1. Introduction
Lamai Group Limited ("we", "us", "our"), a company registered in England and Wales (Company No. 16123642) with its registered office at 7 Copperfield Road, Coventry, West Midlands, England, CV2 4AQ, is committed to protecting the privacy and security of your personal data.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lamai.group and use our services. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Lamai Group Limited is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at:
- Email: contact@lamai.group
- Address: 7 Copperfield Road, Coventry, West Midlands, England, CV2 4AQ
3. Information We Collect
3.1 Information You Provide
- Contact information: name, email address, phone number, company name, and job title when you submit enquiry forms or request proposals.
- Business information: details related to your organisation's requirements when engaging our services.
- Communications: records of correspondence when you contact us via email or other channels.
3.2 Information Collected Automatically
- Device and browser information: IP address, browser type and version, operating system, device type.
- Usage data: pages visited, time spent on pages, referring URLs, click patterns.
- Cookies and similar technologies: as described in our Cookie section below.
4. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the UK GDPR:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications, non-essential cookies).
- Contractual necessity: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
- Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, website analytics), provided these do not override your rights.
- Legal obligation: Where processing is necessary to comply with a legal obligation.
5. How We Use Your Information
- To respond to your enquiries and provide requested information about our services.
- To deliver, maintain, and improve our products and services.
- To send you relevant business communications (with your consent where required).
- To analyse website usage and improve user experience.
- To comply with legal and regulatory obligations.
- To detect, prevent, and address security or technical issues.
6. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small data files placed on your device that help us improve our site and your experience.
6.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the website to function. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website by collecting information anonymously.
- Functional Cookies: Enable enhanced functionality and personalisation.
- Marketing Cookies: Used to track visitors across websites to display relevant advertisements.
6.2 Managing Cookies
When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site. You may also configure your browser settings to block or delete cookies.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- Service providers: Trusted third-party companies that assist us in operating our website and conducting our business (e.g., cloud hosting on Google Cloud Platform, analytics providers), bound by data processing agreements.
- Legal authorities: When required by law, regulation, or legal process.
- Business transfers: In connection with any merger, acquisition, or sale of company assets.
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
- Adequacy decisions by the UK Secretary of State.
- Other lawful transfer mechanisms under the UK GDPR.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typical retention periods:
- Enquiry data: Up to 24 months from last interaction.
- Contractual data: Duration of the contract plus 6 years.
- Analytics data: Up to 26 months (anonymised).
10. Your Rights
Under the UK GDPR, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing: Request limitation of how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at contact@lamai.group. We will respond within one month of receiving your request.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- AES-256 encryption at rest and TLS 1.3 encryption in transit.
- Regular security assessments and penetration testing.
- Access controls and employee training on data protection.
- Hosting on Google Cloud Platform with ISO 27001 certified infrastructure.
12. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of every website you visit.
14. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
15. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.