Legal

Privacy policy.

Last updated: 2 August 2026

This page explains what personal information Lychee Lab collects when you use this website, why we collect it, who we share it with, and the control you have over it. We have written it in plain English rather than legal English, because you should be able to read it once and understand it.

01Who we are

Lychee Lab is a UK pay per click advertising agency. We run Google and Meta advertising campaigns for small businesses.

For the purposes of UK data protection law, Lycheelab Ltd is the data controller for the information described on this page. That means we decide what is collected and why, and we are responsible for looking after it.

If you want to talk to us about your information, email lai@lycheelab.co.uk. That address reaches the people who can actually action your request, and it is the fastest route. You can write to the registered office if you prefer, but post is slower.

02What we collect

Information you give us

When you fill in the register your interest form on this site, we collect:

• Your business name
• A short description of what your business does
• Whether you are currently running ads (not yet, a little, or regularly)
• Your name
• Your email address
• Your phone number

We also record whether you accepted or declined marketing cookies at the time you submitted, so that we handle your submission in line with the choice you made.

If you book a call with us, our booking provider collects your name, email address and the time slot you chose.

Information we collect automatically

Our hosting provider records standard technical information for every visit, including your IP address, browser type and the pages you requested. This is needed to serve the site and to keep it secure, and it happens whatever cookie choice you make.

If you accept all cookies, we also collect information about how you use the site: which pages you viewed, how you arrived, and whether you completed the form. Section 04 sets out exactly which tools do this.

03Why we use it, and our legal basis

UK data protection law requires us to have a lawful reason for every use of your information. Ours are set out below.

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we have concluded it is not. You can object to that use at any time. See section 08.

04Cookies and similar technologies

When you first arrive, we show a bar asking whether you accept cookies. Nothing that measures or tracks you loads until you choose Accept all. If you choose Essential only, or ignore the bar entirely, no analytics or advertising tools are loaded at all.

We store your choice in your browser under the name ll-consent. That single item is strictly necessary: without it we would have to ask you on every page.

Changing your mind

You can withdraw or change your cookie choice at any time using the button below. It clears your stored choice and shows the bar again on your next page load. You can also clear cookies and site data in your browser settings, which has the same effect.

Change my cookie choice

05Who we share it with

We do not sell your information, and we never will. We share it only with the suppliers we need to run the business, and only for the purpose described.

• Netlify. Hosts this website and receives your form submission. Netlify stores the submission so we can read it.
• Google. Provides Google Analytics and Google Tag Manager, and receives website usage data if you accepted all cookies. Google also provides the email inbox we read your enquiry in.
• Meta. Where you accepted all cookies and you came to us through a Meta ad, we tell Meta that an enquiry happened so the ad can be measured. Section 06 explains what is sent.
• Calendly. Handles call bookings if you choose to book one.

We may also disclose information where the law requires it, or to establish or defend legal claims.

What we send to Meta

This one deserves plain wording, because it involves your contact details rather than anonymous usage data.

If you accepted all cookies and then submit the form, our server sends Meta a record that an enquiry happened. To let Meta match that enquiry to an ad click, it includes your email address, phone number and name. These are hashed before they are sent, which means they are converted into an irreversible string of characters rather than sent in readable form. Meta uses them to check for a match against its own records and to report on ad performance.

If you chose Essential only, or ignored the cookie bar, none of this is sent. Your enquiry still reaches us, and we still reply. You lose nothing by declining.

06Sending information outside the UK

Some of the suppliers above are based in the United States, or store data there. When your information leaves the UK, data protection law requires us to make sure it stays protected to UK standards.

We rely on the safeguards those suppliers have in place for UK and European transfers, which are the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, or the UK Extension to the EU to US Data Privacy Framework where the supplier is certified under it.

If you would like more detail on the safeguards for a specific supplier, email us and we will point you to it.

07How long we keep it

• Enquiries that do not become clients. Kept for 24 months from our last contact with you, then deleted. Small businesses come back to us months later, and it is unhelpful for both sides if we have no record of the earlier conversation.
• Enquiries that become clients. Kept for the length of the working relationship, and then for six years afterwards, because tax and accounting rules require it.
• Marketing consent. Kept until you unsubscribe or ask us to delete it, plus a minimal record that you unsubscribed so we do not contact you again by mistake.
• Website analytics. Kept for up to 14 months by Google Analytics, then automatically deleted.

If you ask us to delete your information sooner, we will, unless we are legally required to keep it.

08Your rights

Under UK data protection law you have the following rights, free of charge.

• Access. Ask for a copy of the information we hold about you.
• Correction. Ask us to fix anything inaccurate or incomplete.
• Erasure. Ask us to delete your information, where we have no overriding reason to keep it.
• Restriction. Ask us to pause our use of your information while a query is resolved.
• Objection. Object to us using your information on the basis of legitimate interests. You can always object to direct marketing, and we will stop.
• Portability. Ask for the information you gave us in a machine readable format, or ask us to send it to someone else.
• Withdraw consent. Where we rely on your consent, withdraw it at any time. This does not affect anything we did before you withdrew it.

To use any of these, email lai@lycheelab.co.uk. We will respond within one month. We may ask you to confirm your identity first, so that we do not hand your information to somebody else.

09Complaints

If you are unhappy with how we have handled your information, please tell us first so we have the chance to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not need to come to us first, though we would appreciate the opportunity.

10Changes to this policy

We update this page when what we do changes, for example if we add a new tool or a new supplier. The date at the top always shows when it was last changed. If a change materially affects how we use information you have already given us, we will contact you about it directly rather than relying on you spotting an updated page.