Privacy Policy

Alesta Global ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you visit our website at www.alestaglobal.co.uk or engage with our services.

This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (GDPR 2016/679), and the Privacy and Electronic Communications Regulations (PECR).

Alesta Global is an independent strategic advisory platform registered and operating in England and Wales.

Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For data protection enquiries, contact us at: info@alestaglobal.co.uk

We may collect the following categories of personal data:

• Identity data: name, job title, company name

• Contact data: email address, telephone number

• Technical data: IP address, browser type, operating system, pages visited, time and duration of visits

• Usage data: how you interact with our website and content

• Communications data: messages or enquiries sent via our contact form or email

• Marketing preferences: your choices regarding communications from us

Alesta Global does not knowingly collect sensitive personal data (special category data) unless voluntarily submitted through direct communication channels.

We use personal data for the following purposes:

• To respond to enquiries and provide advisory services

• To improve and analyse website performance and user experience

• To send relevant insights, newsletters or updates (only where consent has been given)

• To fulfil legal obligations and protect our legal rights

• To operate, maintain and improve our website

We rely on the following lawful bases under UK GDPR and GDPR:

• Consent — for marketing communications and non-essential cookies

• Legitimate interests — for website analytics and improving our services, where our interests are not overridden by your rights

• Contract — where processing is necessary to perform or enter into a contract

• Legal obligation — where processing is required by applicable law

We use cookies and similar technologies including web beacons and pixel tags. These may include:

• Strictly necessary cookies: essential for website functionality

• Functional cookies: remember your preferences

• Analytics cookies: Google Analytics (GA4) — subject to your consent under Google Consent Mode v2

• Marketing cookies: LinkedIn Insight Tag, Meta Pixel — only activated upon explicit consent

You may manage your cookie preferences at any time via our Cookie Consent Banner. For full details, please refer to our Cookie Policy.

Some of our third-party service providers may process data outside the UK or European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including adequacy decisions, Standard Contractual Clauses (SCCs) or binding corporate rules, in compliance with UK GDPR Article 46 and GDPR Chapter V.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Website enquiry data: retained for up to 3 years unless an ongoing relationship exists

• Analytics data: retained per the platform provider's default settings (typically 14 months for GA4)

• Marketing communications data: retained until consent is withdrawn

After the applicable retention period, data is securely deleted or anonymised.

Under applicable data protection law, you have the following rights:

• Right of access — to request a copy of your personal data

• Right to rectification — to correct inaccurate or incomplete data

• Right to erasure — to request deletion of your personal data

• Right to restriction — to limit how we process your data

• Right to data portability — to receive your data in a structured, machine-readable format

• Right to object — to object to processing based on legitimate interests or direct marketing

• Rights related to automated decision-making — not to be subject to solely automated decisions

To exercise any of these rights, contact us at info@alestaglobal.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

We may share data with carefully selected third parties, including:

• Google Analytics / Google Tag Manager

• LinkedIn Insight Tag

• Meta Pixel (Facebook)

• Calendly (scheduling)

• Email delivery providers

These providers operate under their own privacy policies. We do not sell personal data to third parties.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These include encrypted data transmission (HTTPS), access controls and regular security reviews. However, no transmission over the internet is completely secure.

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@alestaglobal.co.uk.

For privacy-related questions, data subject requests or concerns:

Alesta Global

71–75 Shelton Street

Covent Garden, London WC2H 9JQ

United Kingdom

Email: info@alestaglobal.co.uk

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The "last updated" date at the bottom of this page reflects the most recent revision. Continued use of the website following any changes constitutes acceptance of the updated policy.

ICO Registration: If you have concerns about how we handle your personal data, you can contact the Information Commissioner's Office at www.ico.org.uk or call 0303 123 1113.