Privacy Statement

Last updated: 27 October 2026

This Privacy Statement explains how LKS Consult OÜ (“LKS Consult”, “we”, “us”) processes personal data when you visit lksconsult.com, contact us or enquire about our services.

1. Who is responsible for your data?

The controller responsible for the processing described in this statement is:

LKS Consult OÜ
Pärnu mnt 105, 11312 Tallinn, Estonia
Email: [email protected]
Telephone: +372 677 5456

Please contact us using these details if you have questions about this statement or wish to exercise your data protection rights.

2. What personal data do we collect?

Depending on how you interact with us, we may process:

• Contact details: your name, email address, telephone number and preferred communication channel.
• Business and enquiry details: company name, country, intended business activity, selected service or package, and information you include in your message.
• Correspondence: enquiries, quotations, appointments and subsequent communications.
• Technical information: IP address, browser and device information, requested pages, timestamps and information needed to operate and protect the website.
• Usage and advertising information: visits, interactions, referral sources, campaign parameters and advertising click identifiers, where collected under the applicable consent settings and legal basis.
• Privacy preferences: your consent choices and records needed to demonstrate or respect those choices.

We obtain information directly from you, through your use of the website and, where relevant, from someone contacting us on behalf of your organisation.

Please do not include passport copies, identification numbers, financial documents or sensitive personal information in a general enquiry. If these are needed for a particular service, we will explain the purpose and appropriate submission method separately.

3. Why do we process your data?

Responding to enquiries and preparing services

We use your contact details and enquiry information to answer questions, assess your requirements, prepare quotations and take steps you request before entering into a contract.

Where you are the prospective contracting individual, the legal basis is Article 6(1)(b) GDPR. Where you contact us on behalf of a company, we rely on our legitimate interests in handling business enquiries and communicating with company representatives under Article 6(1)(f) GDPR.

Providing and administering services

We process information necessary to perform our agreement, communicate with you and administer the customer relationship. Depending on the relationship, this is based on contract performance or our legitimate interests in managing services for business customers.

If a service requires identity verification, regulatory checks or additional personal data, we will provide relevant information when that data is requested.

Meeting legal obligations

We process and retain information where necessary to comply with applicable legal obligations, including accounting, tax and regulatory requirements. The legal basis is Article 6(1)(c) GDPR.

Website operation and security

We process technical information to deliver the website, maintain its functionality, investigate faults and protect against spam, fraud and unauthorised access.

Our legitimate interests are maintaining a reliable website and protecting our systems and communications. Where a particular technology requires consent under applicable law, we obtain that consent.

Analytics and advertising measurement

We use Google Analytics and Google Ads to understand website use and assess advertising performance. Where consent is required, the legal basis is Article 6(1)(a) GDPR together with applicable rules governing cookies and similar technologies.

Marketing communications

Submitting an enquiry does not, by itself, constitute consent to unrelated marketing.

Where we send promotional communications, we do so on the basis of consent or another basis permitted by applicable electronic marketing rules. You can object to direct marketing at any time by contacting us or using an available unsubscribe link.

4. Forms and customer relationship management

Our website uses HubSpot for enquiry forms and customer relationship management.

Information submitted through a form is processed so that we can receive your request, assign it to the appropriate team member, respond and manage subsequent communications.

Refusing optional analytics or advertising cookies does not prevent us from processing information you voluntarily submit to request a response.

For information about HubSpot’s processing, see the HubSpot Privacy Policy.

5. Cookies, Google services and consent choices

Our website uses cookies and similar technologies for website functionality, privacy preferences, analytics and advertising measurement.

You can accept or reject optional categories through the cookie controls. You can change your choices through the cookie settings available on the website. Your browser also allows you to manage stored cookies.

We use Google Tag Manager to manage website tags. The purposes and consent requirements depend on the individual services deployed through it.

Google Analytics helps us understand visits and interactions. Google Ads helps us measure advertising activity and conversions. Depending on your choices and the configuration, information processed may include technical details, page visits, interactions and advertising identifiers.

The website uses Google Consent Mode. When optional storage is refused, Google tags may still transmit limited consent and measurement signals without setting or reading the refused analytics or advertising cookies. Cookie-free transmission does not necessarily mean that no personal data is processed.

You can read more about Google’s processing at How Google uses information from sites or apps that use its services.

6. Spam protection

Our forms use Google reCAPTCHA to help distinguish genuine enquiries from automated abuse.

This service processes technical and interaction information for risk analysis and may use cookies. Further information is available in the Google Privacy Policy and Google Terms of Service.

7. Who may receive your data?

Where necessary for the purposes described above, recipients may include:

• Authorised members of our team.
• Website hosting, infrastructure, security and technical support providers.
• HubSpot and providers supporting our forms, CRM and communications.
• Google, in connection with the services described above.
• Professional advisers and service partners involved in a service you request.
• Public authorities or other recipients where disclosure is required by law.

Depending on their role, recipients may act as processors on our instructions or as independent controllers responsible for their own processing.

If you choose to contact us through WhatsApp or another external platform, that provider also processes information under its own privacy terms.

8. International transfers

Some service providers may process personal data outside the European Economic Area, including in the United States.

[Before publication: identify the transfer safeguards actually applicable to your provider agreements, such as a relevant European Commission adequacy decision or Standard Contractual Clauses, together with any necessary supplementary measures.]

You may contact us for information about the safeguards applicable to your data and how to obtain a copy, subject to appropriate protection of confidential information.

9. How long do we retain your data?

We determine retention periods according to the purpose of processing, the status of our relationship, applicable legal requirements and the need to establish, exercise or defend legal claims.

• Enquiries and correspondence: retained while needed to handle your request and relevant follow-up, and afterwards only where a continuing business or legal need justifies retention.
• Customer and transaction records: retained for the relationship and the periods required by applicable accounting, tax or other legal obligations.
• Technical and security records: retained for the period needed to investigate incidents, maintain security and operate the relevant systems.
• Analytics and advertising information: retained according to the applicable service settings and documented measurement purposes.
• Consent records and marketing preferences: retained where needed to demonstrate consent and respect withdrawals or objections.

Data should be deleted or anonymised when the relevant retention need ends.

10. Your rights

Subject to the conditions and exceptions in applicable law, you may request:

• Access to your personal data.
• Correction of inaccurate or incomplete information.
• Erasure of your data.
• Restriction of processing.
• Portability of data where applicable.
• An objection to processing based on legitimate interests.

You may object to direct marketing at any time.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, email [email protected]. We may request information reasonably necessary to verify your identity. We normally respond within one month; where a lawful extension is necessary, we will explain the reason.

You also have the right to complain to a supervisory authority, including the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon, at aki.ee, or the authority in the country of your habitual residence, workplace or the alleged infringement.

11. Is providing information mandatory?

You can browse the website without submitting an enquiry.

When you request a response or service, we need sufficient contact information and details to handle your request. Without necessary information, we may be unable to respond, prepare a quotation or provide the requested service.

Optional marketing consent is separate from the information needed to handle your enquiry.

12. Changes to this statement

We may update this Privacy Statement to reflect changes to our services, processing activities or legal requirements. The latest version will be published on this page with an updated revision date.

For questions about this statement, contact [email protected].