Privacy Policy

Last updated: 3 November 2026

1. Who we are

This Privacy Policy explains how personal information is collected, used, stored and protected when you visit or contact Lost Profits Lab.

Lost Profits Lab is a trading name used by Shane Hughes, a sole trader trading as Anglia Lead Group.

For data protection purposes, Shane Hughes trading as Anglia Lead Group is the data controller for personal information processed for the operation, administration and marketing of Lost Profits Lab, except where a different role applies to particular client work.

Contact details:

• Website: https://lostprofitslab.com

• Email: admin@lostprofitslab.com

• Correspondence address: 61 Bridge Street, Kington, Herefordshire, HR5 3DJ

2. What information we may collect

Depending on how you interact with us, we may collect:

Business and contact information

• Your name.

• Business or organisation name.

• Job title or business role.

• Business email address.

• Business telephone number.

• Correspondence details.

Enquiry and communication information

• Information you provide when contacting us.

• Details of services you enquire about.

• Communications exchanged by email or telephone.

• Information needed to prepare a quotation or respond to a request.

Client and billing information

• Business contact details.

• Contract and service information.

• Invoices, payment records and transaction details.

• Information required to administer our services and business accounts.

Website and technical information

• Technical information that may be collected when you visit our website, such as IP address, browser type, device information and website usage information, depending on the technologies operating on the website.

3. Where information comes from

We may obtain personal information:

• Directly from you when you contact us.

• When you enquire about or purchase a service.

• Through communications with your business.

• From publicly available business sources, where appropriate for business-to-business research and marketing.

• Through website hosting, security and technical services.

Where personal information is obtained from another source, we will provide the privacy information required by applicable data protection law.

4. Why we use personal information

We may use personal information for the following purposes:

Responding to enquiries

To respond to questions, discuss services, provide quotations and communicate with prospective clients.

Providing services

To establish and manage client relationships, deliver agreed services and communicate about work being undertaken.

Business administration

To manage contracts, invoices, payments, accounting records and business administration.

Business-to-business marketing

To identify relevant businesses and communicate information about Lost Profits Lab's services, where permitted by applicable data protection and electronic marketing laws.

Website operation and security

To maintain website functionality, protect against misuse, troubleshoot technical problems and maintain security.

Legal and regulatory requirements

To comply with legal obligations and establish, exercise or defend legal claims where necessary.

5. Our lawful bases for processing

Where UK data protection law requires a lawful basis, we rely on the basis appropriate to the particular activity.

These may include:

• Contract: where processing is necessary to enter into or perform a contract with you.

• Legitimate interests: where processing is necessary for legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual.

• Legal obligation: where we need to process information to comply with a legal requirement.

• Consent: where consent is required and has been obtained.

For business-to-business marketing, we may rely on legitimate interests where appropriate. We will also comply with the separate requirements governing electronic marketing communications.

You can object to direct marketing at any time.

6. Business records supplied by clients

Lost Profits Lab may review business records to identify potential billing discrepancies, unbilled work, missing charges, supplier-cost differences and other agreed areas of financial leakage.

Clients should provide only the information necessary for the agreed service. Where possible, personal information about their customers should be removed or obscured before records are supplied.

Where a client provides information that identifies individuals and we process it solely on the client's documented instructions, we may act as a data processor on that client's behalf.

In that situation:

• The client remains responsible for deciding why the information is processed and ensuring it can lawfully be supplied.

• We will process the information only as authorised by the applicable service agreement and data processing agreement.

• We will apply appropriate confidentiality and security measures.

• We will return or delete the information as agreed, subject to applicable legal requirements.

If information is genuinely anonymised so that individuals cannot be identified, it will not be personal data for UK GDPR purposes.

7. Who we share information with

We do not sell personal information.

We may share information where necessary with:

• Website hosting and technical service providers.

• Email and communication service providers.

• Payment service providers and banks.

• Professional advisers, such as accountants or legal advisers.

• Regulators, law enforcement or other authorities where legally required.

Our confirmed website hosting provider is Hostinger.

Any additional service providers used will depend on the actual systems and services adopted by Lost Profits Lab. We will not claim to use a particular AI, telephone, SMS or other provider unless that provider is actually engaged.

Where a service provider processes personal information on our behalf, appropriate contractual and security arrangements will be used where required.

8. International transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer is permitted under applicable data protection law and that appropriate safeguards are used where required.

The relevant provider information and safeguards will depend on the services actually used.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, taking account of legal, accounting and business requirements.

Our intended retention approach is:

• Unsuccessful enquiries: normally up to 12 months after the last meaningful contact.

• Prospective business contacts: normally up to 24 months after the last meaningful interaction, unless an objection or other reason requires earlier action.

• Client service and contract records: for the duration of the relationship and normally up to six years afterwards where needed for business, legal or contractual records.

• Financial and tax records: for the period required by applicable accounting and tax rules.

• Marketing objections: a limited suppression record may be retained so that we do not contact someone again after they have objected.

Where information is no longer required, it will be securely deleted or anonymised where appropriate.

10. Keeping information secure

We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to information is restricted to what is reasonably necessary for the relevant business purpose.

However, no method of electronic storage or transmission can be guaranteed to be completely secure.

11. Your data protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request erasure of personal information.

• Request restriction of processing.

• Object to certain types of processing.

• Request data portability where applicable.

• Withdraw consent where processing is based on consent.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise a right, contact us at admin@lostprofitslab.com.

We may need to verify your identity before responding.

12. Marketing communications

We may contact business representatives about services that we believe may be relevant to their organisation.

We will comply with applicable electronic marketing rules. You can ask us to stop sending marketing communications at any time by replying to a marketing email or contacting us directly.

We will retain only the minimum information necessary to respect an objection and prevent further unwanted marketing.

13. Cookies and website technologies

Our website may use cookies or similar technologies required for its operation, security or other purposes.

Details of the cookies and similar technologies actually used, their purposes and available choices are explained in our separate Cookie Policy.

Non-essential cookies and similar technologies will only be used in accordance with applicable consent requirements.

14. Automated decision-making

We do not currently make decisions about individuals based solely on automated processing that produce legal or similarly significant effects on them.

15. Children's information

Our website and services are intended for businesses and adults. We do not knowingly seek to collect personal information from children.

16. Complaints

If you are concerned about how we use your personal information, please contact us first at admin@lostprofitslab.com.

You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk/

Telephone: 0303 123 1113

The ICO is the UK's independent data protection regulator.

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our business, website, services, technology or legal obligations.

The latest version will be published on this website.