Lion's Door Ltd customer privacy notice

This privacy notice tells you what to expect us to do with your personal information. Lion’s Door Ltd, trading as Lion’s Roar Studio ("we", "us", "our"), is the data controller responsible for your personal information. We respect your privacy and are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

On this page:

Contact details

What information we collect, use, and why

Lawful bases and data protection rights

Where we get personal information from

How long we keep information

Who we share information with

Sharing information outside the UK

Cookies and similar technologies

How to complain

Last updated

Contact details:

Post: Lion’s Door Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE

Email: [email protected]

What information we collect, use, and why:

To provide and improve products and services for clients

We collect or use the following information:

Names and contact details

Addresses

Payment details (including card or bank information for transfers and direct debits)

Transaction data (including details about payments to and from you and details of products and services you have purchased)

Usage data (including information about how you interact with and use our website, products and services)

For the operation of client or customer accounts

We collect or use the following personal information:

Names and contact details

Addresses

Purchase or service history

Account information, including registration details

Marketing preferences

Technical data, including information about browser and operating systems

For information updates or marketing purposes

We collect or use the following personal information:

Names and contact details

Marketing preferences

Website and app user journey information

IP addresses

To comply with legal requirements

We collect or use the following personal information:

Name

Contact information

Client account information

Any other personal information required to comply with legal obligations

For dealing with queries, complaints or claims

We collect or use the following personal information:

Names and contact details

Account information

Purchase or service history

Customer or client accounts and records

Correspondence

Lawful bases and data protection rights:

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website.

Your data protection rights:

Right of access: You have the right to ask us for copies of your personal information.

Right to rectification: You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.

Right to erasure: You have the right to ask us to delete your personal information.

Right to restriction of processing: You have the right to ask us to limit how we can use your personal information.

Right to object to processing: You have the right to object to the processing of your personal data.

Right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

Right to withdraw consent: When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data:

To provide and improve products and services for clients

Contract: we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests: we collect and use your information to deliver and improve our services. Our legitimate interests include: ensuring our services meet client needs, improving the quality and relevance of what we deliver, analysing service usage to identify opportunities for improvement, and protecting the security and integrity of our platforms.

For the operation of client or customer accounts

Contract: we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests: we collect and use your information to operate client accounts effectively. Our legitimate interests include: maintaining accurate records of services provided, communicating with you about your account, and managing the day-to-day administration of the client relationship.

For information updates or marketing purposes

Consent: we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. You have the right to withdraw your consent at any time.

Legitimate interests: we may rely on legitimate interests for limited business-to-business marketing where this is permitted under PECR (Privacy and Electronic Communications Regulations). Our legitimate interests include: understanding the performance of our marketing, communicating relevant updates to existing clients, and reaching potential clients in a proportionate way.

To comply with legal requirements

Legal obligation: we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

For dealing with queries, complaints or claims

Contract: where the query relates to an existing service contract.

Legal obligation: where we are legally required to respond to the query (for example, a data subject access request).

Legitimate interests: we collect and use your information to respond to and resolve enquiries. Our legitimate interests include: providing helpful and timely responses, maintaining a record of correspondence for reference, and improving how we handle queries over time.

Where we get personal information from:

Directly from you (when you contact us, sign up to our newsletter, become a client, or submit information through our website)

Publicly available sources (such as LinkedIn, company websites, and public business directories, when researching potential clients or contacts)

How long we keep information:

We keep personal information only as long as we need it for the purposes set out in this notice. Specific retention periods include:

Active client records: kept for the duration of our working relationship and for 6 years afterwards, in line with HMRC requirements for financial and contractual records.

Inactive prospect or contact records: reviewed every 24 months from last meaningful contact and deleted if no further engagement is expected.

Newsletter subscriber data: kept for as long as you remain subscribed. We remove your data within 30 days of unsubscribing.

Website analytics data: aggregated and anonymised data is kept for up to 26 months in Google Analytics. Individual cookie-level data is governed by the cookie consent settings on our website.

Correspondence relating to queries or complaints: kept for 24 months after resolution, unless a longer period is required for legal or regulatory reasons.

If you would like specific information about retention for any data we hold about you, please contact us using the details at the top of this notice.

Who we share information with:

Data processors

Data processors handle personal information on our behalf as part of the services they provide to us. We use the following data processors:

LeadConnector LLC (HighLevel)

LeadConnector, also known as HighLevel, provides our website hosting, blog hosting, content management system, contact forms, email marketing platform, and customer relationship management. They store names, contact details, marketing preferences, and form submissions from visitors. They are based in the United States.

Google LLC

Google provides Google Analytics 4, which collects information about how visitors use our website (where consent has been given), including pages viewed, time on site, and approximate location based on IP address. This data is used to understand site performance and improve the visitor experience. Google is based in the United States.

Meta Platforms Ireland Limited

Meta provides the Meta Pixel, which collects information about visitor interactions with our website where consent has been given. This data is used to understand how visitors arrive at the site, to measure marketing effectiveness, and to enable retargeting through Meta’s advertising platforms (Facebook and Instagram). Meta Platforms Ireland Limited is the data controller for visitors in the UK and EU. Data may also be processed by Meta Platforms Inc. in the United States.

Others we share personal information with

Professional or legal advisors, including our accountant and any solicitors we engage, where required to support the operation of the business.

Sharing information outside the UK:

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, ensuring appropriate safeguards are in place. For further information, or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

LeadConnector LLC (HighLevel)

Category of recipient: CRM, website hosting, and email marketing platform provider

Country: United States of America

Transfer mechanism: International Data Transfer Addendum to the EU Standard Contractual Clauses (SCCs)

Google LLC

Category of recipient: Web analytics provider

Country: United States of America

Transfer mechanism: UK Adequacy Regulations under the UK Extension to the EU-US Data Privacy Framework

Meta Platforms Inc.

Category of recipient: Advertising platform and analytics provider

Country: United States of America

Transfer mechanism: UK Adequacy Regulations under the UK Extension to the EU-US Data Privacy Framework

Cookies and similar technologies:

Our website uses cookies and similar technologies to operate, to understand how the site is being used, and (where you have given consent) to support marketing activities.

Categories of cookies we use

Essential cookies: required for the website to function. These are always on and do not require consent.

Analytics cookies: used to understand how visitors interact with the site, so we can improve it. These include cookies set by Google Analytics 4 (_ga and gaG5MD93KH8H, both with a duration of up to 2 years). Analytics cookies only run after you have given consent.

Advertising cookies: used to support marketing and retargeting. These include cookies set by Meta Pixel (_fbp and _fbc, both with a duration of up to 90 days). Advertising cookies only run after you have given consent.

Managing your cookie preferences

When you first visit our site, a cookie banner appears giving you the option to accept all cookies, accept essential cookies only, or customise your preferences by category. You can change your cookie preferences at any time by clearing your browser cookies for our site, which will cause the banner to reappear on your next visit.

You can also manage cookies through your browser settings. Note that if you choose to block essential cookies, parts of the site may not function correctly.

How to complain:

If you have any concerns about our use of your personal data, please contact us first using the details at the top of this privacy notice. We will do our best to resolve your concern.

If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO).

ICO address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

4 May 2026