Privacy Policy
The short version. If you send us an enquiry we collect your name, email address and message so we can reply to you. We do not sell your data, we do not share it for anyone else's marketing, and we keep only what we need. Analytics cookies are off until you turn them on. You can ask us to show you, correct, or delete what we hold at any time by emailing privacy@strativeritas.com.
1. Who we are
This website is operated by StratiVeritas Limited ("StratiVeritas", "we", "us", "our"), a company registered in England and Wales under company number 17200455, with its registered office at 100 Menzies Road, St Leonards-on-Sea, TN38 9BB, United Kingdom.
For the personal data described in this policy, StratiVeritas Limited is the data controller. We are registered with the Information Commissioner's Office (ICO) under registration number ZC143428.
This policy covers strativeritas.com and any enquiry you send us through it. Where you become a customer of one of our products, a separate product privacy notice and data processing agreement will apply, and we will give you those before you sign up.
Questions about this policy, or about how we handle your data, go to privacy@strativeritas.com.
2. What we collect
How the enquiry form works. When you press Send Enquiry, your browser sends the form to our website, which passes it to Resend, our email delivery provider, to deliver into our enquiries mailbox. Resend handles your message only in order to deliver it — it is not used for marketing and holds no mailing list of ours. Nothing about your enquiry is stored in your browser, and the website itself keeps no copy. If the form cannot be sent for any reason, it falls back to opening your own email application with the message pre-filled, so an enquiry is never silently lost — in that case nothing reaches us until you press send yourself. You are always welcome to email us directly instead.
Information you give us
When you complete the enquiry form or email us, we collect:
- Your name and email address — required, so we can identify you and reply
- Your company or organisation — optional
- The product you are interested in — so your enquiry reaches the right person
- The content of your message, and of any later correspondence between us
Please do not include special category data (such as health, ethnicity, religious or political views, or biometric data) or anyone else's personal details in a general enquiry. We do not need it and would rather not receive it.
Information collected automatically
Like nearly all websites, our hosting infrastructure records technical information each time a page is requested. This typically includes your IP address, the date and time, the page requested, the referring page, and your browser and operating system version. These logs exist for security and to keep the site running reliably.
We do not currently run analytics on this site at all. If we add it, it would collect information about how you use the site — which pages you visit, how long you spend on them — and it would run only for visitors who had already opted in. See our Cookie Policy.
Information we do not collect
We do not buy personal data from third parties, we do not scrape it, and we do not operate a data broker relationship of any kind. We do not run advertising on this website.
3. Why we use it, and our lawful basis
Under the UK GDPR we must have a lawful basis for each use of your personal data. Ours are set out below.
| What we do | Data used | Lawful basis |
|---|---|---|
| Reply to your enquiry and have a conversation about our products | Name, email, company, product interest, message | Legitimate interests — you contacted us and expect a reply; responding to enquiries is fundamental to running a business, and has minimal privacy impact |
| Register your interest in a product that is still in development, and tell you when it becomes available | Name, email, product interest | Consent — you tick the box asking us to keep you updated, and you can withdraw at any time |
| Keep the website secure, prevent abuse, and diagnose faults | Server log data, including IP address | Legitimate interests — protecting our systems and our visitors |
| Understand how the site is used so we can improve it (not currently active) | Analytics cookie data | Consent — would be collected only if you opt in, and withdrawable at any time |
| Keep business records, and establish or defend legal claims | Correspondence | Legal obligation and legitimate interests |
Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interest does not override your rights and freedoms. You can ask us for a summary of that assessment, and you can object to the processing — see Your rights.
We will not send you marketing about unrelated products, and we will not add you to a mailing list simply because you asked us a question.
4. Cookies
We use a small number of strictly necessary cookies and browser storage entries to make the site work — remembering your cookie preferences. These do not track you and cannot be turned off.
No analytics or marketing provider is currently installed, and analytics and marketing cookies are switched off by default in any case. Nothing non-essential is set until you actively choose to allow it. You can change your mind at any time using the Cookie settings link in the footer of every page.
Full detail is in our Cookie Policy.
5. Who we share it with
We do not sell your personal data, and we never will. We do not share it with third parties for their own marketing purposes.
We do share it with a small number of service providers who process it on our behalf, under written contracts that require them to keep it secure and use it only on our instructions. These fall into the following categories:
- Website hosting and content delivery — to serve the site and retain security logs
- Enquiry delivery — Resend (resend.com), which transmits the enquiry from our website to our mailbox. It handles the message in transit only; it is not used for marketing and keeps no mailing list of ours.
