Privacy Policy
Lambshead Planning & Development
Last updated: 19 October 2026
1. Introduction
Lambshead Planning & Development is an independent town planning and development consultancy registered in the Netherlands, providing professional consultancy services principally to clients in the United Kingdom.
We respect your privacy and are committed to handling personal information lawfully, fairly and transparently, in accordance with the EU General Data Protection Regulation (GDPR), applicable Dutch data protection legislation and, where applicable, the UK General Data Protection Regulation (UK GDPR) and UK Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or engage our professional services.
2. Who we are
Lambshead Planning & Development is operated as a Dutch-registered sole proprietorship (eenmanszaak).
Business name: Lambshead Planning & Development
Business owner: Tom Lambshead
Registered in: The Netherlands
Chamber of Commerce (KVK): 42189661
Registered Business address: Larikslaan 211, 3053LD Rotterdam, The Netherlands
UK Correspondence address: Lambshead Planning & Development, Suite 174962, PO Box 7169, Poole, BH15 9EL UK
Email: tom@lambshead.co.uk
Website: www.lambshead.co.uk
Lambshead Planning & Development is the data controller responsible for personal information processed in connection with its business activities, except where it acts as a data processor on behalf of a client.
3. Information we collect
We may collect and process the following personal information:
• Your name, job title, employer or organisation.
• Business email address, telephone number and correspondence address.
• Information you provide when contacting us by email, telephone or other means.
• Information relating to potential or existing consultancy instructions, including project correspondence and contact details.
• Information necessary for preparing proposals, entering into contracts, providing professional services, issuing invoices and maintaining business records.
• Limited technical information associated with visits to our website, such as IP addresses and information processed by our hosting and security providers.
We do not intentionally collect personal information that is unnecessary for providing our services.
4. How we use your information
We use personal information for the following purposes:
• Responding to enquiries and communicating with prospective and existing clients.
• Preparing fee proposals, agreements and professional advice.
• Delivering town planning and development consultancy services.
• Maintaining professional relationships with clients and relevant project contacts.
• Managing invoicing, accounting, taxation and business administration.
• Meeting applicable legal, regulatory and professional obligations.
• Maintaining the security and functionality of our website and business systems.
• Establishing, exercising or defending legal claims where necessary.
We do not sell personal information to third parties.
5. Legal basis for processing
We process personal information only where we have an appropriate lawful basis under applicable data protection legislation.
Depending on the circumstances, this may include:
Contractual necessity: Where processing is required to enter into or fulfil a contract with you personally, or to take steps at your request before entering into a contract.
Legitimate interests: Where necessary for managing professional enquiries, communicating with business contacts, operating our consultancy, maintaining security and developing appropriate business relationships, provided these interests are not overridden by your rights.
Legal obligations: Where we must retain or disclose information to comply with applicable laws, including tax and accounting requirements.
Consent: Where consent is specifically required, such as for certain optional website tracking technologies or direct marketing activities.
We will not rely on consent where another lawful basis is more appropriate.
6. How we store and protect your information
We use professional business systems, including Google Workspace, to manage emails, correspondence and electronic documents.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse or disclosure.
Access to business information is restricted to those who reasonably require it for legitimate business purposes.
No electronic system can guarantee absolute security, but we seek to use appropriate safeguards to protect information entrusted to us.
7. Sharing information with third parties
We may share personal information where reasonably necessary with:
• Technology and hosting providers, including Google Workspace and GoDaddy.
• Accountants, insurers, legal advisers and other professional service providers.
• Other consultants, project team members, clients or relevant authorities where necessary to provide agreed professional services.
• Regulatory or public authorities where disclosure is legally required.
We share only information relevant to the purpose concerned and seek to ensure appropriate safeguards are in place.
8. International data transfers
Our consultancy is established in the Netherlands and principally serves clients and projects in the United Kingdom.
Personal information may therefore be transferred between the Netherlands, the United Kingdom and other countries where our service providers operate.
Where personal information is transferred outside the European Economic Area or the United Kingdom, as applicable, we seek to ensure that an appropriate legal transfer mechanism or safeguard is in place, such as an applicable adequacy decision or recognised contractual protections.
9. How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including relevant legal, tax, accounting, contractual and professional requirements.
The appropriate retention period depends on the nature of the information and the relevant obligations.
When information is no longer required, we take reasonable steps to delete it securely or anonymise it, subject to any applicable retention obligations.
10. Cookies and website technologies
Our website is hosted using WordPress and GoDaddy.
Cookies are small files that may be stored on your device when visiting a website. They can support website functionality, security and, where enabled, visitor analytics.
We aim to keep our website simple and minimise the use of cookies and other tracking technologies.
Essential cookies may be used where necessary for website operation or security. These do not generally require consent.
We do not intend to use advertising or behavioural marketing cookies. Any optional analytics or other non-essential tracking technologies will be assessed before use, and consent will be requested where legally required.
11. Your data protection rights
Under applicable data protection legislation, you may have the following rights in relation to your personal information:
Right of access: To request confirmation of whether we hold personal information about you and obtain a copy of that information.
Right to rectification: To request correction of inaccurate or incomplete personal information.
Right to erasure: To request deletion of your personal information in certain circumstances.
Right to restrict processing: To request that we limit how your personal information is used in certain circumstances.
Right to object: To object to certain processing activities, including processing based on legitimate interests.
Right to data portability: To request the transfer of certain personal information to you or another organisation, where applicable.
Right to withdraw consent: Where we rely on your consent to process personal information, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
These rights are subject to applicable legal requirements and exemptions. For example, we may need to retain certain information to comply with legal obligations or to establish, exercise or defend legal claims.
12. How to exercise your rights or raise a concern
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact:
Data Protection & Privacy Enquiries
Lambshead Planning & Development
Email: admin@lambshead.co.uk
We will consider all requests and concerns carefully and respond in accordance with applicable data protection legislation.
We will normally respond to requests to exercise data protection rights within one month of receiving them. Where permitted by law, this period may be extended for particularly complex requests, and we will explain any extension.
We may request reasonable information to verify your identity before responding to a request involving personal information.
13. Complaints to a data protection authority
If you are concerned about how we have handled your personal information, we encourage you to contact us first so that we can investigate and seek to resolve the matter.
You also have the right to lodge a complaint with an appropriate supervisory authority.
As Lambshead Planning & Development is established in the Netherlands, our principal supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
Website: autoriteitpersoonsgegevens.nl
Where UK data protection legislation applies, you may also be entitled to raise a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom.
Website: ico.org.uk
You may also have the right to seek a judicial remedy under applicable data protection legislation.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business activities, legal requirements or the way we process personal information.
The latest version will be published on our website, with the date of the most recent update shown at the beginning of the policy.