privacy policy
Last updated: 20 October 2026
Leigh Thomas & Co Ltd respects your privacy. This policy explains how we collect, use and protect personal information when you visit leighthomas.co.uk, contact us or access our shareholder documents.
Who we are
Leigh Thomas & Co Ltd is responsible for the personal information described in this policy.
Company number: 00296008
Registered office: North Court, Main Road, Shorwell, Newport, Isle of Wight, PO30 3JG
Email: info@leighthomas.co.uk
Please use these details for questions about this policy or requests concerning your personal information.
Information we collect
When you contact us through our website, by email or by post, we may collect:
- Your name and email address.
- Your telephone number, if provided.
- The contents of your enquiry and any subsequent correspondence.
- Other information you choose to supply.
Our website and hosting systems may also record technical information, such as your IP address, browser type, pages requested, access times and error or security logs.
Please avoid including sensitive personal information in an enquiry unless it is necessary.
How we use your information
We use personal information to:
- Respond to enquiries and correspondence.
- Communicate with shareholders and administer access to company information.
- Operate, maintain and secure our website.
- Investigate technical problems, suspicious activity or misuse.
- Meet legal and regulatory obligations and establish or defend legal claims.
We do not sell your personal information.
Our lawful bases
Under UK data protection law, we must have a lawful basis for using personal information. Depending on the circumstances, we rely on:
Legitimate interests: responding to correspondence, administering shareholder communications and maintaining a reliable and secure website. We consider your rights and interests when relying on this basis.
Legal obligations: keeping records or providing information where the law requires us to do so.
Contract: where processing is necessary to enter into or fulfil a contract with you.
Consent: where we ask for your permission for a particular use. You may withdraw consent at any time without affecting processing that took place before withdrawal.
Shareholder documents
The website includes a password-protected area for shareholder documents. A shared password does not create an individual user account or, by itself, identify the person accessing the area.
Technical access records may nevertheless be generated by our website and hosting systems.
Documents containing personal information should only be used for their intended purpose. Please do not share restricted documents or the access password with anyone who is not authorised to receive them.
Cookies and similar technologies
Our website may use cookies to support essential functions, including remembering that you have entered the password for a protected page.
Where we use optional cookies or similar technologies that require consent, we will explain their purpose and obtain your permission before using them. You can withdraw that permission through the cookie controls provided.
You can also manage cookies through your browser settings. Blocking essential cookies may prevent parts of the website, including password-protected content, from working properly.
Who we share information with
Where necessary, personal information may be accessed by:
- Authorised company directors, staff or representatives.
- Providers supporting our website hosting, maintenance, email and IT systems.
- Professional advisers, including accountants and legal advisers.
- Public authorities or other parties where disclosure is required by law or necessary to establish or defend legal claims.
We limit disclosure to what is necessary and require providers processing information on our behalf to protect it appropriately.
International transfers
Some technology providers may process personal information outside the United Kingdom.
Where this happens, we will ensure that an appropriate legal basis for the transfer is in place, such as UK adequacy regulations or approved contractual safeguards. You can contact us for further information about relevant transfers and safeguards.
How long we keep information
We keep personal information only for as long as necessary for the purpose for which it was collected.
Our proposed retention periods are:
- General enquiries: up to 12 months after the enquiry is resolved, unless an ongoing relationship or another justified purpose requires longer retention.
- Routine website access and security logs: normally up to 90 days, unless needed to investigate an incident or resolve a dispute.
- Shareholder, company and financial records: in accordance with applicable statutory requirements and the company’s records retention arrangements.
Information may be retained longer where necessary to meet a legal obligation or establish or defend legal claims. Backup copies are removed through our normal backup retention cycle.
Keeping information secure
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
Access is limited to those who need it for their work. However, no website or method of electronic communication can be guaranteed completely secure.
Your rights
Depending on the circumstances, you may have the right to:
- Request access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Request deletion of your information.
- Ask us to restrict how we use it.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
These rights are subject to conditions and legal exceptions.
To make a request, email info@leighthomas.co.uk. We may need to confirm your identity before responding. We normally respond within one month, subject to any extension permitted by law.
External links
Our website may link to other websites. Those organisations are responsible for their own privacy practices. Please read their privacy notices before providing personal information.
Complaints
If you have concerns about how we handle your personal information, please contact us so we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office:
Website: https://ico.org.uk/make-a-complaint/
Changes to this policy
We may update this policy when our website, practices or legal requirements change. The latest version will be published on this page with an updated revision date.