Who we are
This website is operated by StarLaing Ltd, registered in england and wales (company number 15526872). We are the controller of the personal data you send us through the enquiry form.
What we collect
When you send an enquiry we receive:
- your name, email address and, if you give it, your organisation
- the kind of help you're interested in and your description of what you need
- your confirmation that you've read this notice, with the time it was given
- the page you came from, so we understand how people find us
We also store the website path you used to reach the form (for example /services) and, if it is an external site, the hostname that referred you. We do not keep marketing tags or other details from the address bar.
To protect the form from abuse and limit repeated submissions, we keep a one-way scrambled (hashed) version of your IP address and your browser type. We don't store your IP address itself, and we don't use either to identify you.
How we use it
We use your details only to respond to your enquiry, to arrange a conversation and, if you decide to work with us, to prepare a proposal. We rely on our legitimate interest in responding to business enquiries, and on taking steps you've asked for before entering into a contract.
We don't sell your details, and we don't add you to marketing lists.
Who can see it
Your enquiry is stored in StarLaing's private lead inbox, which only signed-in StarLaing team members can open. Each enquiry is assigned to the person who will respond to it. The inbox and this website are hosted by service providers who process your details only on our instructions.
How long we keep it
We review website enquiries by hand each quarter and delete them at the first quarterly review after they reach the times below.
- If we are still working on your enquiry, we keep it for 24 months after a StarLaing team member last worked on it, including a staff note.
- If we take the enquiry forward as work, we delete the website enquiry 90 days after that conversion. We keep the organisation, person and opportunity records we need to do the work.
- Unsolicited or blocked submissions are kept for 90 days from the day we received them.
- Enquiries we decide not to take forward are kept for 24 months from that decision.
We have not yet set a separate lifetime for an enquiry that no team member has yet worked on. Those stay on an internal exception list until we start work or decide another dated action.
We keep a short internal record that an enquiry existed and was deleted. We have not yet set a separate lifetime for that audit record.
Encrypted backups in the EU are locked for 35 days (daily) or 365 days (monthly). They become eligible for deletion at 36 days (daily) or 366 days (monthly). A backup taken before we delete an enquiry can still contain it until that backup is actually deleted.
Cookies
This website doesn't use advertising or analytics cookies.
Your rights
You can ask to see, correct or delete the personal data we hold about you, or object to how we use it. To make a request, please use the contact form. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
