Privacy notice — Legwork Systems

Who we are

Legwork Systems is the trading name of George Goonan, a sole trader. We decide how and why the personal data described here is used, which makes us its controller. You can contact us about anything in this notice at [email protected].

What this notice covers

What personal data we collect when you visit this website, book a review, claim a free spot, or receive an email from us about our services; why we use it; who we share it with; and your rights.

Visiting this website

The site is hosted by Cloudflare. Like any web server, it processes your IP address and basic details of each request to deliver pages and protect the site from abuse.

We count visits with Cloudflare Web Analytics. It doesn’t use cookies and doesn’t track you across other sites. This site doesn’t set any cookies of its own.

We also count visits with Umami, an analytics service that works on our behalf. It records which pages are viewed, the website a visit came from, the country or region, the type of device and browser, whether the booking calendar loaded and was used, and whether a call was booked or a video was played. On the pages our adverts lead to, it also records how long each page stays open, how far down it is scrolled, and which parts of it are tapped. It never records anything you type. It doesn’t use cookies and doesn’t identify you. We use the figures only to improve this website: they aren’t used for advertising and aren’t shared with anyone else.

Our lawful basis is legitimate interests: running a secure website and understanding how it’s used.

Booking a review

The booking calendar is provided by Cal.com. When you book, you give your name, email address and anything else you choose to add. We use it to arrange and hold the call and to follow up about it. Cal.com may use cookies that are needed for the booking to work; its own privacy policy explains them.

Our lawful basis is taking steps you’ve asked for before a possible contract, and our legitimate interest in replying to you.

Claiming a free spot

If you leave your email address to claim a free spot, we keep it in a database on this website’s hosting (Cloudflare), and we get a text message with it so we can reply quickly. We use it to send you the details of the free build and to follow up about it, and for nothing else.

You can also claim a spot through the form in one of our Facebook or Instagram adverts. Meta then passes us the email address and phone number you send, with your answers about your business (its name, your role in it and how many people work there), and we keep them in a spreadsheet in our Google Workspace account. We use them in the same way, to check the business is a fit for a free build, and may call or text you about it.

Our lawful basis is taking steps you’ve asked for before a possible contract.

If we’ve emailed you about our services

We contact businesses we think could benefit from what we build. We only send these emails to limited companies and LLPs, at business email addresses.

What we hold: your name, job title, business email address, company details, and notes drawn from public information about your business.
Where it comes from: your company’s website, Companies House, and other public business sources.
Why: to offer our services where they’re relevant to your business. Our lawful basis is legitimate interests (business-to-business marketing).
Your choice: every email tells you how to opt out. If you do, or ask us by email, we stop straight away and add your email address to a suppression list so we never contact you again. We keep that minimal record for as long as we send marketing email.

How long we keep data

We keep booking details for 24 months after the call. If we’ve emailed you, or you’ve left your details to claim a free spot, and you don’t become a client, we delete your details within 12 months of our last contact. If you do become a client, we keep records of our work together for six years after it ends, for tax and legal reasons. Cloudflare keeps basic request logs for a short time under its own policies, and opt-out records are kept as described above.

Who we share it with

We use service providers who process data on our behalf: Cloudflare (hosting, analytics and keeping free spot sign-ups), Umami (visit statistics), Meta (the sign-up form in our Facebook and Instagram adverts), Cal.com (bookings), Twilio (the text that tells us someone has claimed a free spot), Google Workspace (our email, including emails about our services, and the spreadsheet that holds sign-ups from our adverts), Anthropic (the AI tools we use to research businesses and draft emails), and an email warm-up service that connects to our sending mailbox to keep its emails out of spam folders. We don’t sell personal data.

Some of these providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law.

Your rights

You can ask to see, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. You can object to marketing at any time and we will stop. To use any of these rights, email [email protected].

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We’d appreciate the chance to put it right first.

Changes to this notice

We’ll update this notice if the way we use data changes. The date at the top shows when it last changed.