Last updated: 29 June 2026
Lerica Tax is the data controller responsible for your personal data collected through this website (https://www.lericatax.co.uk/).
Registered address: 54D Frome Road, Bradford-on-Avon, Wiltshire, BA15 1LA
ICO registration number: ZA022936
If you have any questions about this policy or how we handle your data, please contact us at: claire.swain@lericatax.co.uk.
When you submit an enquiry via our website contact form, we collect your name, email address, and any information you include in your message. We use this solely to respond to your enquiry.
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). It is in both your and our interest to be able to respond to enquiries submitted through our website.
We use Google Analytics 4 to understand how visitors use our website. This collects anonymised information about pages visited, time spent on the site, and general device or browser type. We do not use this data to identify individual users.
Legal basis: Consent (Article 6(1)(a) UK GDPR). Analytics cookies are only activated after you accept them via our cookie consent tool. You may withdraw consent at any time by updating your cookie preferences.
Our contact form uses Cloudflare Turnstile, a privacy-friendly bot detection tool provided by Cloudflare, Inc. Turnstile collects certain technical signals when you interact with the form, including your IP address, TLS fingerprint, and browser User-Agent string. This information is used solely to determine whether you are a human visitor and to block automated or malicious activity. Cloudflare does not use this data to identify or profile individual users.
Cloudflare acts as a data processor on our behalf for the purpose of protecting our website, and as an independent data controller when using signals to improve Turnstile’s bot detection capabilities.
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). Protecting the website and its users from bot traffic and abuse is a legitimate interest of both Lerica Tax and its visitors.
For further detail on how Cloudflare handles this data, see the Cloudflare Turnstile Privacy Addendum.
Contact form enquiries are retained for up to two years from the date of submission, or until the matter is resolved, whichever comes first.
Google Analytics data is retained for 14 months, after which it is automatically deleted by Google.
Cloudflare Turnstile signal data is processed transiently to evaluate each request. Cloudflare’s own retention periods apply; see their privacy documentation for details.
We do not sell, rent, or trade your personal data. We share data only with the following third-party service providers, to the extent necessary to operate this website:
For more information: Google’s Privacy Policy | Cloudflare’s Privacy Policy.
Both Google LLC and Cloudflare, Inc. are US-based companies and may transfer and process data in the United States. Both participate in applicable data transfer frameworks and implement Standard Contractual Clauses approved by the UK Information Commissioner’s Office to provide appropriate safeguards for such transfers.
Under UK GDPR, you have the right to:
To exercise any of these rights, contact us at claire.swain@lericatax.co.uk. We will respond within one month.
If your query relates to data processed by Cloudflare Turnstile in its capacity as a data controller, contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
For full details of the cookies we use, including how to manage your preferences, please see our Cookie Policy.
We may update this Privacy Policy from time to time. The date at the top of this page will always reflect when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.