Privacy Policy
How we handle personal information collected through this website and through enquiries made to our Carlsbad office.
Last updated: August 4, 2026
On this page
- Who we are
- Scope of this policy
- Information we collect
- How we use information
- Legal bases and consent
- When we share information
- Cookies and analytics
- Advertising and conversion measurement
- Video, access control and client site data
- How long we keep information
- How we protect information
- Your California privacy rights
- Children's privacy
- Do Not Track and Global Privacy Control
- Third-party links
- Changes to this policy
- How to contact us
1. Who we are
Ledgestone Security Partners ("Ledgestone", "we", "us" or "our") is a commercial security systems integrator operating from 1958 Holden Street, Carlsbad, CA 92009, United States. Our principal is Stephanie Heckler. We can be reached at security@lgsspk.com or 619-248-8258. This policy explains how we handle personal information collected through lgsspk.com and through enquiries made to us by phone or email.
2. Scope of this policy
This policy covers information collected through this website and information you send us when you request a quote, book a site assessment or contact our service desk. It does not cover information we process on behalf of a client under a signed services agreement — in that situation the client is the controller of the data and their own privacy notice applies. Section 9 explains that distinction in more detail.
3. Information we collect
3.1 Information you give us
- Contact details — name, company, work email address and telephone number submitted through the enquiry form or sent to us by email.
- Property details — the address, property type and description of your security concern, plus any floor plans, photographs or existing system documentation you choose to send.
- Correspondence — the content of emails, voicemails and service tickets exchanged with us.
- Commercial records — for clients, the billing contact, purchase orders and payment records required to run the account.
3.2 Information collected automatically
- Technical data — IP address (truncated where our analytics provider supports it), browser type and version, operating system, device type, screen size, referring URL and the pages you view.
- Usage data — time on page, scroll depth, outbound clicks and whether you started or submitted the enquiry form.
The enquiry form on this site opens your own email client with the details pre-filled; the website itself does not store form submissions in a database.
4. How we use information
| Purpose | Information used |
|---|---|
| Responding to your enquiry and scheduling a site walk | Contact details, property details, correspondence |
| Preparing proposals, permits and project documentation | Contact and property details, commercial records |
| Delivering installation, monitoring and maintenance services | Contact details, site and system records |
| Invoicing, accounting and statutory record keeping | Commercial records |
| Understanding which pages help visitors and improving the site | Technical and usage data, in aggregate |
| Measuring the effectiveness of our advertising | Technical and usage data, conversion events |
| Preventing fraud, abuse and unauthorised access | Technical data, correspondence |
We do not sell personal information, and we do not share it with third parties for their own cross-context behavioural advertising as those terms are defined by the California Consumer Privacy Act.
5. Legal bases and consent
Where consent is required — for example, for non-essential analytics and advertising cookies — we ask for it through the cookie banner before those cookies are set, and you can withdraw it at any time using the "Cookie settings" link in the footer. Where you contact us about our services, we process your details to take steps at your request and to pursue our legitimate interest in responding to business enquiries. Some processing, such as retaining invoices, is necessary to comply with tax and contractual record-keeping obligations.
6. When we share information
We share personal information only with parties that help us operate the business, and only to the extent needed:
- Web hosting and email providers that store this website and our correspondence.
- Analytics and advertising platforms described in section 7 and section 8.
- Our UL-listed central monitoring station, for monitored accounts — the call list and site details you authorise.
- Accounting, insurance and legal advisers under duties of confidentiality.
- Public authorities where we are legally required to respond to a valid subpoena, warrant or court order.
We require service providers to process information only on our instructions and to keep it confidential. We do not transfer personal information outside the United States except where a provider's infrastructure requires it, in which case we rely on contractual safeguards.
7. Cookies and analytics
This site uses a small number of cookies and similar technologies. Essential storage keeps the site working and records your cookie choice; analytics cookies are set only after you accept them. Full detail, including names and lifetimes, is in our Cookie Policy.
8. Advertising and conversion measurement
We advertise our services on search engines, including Microsoft Advertising and Google Ads. With your consent, those platforms may set cookies or use similar identifiers so that we can measure how many people who clicked an advertisement went on to contact us. This measurement is reported to us in aggregate. We do not upload customer lists for advertising purposes, and we do not permit advertising partners to use information collected on this site to build profiles for unrelated purposes. If you decline non-essential cookies, conversion measurement does not run.
You can review or adjust the advertising preferences held by these platforms at the Microsoft advertising preferences page and the Google Ads settings page.
9. Video, access control and client site data
When we install or service a system at a client property, any recorded video, access-control events or alarm history belong to that client. Ledgestone acts as a service provider: we access that data only when the client asks us to, or when it is necessary to diagnose a fault, and we do not copy, retain or use it for any other purpose. Clients remain responsible for posting appropriate notice, for camera placement that respects reasonable expectations of privacy, and for setting a lawful retention period. We advise on all three and provide sample notice wording, but we do not control those decisions. Audio recording is disabled by default on systems we install because California law generally requires all-party consent.
10. How long we keep information
| Record type | Retention |
|---|---|
| Enquiries that do not become projects | 24 months from last contact |
| Client project files and as-built documentation | Life of the system plus 7 years |
| Invoices and accounting records | 7 years, as required for tax purposes |
| Website analytics | 14 months, in aggregate form |
| Cookie consent record | 12 months, stored in your browser |
11. How we protect information
This site is served over HTTPS. Internally we use multi-factor authentication on email and business systems, role-based access so staff see only what their job requires, encrypted laptops, and a documented off-boarding checklist. No method of transmission or storage is completely secure, so we ask that you do not send sensitive material such as alarm codes or credentials by email. If we become aware of a breach affecting personal information, we will notify affected individuals and any required authority without unreasonable delay.
12. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended gives you the right to:
- know what categories of personal information we have collected, the sources, the purposes and the categories of recipients;
- request a copy of the specific pieces of personal information we hold about you;
- request deletion of your personal information, subject to legal record-keeping exceptions;
- request correction of inaccurate personal information;
- opt out of the sale or sharing of personal information — we do not sell or share personal information, so there is nothing to opt out of; and
- not be discriminated against for exercising any of these rights.
To make a request, email security@lgsspk.com with "Privacy request" in the subject line, or call 619-248-8258. We will acknowledge within 10 business days and respond within 45 days, extending once by a further 45 days where a request is complex. We verify requests by matching the details you provide against our records and, where necessary, by asking a follow-up question through a channel already on file. An authorised agent may act on your behalf with written permission.
13. Children's privacy
Our services are sold to businesses and property owners. This website is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.
14. Do Not Track and Global Privacy Control
There is no common industry standard for responding to browser Do Not Track signals. We do honour the Global Privacy Control signal: where your browser sends GPC, we treat it as an instruction to decline non-essential cookies for that browser.
15. Third-party links
This site links to a small number of external resources, including a Google Maps embed on the contact page and manufacturer documentation. Those services have their own privacy policies and we are not responsible for their practices.
16. Changes to this policy
We review this policy at least annually and whenever we change how we handle personal information. The "last updated" date at the top always reflects the current version. Material changes are announced on this page for at least 30 days.
17. How to contact us
Ledgestone Security Partners
Attn: Stephanie Heckler, Principal
1958 Holden Street, Carlsbad, CA 92009
Phone: 619-248-8258
Email: security@lgsspk.com
If you are not satisfied with our response, you may lodge a complaint with the California Privacy Protection Agency or the Office of the California Attorney General.