Introduction
 
This policy explains how David Lock Associates Ltd (DLA), as ‘data controller’ collects, uses and safeguards any personal data, we collect from you, or which you provide to us.
 
DLA is committed to taking the security of personal data seriously and to always act transparently and to provide you with accessible information on how we use your data. DLA has a commitment to protecting the rights and freedoms of data subjects; safely and securely managing and protecting their data in accordance with all our legal obligations.
 
Our privacy and cookie policy set out the type of personal information that we may collect about you; and how it is collected and used. It describes how we seek to protect the privacy of that data. It describes your rights in relation to that data, how to log a formal data complaint directly with us, and your right to escalate matters to the Regulator. If you wish to raise a complaint about how we handle your data, please email our Data Management Officer at mail@davidlock.com.
 
We will formally acknowledge your complaint within 30 days of receipt and investigate the matter without undue delay.
 
If you have any questions or concerns regarding any aspect of this policy, then please contact the Data Management Officer on mail@davidlock.com.
 
Information That We Collect
 
We may collect the following information for business purposes:

• name and job title;

• contact information including email address, home or work telephone number and address;

• demographic information such as postcode, preferences and interests; and

• your communication preferences.

 
This will be collected through direct contact from you by filling in any online form, or corresponding with us by post, phone, email or otherwise.
 
We use Wix Forms to collect personal data, as outlined above. This information is collected through our ‘Contact Us’ form and may also be collected when individuals apply for advertised job roles.
 
We also use Wix Pro Gallery, which relies on essential cookies to provide security and functionality. Images submitted or received through this service are used for internal purposes only, unless consent has been provided for their use in marketing materials.
 
You may request access to the personal information we hold about you. In alignment with UK data laws, we will conduct reasonable and proportionate searches to fulfil your request. If your request is broad, we may contact you to clarify the scope, which will temporarily pause the statutory response timeline until clarification is provided.
 
If you would like a copy of the information held on you, please contact us at mail@davidlock.com.
 
If you believe that any information we are holding on you is incorrect or incomplete, please email us or write to us at David Lock Associates Ltd., 50 North Thirteenth Street, Milton Keynes, MK9 3BP. For the attention of the Data Management Officer, as soon as possible. We will promptly correct or erase any information found to be incorrect.
 
What We Do With The Information We Gather
 
The basis upon which information is given or collected will be either for legitimate interest (develop our products/services; inform any marketing strategy we undertake; data analysis relevant to your reason for contacting us) or to perform a contract with you.
 
We will use this information for:
 

• internal record keeping;

• to improve our products and services;

• to notify you of any changes to our website, such as improvements or product/service changes that may affect our service;

• to notify you of information about products or services similar in nature to those that were subject to previous customer or service relationships with you;

• to contact you, from time to time, for market research purposes;

• to customise the website according to the generic interest of our customers and service relationships.

 
Analytics & Website Data
 
We also use analytical and statistical tools that monitor details of your visits to our website and the resources that you access, including but not limited to, traffic data, location data, weblogs and other communication data (but this data will not identify you personally).
 
Our website is hosted by Wix https://wix.com and we will be using their analytic tools. We use these products to understand how the website is being used to improve the user experience.
 
The types of data collected includes IP address, browser-generated information e.g. browser type, operating system, date and time of access, how long a person looks at a website, what they look at etc.
 
Cookie Policy | Wix.com
About Privacy | WIX

Should you not wish your information to be used to receive further information then you may opt out at any time most easily by emailing the Data Management Officer on mail@davidlock.com.
 
Third Parties
 
We do not sell or rent any personally identifiable information about you to any third party.
 
In some circumstances it may be necessary to share your information with any sub-contractors who are involved in the provision of services to meet our contractual obligations to you.
 
It may also be necessary to share your information if we are under a regulatory or legal obligation to do so.
 
We may disclose your information outside of David Lock Associates should we sell or buy any business or assets, in which case information may be disclosed to prospective sellers of buyers of such business or assets. However, any such transfer will be on the basis that the confidentiality of your data is protected in accordance with this privacy policy.
 
International Transfers
 
As part of the services offered to you, for example through our website, the information you provide to us may be transferred to and stored in countries outside of the United Kingdom as we use remote website server hosts to provide the website and some aspects of our service, which may be based outside of the United Kingdom, or use servers based outside of the United Kingdom – this is generally the nature of data stored in “the Cloud”. It may also be processed by staff operating outside the United Kingdom who work for one of our suppliers, e.g. our website server host, or work for us when temporarily outside of the United Kingdom.
 
If we transfer or store your personal data outside the United Kingdom in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected, as outlined in this Privacy Policy and in accordance with the UK GDPR and the Data Use and Access Act 2025. If you use our service while you are outside the United Kingdom, your personal data may be transferred outside the United Kingdom in order to provide you with these services.

We do not use or disclose sensitive personal data, such as race, religion or political affiliations without your explicit consent.
 
Security
 
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place physical, electronic and managerial procedures to safeguard and secure the information we hold. We cannot guarantee the security of your data while you are transmitting it to our site but will seek to prevent unauthorised access once we have received your data.
 
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
 
Email Tracking
 
Some emails that we send you contain no tracking, e.g. service emails with invoices attached. Other emails include tracking so that we can tell how much traffic those emails send to our site, but we do not know who has clicked and so the data is anonymous, e.g. information downloaded from our site.
 
For some emails we can track, at an individual level, whether the user has opened and clicked on links in the email. We rarely use the latter information at a personal level, rather we use it to understand open and click rates on our emails to try to improve them.
 
Sometimes we do use personal information, e.g. to re-email people who didn’t click the first time. If you want to be sure that none of your email activity is tracked, then you should opt out of DLA emails which you can do by emailing “UNSUBSCRIBE” to mail@davidlock.com.
 
Data Retention
 
We store your data only for as long as necessary in relation to the purpose under which such data was collected. This is determined on a case-by-case basis and depends on things such as the nature of the data provided, why it was collected, the legal basis we rely upon to process the data, and for the purposes of satisfying any legal and financial auditing or reporting where required.
 
Cookie Policy
 
We use cookies to help us improve your browsing experience by collecting information for our services and to provide statistical information regarding the use of our website (please refer to our cookie policy: cookie policy document).
 
Your Rights – Summary
 
You have rights in relation to the personal data we hold about you, subject to applicable legal requirements and exemptions. These may include the right to access your personal data, request that inaccurate or incomplete data is corrected, request erasure or restriction of processing in certain circumstances, object to certain processing, and withdraw consent where we rely on consent as our lawful basis.
 
You can exercise your rights or raise a data protection concern by contacting us at mail@davidlock.com.
 
We will provide a clear process for raising data protection complaints. We will acknowledge your complaint within 30 days and will investigate and respond to it without undue delay, in accordance with applicable data protection law.
 
You also have the right to complain to the Information Commissioner’s Office (ICO) if you are dissatisfied with how we have handled your personal data. Further information is available from the ICO.
 
Changes to This Policy
 
We may update this Policy from time to time to reflect changes to our use of cookies and similar technologies, changes to applicable legislation or regulatory guidance, or changes to our services.
 
If we make material changes, we will publish the updated version on our website and, where appropriate, provide a prominent notice. The date of the latest update will be shown at the end of this policy.

Last updated August 2026.