Skip to main content
Fractional CTODevelopment TeamsAboutBlogBook a Call

Privacy Policy

Last updated: 1 April 2025

This Privacy Policy explains how Lawal Ltd trading as STAAL & Co. (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website at https://staalandco.co.uk or engage our services.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Lawal Ltd trading as STAAL & Co., with its registered office at 3rd Floor, 86–90 Paul Street, London, EC2A 4NE.

You can contact us about data protection matters at: hello@staalandco.co.uk

2. What data we collect

We may collect the following personal data:

  • Contact information — name, email address, and company name when you submit our contact form or email us directly
  • Usage data — pages visited, browser type, and referring URLs via website analytics (if enabled)
  • Communications — the content of messages you send us

3. How we use your data

We use the data we collect to:

  • Respond to your enquiries and messages
  • Provide and manage the services you have requested
  • Improve and optimise our website
  • Comply with our legal obligations

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

  • Legitimate interests — for responding to enquiries and communicating with prospective clients
  • Contract performance — when processing is necessary to fulfil a contract with you
  • Legal obligation — where processing is required by law

5. Data retention

We retain contact form submissions and email correspondence for up to 3 years unless you request earlier deletion, or unless a longer retention period is required by law.

6. Sharing your data

We do not sell your personal data to third parties. We may share your data with:

  • Service providers who process data on our behalf (e.g., hosting, analytics, form processing), bound by appropriate data processing agreements
  • Law enforcement or regulatory bodies where required by law

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (the “right to be forgotten”)
  • Object to or restrict processing of your data
  • Data portability in certain circumstances

To exercise any of these rights, please contact us at hello@staalandco.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

This website may use essential cookies to ensure it functions correctly. We do not use tracking or advertising cookies. If we introduce analytics cookies in future, we will update this policy and request your consent where required.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy, please contact us at: hello@staalandco.co.uk

3rd Floor, 86–90 Paul Street, London, EC2A 4NE