- Business email — our mailboxes are hosted by Namecheap (Private Email), which is where your enquiry lands
- Professional advisers — lawyers, accountants and insurers, where genuinely necessary
That is the complete list. We do not currently use a website analytics provider. If we add either, we will name it on this page before it goes live.
We may also disclose personal data where we are legally required to — for example in response to a valid court order, or to a regulator or law enforcement body acting within its powers. We will resist requests that appear to us to be overreaching, and will tell you about a request unless we are prohibited from doing so.
If our business is sold or reorganised, personal data may transfer to the buyer as part of that transaction. We would notify you and the buyer would remain bound by this policy.
6. International transfers
We aim to keep personal data in the UK or the European Economic Area. Some of our service providers are based outside the UK, principally in the United States, which means your data may be transferred and stored there. Our enquiry delivery provider, Resend, is based in the United States, so an enquiry sent through the form is processed there in the course of being delivered to us. That transfer is made under the safeguards required by UK GDPR for transfers outside the UK.
Where that happens, we make sure one of the safeguards required by Chapter V of the UK GDPR is in place — normally UK adequacy regulations, or the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses, together with an assessment of the risk in the destination country.
You can ask us for a copy of the safeguards we rely on by emailing privacy@strativeritas.com.
7. How long we keep it
We keep personal data only for as long as we actually need it.
| What | How long | Why |
|---|---|---|
| Enquiries that do not lead anywhere | 24 months from your last message | So we recognise you if you come back, and can show how a contact arose |
| Enquiries that lead to a commercial relationship | For the relationship, then 6 years | Limitation Act 1980, and tax record-keeping requirements |
| Product-update sign-ups | Until you withdraw consent, or after 24 months of no engagement | Consent should not be treated as indefinite |
| Server and security logs | Up to 12 months | Security monitoring and fault diagnosis |
| Analytics data (none held — analytics is not currently in use) | Up to 14 months if introduced | Year-on-year comparison, then deletion |
| Your cookie preference | 6 months, then we ask again | Consent should be refreshed periodically |
At the end of these periods we delete the data, or anonymise it so it can no longer be linked to you.
8. How we protect it
We take appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS across the whole site), access controls and multi-factor authentication on our accounts, keeping access limited to the people who need it, and keeping our software patched.
No system is perfectly secure, and we will not pretend otherwise. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it, and tell you directly where the risk is high.
9. Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your data — that is what this policy is for
- Access a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected, or incomplete data completed
- Erasure — ask us to delete your data, where there is no good reason for us to keep it
- Restrict processing — ask us to pause using your data while a concern is resolved
- Data portability — receive data you gave us in a structured, machine-readable format
- Object to processing based on legitimate interests, including any direct marketing — if you object to direct marketing we must stop, with no exceptions
- Withdraw consent at any time, where we relied on consent; this does not affect anything done before you withdrew it
To exercise any of these, email privacy@strativeritas.com. We will respond within one month. If your request is especially complex we may extend that by up to two further months, and we will tell you within the first month if so. Exercising your rights is free; we will only charge a fee, or refuse, if a request is manifestly unfounded or excessive, and we will explain why if that happens.
We may ask you to confirm your identity before we act, so we do not disclose your data to someone else.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
We would appreciate the chance to deal with your concerns first, so please do contact us before going to the ICO.
10. Automated decisions and profiling
We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you, and we do not profile visitors to this website.
Our products use artificial intelligence, and where an AI system processes personal data as part of a product you have purchased, that will be described in the relevant product documentation and data processing agreement before you use it. Nothing in this website's enquiry process feeds an AI model, and we do not use enquiry content to train AI models.
11. Children
This website and our business products are intended for adults acting in a business capacity, and are not directed at children. We do not knowingly collect personal data from anyone under 18 through this site. If you believe a child has given us their data, email privacy@strativeritas.com and we will delete it.
12. Changes to this policy
We review this policy regularly and may update it — for example when we add a service provider or launch a new product. The "last updated" date at the top always reflects the current version. If we make a change that materially affects how we use your data, we will take reasonable steps to tell the people affected directly rather than relying on you to notice.
13. How to contact us
Privacy and data protection: privacy@strativeritas.com
General enquiries: enquiries@strativeritas.com
By post:
Data Protection, StratiVeritas Limited
100 Menzies Road, St Leonards-on-Sea, TN38 9BB, United Kingdom
We have not appointed a statutory Data Protection Officer, as we are not required to. Privacy questions are handled by our director.