in a database that cannot be read from a web browser: row-level security is switched on with no public access policy, so only our own server-side code, using a private credential that never reaches your browser, can write or read those records. There is no public interface that lists enquiries.

No website can promise perfect security, and we will not pretend otherwise.

How long we keep it

We keep enquiries — both in the database and in our inbox — for as long as they are useful for the conversation they started and for our ordinary business records. We do not run a separate marketing database off this website and we do not add you to any mailing list.

If you ask us to delete your enquiry, we will remove it from the database and from the inbox.

Your choices

You can ask us what enquiry information we hold about you, ask us to correct it, or ask us to delete it. Email us and we will take care of it.

Children

This website is aimed at business owners and is not directed at children.

Changes

If we change how this site handles information, we will update this page and the date at the top of it.

Questions

For any privacy question, or to ask us to delete your enquiry, email lambandlyonco@gmail.com.