1. Who we are
Lestari Project Services Ltd ("Lestari", "we", "us", "our") is a company registered in England and Wales. Our registered office is in the United Kingdom. We provide professional project management and cost consultancy services.
We are the data controller for personal data collected through this website. If you have any questions about this policy or how we handle your data, please contact us at [email protected].
2. What data we collect
We collect personal data in the following ways:
- Contact form submissions: when you submit an enquiry through our website, we collect your name, email address, telephone number (if provided), organisation name (if provided), and the content of your message.
- Analytics data: we use Google Ads and Google Analytics tags to understand how visitors interact with our website. This may include your IP address, browser type, pages visited, and referring URLs. This data is processed by Google in accordance with their privacy policy.
- Cookies: our website uses cookies to support analytics and advertising functionality. See Section 6 for more detail.
3. How we use your data
We use the personal data we collect for the following purposes:
- To respond to your enquiry and communicate with you about our services.
- To assess whether our services are a suitable fit for your requirements.
- To improve our website and marketing activity using aggregated, anonymised analytics data.
- To comply with legal obligations.
We will not use your personal data for any purpose that is incompatible with the purpose for which it was collected without first obtaining your consent.
4. Legal basis for processing
We rely on the following legal bases under UK GDPR:
- Legitimate interests: processing your enquiry and following up on it is necessary for our legitimate business interests in providing consultancy services.
- Consent: where you have provided explicit consent (for example, by accepting cookies for analytics purposes).
- Legal obligation: where we are required to process data to comply with a legal requirement.
5. How long we keep your data
We retain enquiry data for up to three years from the date of last contact, unless a longer retention period is required by law or by the nature of any contract entered into. After this period, data is securely deleted.
6. Cookies
Our website uses the following types of cookies:
- Essential cookies: required for the website to function correctly.
- Analytics cookies: used by Google Analytics to collect anonymised data about how visitors use our website.
- Advertising cookies: used by Google Ads to measure the effectiveness of our advertising campaigns and to serve relevant advertisements.
You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.
7. Sharing your data
We do not sell your personal data. We may share it with the following categories of third party where necessary:
- Email delivery providers: we use Resend to deliver contact form notifications to our team. Resend processes data on our behalf as a data processor.
- Google: analytics and advertising data is processed by Google LLC in accordance with their privacy policy and standard contractual clauses.
- Professional advisers: solicitors, accountants, and insurers where necessary for legal or compliance purposes.
8. Your rights
Under UK GDPR, you have the following rights:
- The right to access the personal data we hold about you.
- The right to have inaccurate data corrected.
- The right to have your data erased in certain circumstances.
- The right to restrict or object to processing.
- The right to data portability.
- The right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS with an active SSL certificate.
10. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after any changes constitutes acceptance of the updated policy.
Questions about this policy? Contact us.
