Legal

Privacy policy

Last updated October 2026

Who we are

Locus Systems Ltd (company no. 17366551, registered in England & Wales; registered office Foxtail House, Foxtail Rd, Ipswich, IP3 9RX) is the data controller for personal data collected through this website. Our Information Commissioner’s Office (ICO) registration reference is ZC264566 (registered 2 October 2026, expires 1 October 2027).

What we collect

Enquiries, quote, survey and sample pack requests: your name, job title, company, work email, phone number, sector, delivery or site address, your message and any files or logos you attach.
Calculator results you ask us to email: your name, company, work email and the figures you entered.
How you found us: the page you submitted from, the referring site and campaign (UTM) parameters.
Website analytics, only if you accept analytics cookies. See our cookie policy.
Advertising measurement, only if you accept advertising cookies: whether you arrived from a Google advert and whether you then sent an enquiry, with its reference number. We do not send your name, email or phone number to Google.

Why we use it and our lawful basis

To reply to your request, prepare quotes and proofs, arrange surveys and send sample packs: legitimate interests in responding to business enquiries, or steps taken at your request before entering a contract.
To send occasional updates: your consent, which you can withdraw at any time.
To understand how the website is used: your consent to analytics cookies.
To measure which Google adverts lead to enquiries and help Google show them to similar businesses: your consent to advertising cookies.
To protect our forms from spam and abuse: legitimate interests.

Who processes it for us

We use the following processors. Each acts only on our instructions under a written agreement.

Website hosting, database and file storage: Lovable Cloud (infrastructure provided by Supabase and Cloudflare).
Email delivery: Resend.
Customer relationship management: Locus Hub, our own system, hosted on DigitalOcean via Laravel Forge.
Spam protection: Cloudflare Turnstile.
Analytics (only with consent): Google Analytics 4 and Google Tag Manager.
Advertising measurement (only with consent): Google Ads conversion tracking. See how Google uses data from sites that use its services.

Some of these providers may process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

How long we keep it

Files and logos you attach: kept while needed to handle your enquiry and any resulting work. You can ask us to delete them when they are no longer needed. We are finalising a fixed deletion schedule.
Enquiry records: for as long as needed to deal with your request and any resulting order, and to meet our legal and accounting obligations.
Marketing preferences: until you withdraw consent.

We do not sell personal data.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it to be transferred, and withdraw consent at any time. Email team@locus-systems.com.

Complaints

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.