Privacy Notice — website enquiries

What we collect

When you submit a contact, consultation, partnership or resource form, we store the details you provide (such as your name, email address, phone number, the service you are interested in, your message, and, if collected, your preferred contact method and marketing consent).

To respond, route your enquiry and measure our campaigns, we record first-party marketing context: the page you first arrived on and the page you submitted from, the referring website and its domain, a derived source category (for example direct, organic search, paid search, social, referral, email or internal campaign), any UTM parameters, and recognised advertising click identifiers (such as gclid, gbraid, wbraid, fbclid, msclkid or ttclid) when they are genuinely present in your link.

We also record a limited, same-visit record of your on-site engagement: the pages you viewed on our site, their titles, approximate time spent, whether you visited key pages, whether you had opened a form before, first-time versus returning status, a locally-observed visit count, and the site language you used. We do not import browsing history from other websites.

From trusted network signals we record approximate location (city, region and country, not a precise GPS location), timezone, your network provider’s organisation name and ASN, and coarse device, browser and operating-system information. We do not build a device fingerprint.

We store only a salted, one-way hash of your IP address for rate-limiting and abuse prevention. We do not store your raw IP address, and we do not store the anti-bot (Turnstile) token.

How we use it

We use this information to respond to and route your enquiry, to understand which service you are asking about, to measure which campaigns and channels bring genuine enquiries, for internal management reporting, and to keep the forms secure against spam and automated abuse.

Any prioritisation of enquiries is based only on what you expressed, how complete your enquiry is and your engagement with our pages. We do not make automated decisions about your eligibility, and we do not profile you using sensitive or protected characteristics.

We do not use enquiry data for third-party advertising, we do not perform cross-site tracking or fingerprinting, and we do not sell your enquiry data.

Who can see it

Enquiry data is restricted to authorised LaGrace staff through an access-controlled admin area. A copy of each enquiry is emailed to our internal enquiries address. We never expose enquiry contents through public pages, public APIs, analytics or error messages.

Retention & your rights

We keep enquiries for up to 365 days, after which they are permanently deleted. You may ask what information we hold about you and request its deletion by contacting LaGrace.