Privacy Policy
How we handle enquiries, client information, and the datasets entrusted to us for analysis.
Scope and responsibility
This Privacy Policy explains how Loxmere Analytics handles personal information in connection with its website, enquiries, client relationships, and remote data services. The policy takes effect on October 12, 2026, and was last updated on that date. The company was established on October 8, 2026.
Loxmere Analytics is responsible for information used to manage its own website, enquiries, and business administration. When we analyze information provided by a business client on that client’s instructions, the client may remain responsible for deciding why and how the dataset is used. The applicable responsibilities can be set out in a separate project agreement or data processing agreement. This policy does not replace a client’s own notices to its customers or employees.
Information you provide
When you make an enquiry, we may receive your name, email address, selected service, project description, and any other information you choose to include. During a client engagement, we may also receive your organization’s name, billing details, project instructions, correspondence, approvals, and payment or invoice records needed to administer the relationship.
Please keep an initial project description focused on the service you need. Do not include account passwords, full payment-card numbers, government identification documents, or confidential third-party records that are unnecessary at the enquiry stage. If files are needed for a project, we agree how they should be provided and what information is relevant before reviewing them. You may ask us whether an anonymized or reduced dataset will be sufficient.
Information in client datasets
Data supplied for analysis can include spreadsheet records, transaction descriptions, sales information, expenses, customer records, purchase patterns, or other information relevant to the agreed project. Some records may contain personal information about individuals other than the person ordering the service. We handle this material for the agreed purpose and within the client’s lawful instructions.
Clients are responsible for confirming that they have authority to provide the data and for limiting it to what is necessary. Highly sensitive information, including health data, biometric information, identity records, or information about children, should not be supplied without a separate written discussion of requirements and safeguards. We do not treat access to a dataset as permission to contact the people in it or to use their records for unrelated marketing.
Technical information and website technologies
The website’s hosting platform and related service providers may process technical information such as an IP address, browser type, device characteristics, referring page, request time, and security or diagnostic records. This information can support website delivery, fraud prevention, troubleshooting, and performance. The website is hosted using Shopify, whose platform functions may involve its own cookies, logs, and privacy practices.
Cookies and similar technologies are addressed in the Cookie Policy. Optional tools, such as visitor analytics or marketing integrations, depend on the website settings and tools actually enabled. Where consent is required, optional processing should occur only in accordance with that choice. The analytics services offered to clients are distinct from any website visitor analytics.
How information is used
We use information to understand and respond to enquiries, prepare quotes, agree project requirements, provide contracted services, communicate about files and deliverables, maintain client relationships, manage invoices, and resolve service concerns. We may also use information reasonably necessary to protect the website and business, investigate misuse, maintain records, and comply with legal obligations.
We use identifiable project data for the agreed engagement, not as a general source of content for public reports or advertising. We do not publish a client’s confidential files, name, or endorsement without permission. General learning about methods or workflows does not authorize the disclosure of personal information or confidential commercial details. Marketing communication, if separately offered, should be based on an appropriate permission or other lawful basis and allow the recipient to stop receiving it.
Lawful grounds where required
Where a law requires a legal basis for processing, the relevant basis may include taking steps at your request before entering a contract, performing an agreed contract, meeting legal obligations, protecting legitimate business interests, or your consent. Legitimate interests may include responding to a business enquiry, maintaining appropriate records, and securing the website, provided those interests are assessed against the individual’s rights.
If processing relies on consent, you may withdraw that consent for future processing. Withdrawal does not invalidate processing that lawfully occurred before it was withdrawn and may not remove information we need to retain for another legal reason. The basis for processing information in a client dataset depends on the client’s role, instructions, and applicable law, and should be documented when required.
Service providers and other disclosures
Information may be shared with providers supporting website hosting, business email, file storage, collaboration, software, payment administration, or professional advice, to the extent needed for their role. We aim to use providers and arrangements suitable for the information involved. Access to identifiable project information should be limited to people and providers who need it for delivery, administration, or another legitimate purpose.
