Privacy Policy

This Privacy Policy explains how Lawal Ltd trading as STAAL & Co. (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website at https://staalandco.co.uk or engage our services.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Lawal Ltd trading as STAAL & Co., with its registered office at 3rd Floor, 86–90 Paul Street, London, EC2A 4NE.

You can contact us about data protection matters at: hello@staalandco.co.uk

2. What data we collect

We may collect the following personal data:

• Contact information — name, email address, and company name when you submit our contact form or email us directly
• Usage data — pages visited, browser type, device type, approximate country, and referring URLs, collected via a privacy-respecting analytics tool (Umami). No personal identifiers, IP addresses, or tracking cookies are stored.
• Communications — the content of messages you send us

3. How we use your data

We use the data we collect to:

• Respond to your enquiries and messages
• Provide and manage the services you have requested
• Improve and optimise our website
• Comply with our legal obligations

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — for responding to enquiries and communicating with prospective clients
• Contract performance — when processing is necessary to fulfil a contract with you
• Legal obligation — where processing is required by law

5. Data retention

We retain contact form submissions and email correspondence for up to 3 years unless you request earlier deletion, or unless a longer retention period is required by law.

6. Sharing your data

We do not sell your personal data to third parties. We may share your data with:

• Service providers who process data on our behalf (e.g., hosting, analytics, form processing), bound by appropriate data processing agreements
• Law enforcement or regulatory bodies where required by law

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (the “right to be forgotten”)
• Object to or restrict processing of your data
• Data portability in certain circumstances

To exercise any of these rights, please contact us at hello@staalandco.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies & analytics

This website does not use tracking or advertising cookies. We use Umami, a privacy-respecting analytics tool, to understand how the site is used in aggregate. Umami does not set persistent cookies, does not store IP addresses, and does not track visitors across other websites. Because no personal data is persisted, no cookie consent banner is required under UK GDPR or the Privacy and Electronic Communications Regulations.

Essential cookies may be used to ensure the site functions correctly (e.g., session continuity on forms). If we introduce any form of tracking that requires consent in future, we will update this policy and request your consent where required.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy, please contact us at: hello@staalandco.co.uk

3rd Floor, 86–90 Paul Street, London, EC2A 4NE