Privacy without theatre.

Who controls the information?

Martin R. E. Cardoso, trading as LAlite, is the data controller for information submitted through this website. Privacy requests are handled by the LAlite team through the protected contact form; the private destination address is not displayed publicly.

What is collected and why?

• Subscriptions: email address, consent record, confirmation or unsubscribe tokens and relevant timestamps, used to send LAlite product news, corrections and toolkit updates.
• Contact messages: email address, message, selected service or enquiry topic, delivery status and submission time, used to read and answer your enquiry.
• Security: normal technical request data may be processed temporarily by the hosting provider to operate and protect the service. For contact and subscription forms, the requesting address is converted into a salted one-way identifier, counted for abuse prevention, and deleted within 24 hours. It is not added to subscriber or message records.
• Human verification: the contact form creates a random, single-use verification record containing a non-reversible answer hash, issue time and expiry time. It expires after ten minutes and is removed automatically after its limited anti-abuse purpose has ended.

Lawful basis

Subscription emails rely on your consent. Handling a contact message relies on LAlite’s legitimate interest in responding to enquiries and maintaining accurate business correspondence.

Storage, sharing and retention

The School IT workbench keeps record drafts in the open page and does not submit them. Work plans are saved in your browser only when you select “Remember”. Use “Clear both plans and saved progress” in the workbench to remove them. Use fictional or non-sensitive details, especially on a shared device.

Website submissions are stored in a private Cloudflare-backed database. They are not published. When email delivery is active, a specialist transactional-email provider processes the address and message content needed to deliver confirmation, update or contact-notification emails. Subscriber information is kept until consent is withdrawn or the update service closes. Contact messages are normally retained for no longer than 12 months unless they are needed for an ongoing enquiry or legal obligation.

When you choose a Gumroad purchase link, you leave this website. Gumroad then handles the purchase under its own privacy terms. LAlite does not receive your payment-card details.

Your choices and rights

You may withdraw marketing consent at any time. Confirmation and marketing emails provide a free one-click unsubscribe route. You may also use the protected website contact form to ask for access, correction, erasure, restriction or a copy of your information, or to object where applicable.

You may complain to the UK Information Commissioner’s Office (opens in a new tab) if you believe personal information has been mishandled.

Website statistics and your choice

Cloudflare Web Analytics provides aggregate reports about visits, page views and website performance. This analytics service does not use cookies or browser local storage. Read about Cloudflare Web Analytics (opens in a new tab).

LAlite also counts external or direct page arrivals, page views, resource views, download requests, tool actions, service-enquiry starts, successfully stored enquiries and retailer-link clicks to improve this website. These counters store only the UTC day, an approved page or resource label, the type of action, a broad referral category and a total. They do not store names, email addresses, IP addresses, full referrer URLs, query strings, form text or a visitor identifier. Internal navigation is recorded separately from an arrival from search or another external source.

The counters do not identify unique people, confirm that a download finished or establish that a retailer purchase took place. No personal profile is built and the counts are not shared with advertising platforms.

From 20 October 2026, a separate country report groups these actions into daily country totals. The hosting network supplies an approximate country code; unavailable or conflicting information is grouped as “Unknown”. This report stores only the UTC day, country code, action type and total. It does not store IP addresses, precise locations or visitor identifiers, and it cannot reconstruct countries for earlier visits. VPNs and proxies may affect the country shown. The report is restricted to the LAlite owner.

Use the statistics control at the bottom of this page to switch these counters and Cloudflare Web Analytics off or on. Your choice takes effect after the page reloads. One first-party preference cookie, lalite_statistics, remembers only “on” or “off” for up to one year. It contains no visitor identifier. Browser Do Not Track and Global Privacy Control signals also disable the statistics.

Ordinary hosting and abuse-prevention processing continues to operate. The new event endpoint uses short-lived, in-memory request limits; requesting addresses are not written into its statistics table.

The embedded YouTube player may use cookies and process data when the video plays; see the Video section below.

Video

The Mia book section embeds a YouTube video using YouTube’s privacy-enhanced mode (youtube-nocookie.com). When the video plays, YouTube (Google) may set cookies and process data under its own privacy policy.