We may disclose information when legally required, to protect rights or safety, to investigate unlawful activity, or in connection with a lawful business transfer subject to appropriate confidentiality and privacy safeguards. We do not sell personal information as part of our standard service offering. We do not provide client datasets to advertising networks for unrelated targeting. A client-specific agreement may impose additional restrictions on disclosure or the use of particular providers.
Payments and financial records
We may maintain records of agreed fees, invoices, payment status, transaction references, and billing correspondence. Payment providers or financial institutions process the information necessary to handle payments under their own responsibilities. We do not need your online banking password or full payment-card credentials to analyze a spreadsheet or prepare a report.
Financial administration records may need to be retained separately from the underlying project dataset. Deleting a work file does not necessarily require deletion of an invoice that must be kept for accounting or legal purposes. Any retained record should be limited to the information reasonably necessary for the relevant obligation.
Retention and deletion
We keep personal information for as long as reasonably necessary for the purpose for which it was collected, including agreed services, client communication, legal requirements, accounting, and the resolution of disputes. There is no single retention period for every dataset. Relevant considerations include the engagement’s duration, the type and sensitivity of the information, any agreed file retention instructions, and obligations that require a record to be kept.
When information is no longer required, it should be deleted or otherwise handled in a way appropriate to its sensitivity. A project agreement may specify earlier deletion of source files or a defined handover period. Backup copies may remain temporarily until ordinary backup cycles remove them, subject to access controls and applicable obligations. Contact us if you need clarification about retention for a particular project or wish to request deletion.
Security and confidentiality
We take reasonable measures appropriate to the information and service to reduce unauthorized access, disclosure, alteration, or loss. Relevant measures can include limiting access, selecting suitable providers, protecting account access, using appropriate transfer methods, and reducing the amount of personal information handled. Specific safeguards for a sensitive engagement should be agreed before files are shared.
No website, communication channel, or storage system can offer an absolute security guarantee. Clients should maintain backups and take reasonable care when selecting what to share. If a security incident affects personal information, we will assess the situation and carry out notifications or other actions required by applicable law and any relevant agreement. This policy does not claim a certification, audit, or security standard that has not been separately established.
Your privacy rights
Depending on your location and the laws that apply, you may have rights to request access to information about you, correct inaccurate information, request deletion, restrict or object to certain processing, receive a portable copy, withdraw consent, or opt out of specific uses. Some rights are subject to legal exceptions, identity verification, and rules about the business’s role and the information involved.
Send a request using the contact details below and describe the information or engagement concerned. We may ask for proportionate information to verify your identity or your authority to act for another person. We will not ask for excessive information merely to discourage a request. We will respond within the timeframe required by applicable law and explain a refusal where required. Where a right to appeal applies, you may ask us to review the decision. You may also contact the competent privacy regulator.
Requests concerning a client’s customers
If your information appears in a dataset supplied by one of our business clients, that client may be the appropriate party to answer your request. Where we act on a client’s instructions, we will help the client respond as required by the applicable agreement and law, rather than independently changing a dataset without authority.
If you are unsure which client is responsible, provide enough context for us to understand the request without sending unnecessary sensitive information. We will explain the appropriate route where we can do so without revealing another person’s confidential information. A client cannot use this distinction to avoid the responsibilities that applicable law places on it.
International handling and children
Online services may involve providers or personnel in locations different from yours. If a transfer of personal information is subject to legal requirements, the applicable safeguards should be considered and implemented as required. Clients with location, residency, or transfer restrictions should communicate those requirements before the project is accepted.
Our website and standard services are directed to adults. We do not knowingly seek personal information directly from children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can assess and address the matter. Projects involving children’s data require a separate written assessment of lawful authority and appropriate safeguards.
Changes and privacy contact
We may update this policy as the service offering, providers, or legal requirements change. The last-updated date identifies the current version. Where a material change requires notice or consent, we will take the steps required before applying that change. A client-specific confidentiality or data processing agreement may impose additional requirements.
Use the contact details below for privacy questions, access or deletion requests, concerns about a dataset, or clarification about a proposed transfer method. Identify the relevant project where possible. Please avoid including passwords or unnecessary sensitive records in the first message.
Contact Loxmere Analytics
projects@loxmereanalytics.com
7847 Tanners Gate Lane, Florence, KY 41042
+1 7063603317