LDP Analytical Services Ltd is a family-run laboratory equipment servicing company. We
collect very little personal information, we never sell it, and we only use it to
answer your enquiries and provide our services. This policy explains what we collect,
why, and the rights you have over it.

Who we are:

LDP Analytical Services Ltd is the data controller for the information described in
this policy. Registered office: Bank House, 4 Ormerod Street, Rawtenstall, Rossendale,
BB4 8EB, United Kingdom. We are registered with the Information Commissioner's Office
(reference C1980963). If you have any question about your data, contact us at
support@ldpas.com or on 01706 571550.

What this policy covers:

This policy covers our website at www.ldpas.com (including earlier versions of the
site) and our customer portal at crm.ldpas.com.

What we collect and why:

**Enquiries and quotes.** When you contact us by form, email or phone, we collect the
details you give us: typically your name, work email address, phone number,
organisation and your message. We use these to answer your enquiry, prepare quotes and
provide our services. Our legal basis is our legitimate interest in responding to
business enquiries and, where an enquiry leads to work, taking steps to enter into a
contract with you. Form submissions also record technical details (your IP address and
browser type) used solely to filter automated spam.

**Customer portal (crm.ldpas.com).** If you are a customer with a portal account, we
hold your name, work contact details and login credentials, together with the service
records that come with the work: instruments, visit reports, fault logs, quotations
and qualification documents. We process this information to perform our contract with
your organisation. Passwords are stored securely hashed and are never visible to us.

**Website analytics and cookies (with your consent only).** This website uses cookies
only in line with the choices you make in its cookie consent tool. Analytics, where
you consent to it, tells us how visitors use the site (pages visited, how you found
us, approximate location). You can decline or change your choice at any time through
the consent tool, with no effect on your use of the site.

**Security.** Our hosting providers keep short-lived server logs, and our forms use
automated spam protection. Our legal basis is our legitimate interest in keeping the
site secure and our inbox usable.

What we do not do:

We do not sell or rent personal information to anyone.
We do not send marketing emails or newsletters.
We do not use advertising cookies or profiling.
Our services are aimed at businesses and organisations, not at children.

Who we share information with:

We use a small number of service providers to run the sites and the business. They
process data on our instructions and cannot use it for their own purposes:

**Microsoft 365**: our email and business systems
**IONOS**: website hosting and our domain
**Render**: hosting for the customer portal (and our new website)
**Google**: website analytics, only where you have consented
**Cloudflare**: spam protection on our forms

Some of these providers process data outside the UK. Where that happens it is
protected by UK adequacy decisions or the appropriate international data transfer
safeguards. We may also disclose information where the law requires it.

How long we keep information:

**Enquiries and quotes:** up to 6 years, in line with the limitation period for
 contracts, then deleted.
**Customer and service records:** for the duration of our relationship and up to 6
 years afterwards. Instrument qualification records may be kept longer where your own
 regulatory requirements rely on them.
**Analytics data:** retained for up to 14 months.
**Security and server logs:** kept briefly and deleted automatically.

Your rights:

Under UK data protection law you can ask us for a copy of your personal information,
ask us to correct it, delete it, restrict how we use it, or object to our use of it,
and in some cases ask for it in a portable format. Email support@ldpas.com and we will
respond within one month. You will not be charged.

If you are unhappy with how we have handled your information, you can complain to the
Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would
appreciate the chance to put things right first.

Security:

Both websites are served over HTTPS. Form submissions and portal data are stored on
access-controlled systems, portal passwords are securely hashed, and access to
personal information within LDP is limited to the people who need it to do the work.

Changes to this policy:

If we change how we handle personal information, we will update this page and the date
at the top. Significant changes affecting portal customers will also be notified
directly.