Privacy Policy
How LAG Consulting Ltd collects, uses, and protects your personal information.
LAG Consulting Ltd is committed to protecting your personal information and handling it with care, transparency, and respect. This policy explains what we collect, why we collect it, how we use it, and your rights under applicable data protection law — including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act, Chapter 586 of the Laws of Malta.
Who We Are
Data Controller: LAG Consulting Ltd
Company Registration: C 113479 (Malta)
Registered Office: Malta, Europe
Contact: info@lag-consulting.com
References to "LAG Consulting", "we", "us" or "our" are references to LAG Consulting Ltd. We are the data controller responsible for the personal information you provide through this website or in the course of our consulting work.
What Data We Collect
We collect only the personal data necessary for the specific purpose for which it is provided.
| Category | Examples | Source |
|---|---|---|
| Identity data | First name, surname | Website forms; direct correspondence |
| Contact data | Email address, telephone number | Website forms; direct correspondence |
| Professional data | Job title, company name, sector | Enquiry forms; client engagement |
| Communication data | Contents of messages sent to us | Contact form; email; meetings |
| Booking & scheduling data | Appointment date, time, contact details, meeting preferences, and any information submitted through booking forms | Scheduling platform; booking forms |
| Analytics data | Pages visited, device information, approximate location, browser type, traffic source, and website interaction data | Website analytics (where consent has been provided) |
| Financial data | General information about assets, insurance arrangements, or risk profile, where voluntarily shared | Client engagement process |
We do not collect special category data (as defined under Article 9 GDPR) unless strictly necessary, volunteered by you, and handled with heightened care. We do not collect payment card details directly.
Why We Collect It & Our Legal Basis
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| To respond to your enquiry or consultation request | Legitimate interests (Art. 6(1)(f)) |
| To deliver a requested document or resource | Consent (Art. 6(1)(a)) — given at point of submission |
| To deliver consulting services under an engagement agreement | Performance of a contract (Art. 6(1)(b)) |
| To introduce you to a specialist partner, where agreed | Consent (Art. 6(1)(a)) — explicit written disclosure given before introduction |
| To manage consultation bookings, introductory calls, and meeting requests | Legitimate interests or pre-contractual steps (Art. 6(1)(b) / Art. 6(1)(f)) |
| To provide a requested downloadable resource, guide, or reference document | Consent (Art. 6(1)(a)); where consent is given to follow-up communications, we will only contact you accordingly |
| To comply with legal, regulatory, or accounting obligations | Legal obligation (Art. 6(1)(c)) |
| To operate and improve our website (analytics, where consent given) | Consent (Art. 6(1)(a)) |
Where we rely on consent, you have the right to withdraw it at any time by contacting us at info@lag-consulting.com. Withdrawal does not affect the lawfulness of prior processing.
How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Enquiry / lead magnet submissions (no engagement follows) | 12 months from submission, unless you request earlier deletion |
| Client engagement records | 7 years from the end of the engagement |
| Correspondence (email, written) | 7 years where related to an engagement; 12 months otherwise |
| Analytics data (where consent given) | As per the analytics provider's own retention policy; typically 26 months |
Who We Share Your Data With
We do not sell, trade, or pass your personal data to third parties for marketing purposes. We may share your data in the following limited circumstances:
- Specialist broker or advisory partners — only where you have provided prior consent and we have disclosed the identity of the partner and the purpose of the introduction
- Service providers — including website hosting providers, analytics providers, booking and scheduling platforms, email providers, document storage providers, CRM tools, accounting software, and professional advisers. Where service providers process personal data on our behalf, they do so under appropriate contractual arrangements and are required to process personal data only in accordance with our instructions
- Professional advisers — including our accountants, auditors, and legal advisers, subject to professional confidentiality obligations
- Regulatory or legal authorities — where required by law, regulation, court order, or in connection with the prevention or detection of fraud
International Transfers
LAG Consulting Ltd is based in Malta, within the European Union. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms recognised under the GDPR.
Cookies
Our website uses cookies to enable core functionality and, where you have given consent, to analyse site usage. Analytics and non-essential cookies are used only where consent has been provided through the website cookie banner or consent mechanism.
- Strictly necessary cookies — required for the website to function. No consent required.
- Analytics cookies — used to understand how visitors interact with our site. Set only with your consent.
- Preference cookies — used to remember your consent choices.
You may withdraw cookie consent at any time by clearing your browser cookies and revisiting the site.
Your Rights
Under the GDPR and applicable Maltese law, you have the following rights:
- Right of access — to obtain a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data, subject to legal retention obligations
- Right to restriction — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, commonly used format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, to withdraw it at any time
To exercise any of these rights, please contact us at info@lag-consulting.com. We will respond within one calendar month.
If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), the competent supervisory authority in Malta. Contact details are available at idpc.org.mt.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encrypted communication channels, access controls, and careful selection of third-party processors.
While we take appropriate technical and organisational measures to protect personal data, no electronic transmission, platform, or storage system can be guaranteed to be completely secure. In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify the IDPC within 72 hours and, where required, inform you directly.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Where changes are material, we will take reasonable steps to notify you.