Skip to main content
Legal

Privacy Policy

How we handle personal data on this website, and the rights you have over it.

Last updated 11 October 2026

01

Who we are

This website is operated by Stratas Business Solutions LLP, trading as Stratas, a limited liability partnership registered in England and Wales under company number OC382058, with its registered office at 4 Greenfield Road, Holmfirth, England, HD9 2JT.

For the personal data described in this policy, we are the data controller. You can reach us about anything on this page at enquiries@stratas.co.uk.

02

What this policy covers

This policy covers personal data we handle through this website: the enquiry and demo request forms, the cookie consent record, and website analytics. It applies to visitors to stratas.co.uk.

It does not cover the data we process inside the Stratas and Data Forge platform on behalf of customers. That processing is governed by the agreement between Stratas and the customer, including our General Terms and any data processing agreement. In that context we act as a processor, and the customer is the controller.

03

Information we collect

What we do not collect

This is a marketing website, so a lot of the data people expect a website to hold simply is not here. We do not:

  • offer visitor accounts, so there are no usernames or passwords
  • take payments or hold card or bank details
  • collect precise location data
  • store raw IP addresses against form submissions or consent records
  • run advertising pixels, retargeting tags or cross-site tracking
  • buy personal data from list brokers or data enrichment services

Information you give us

When you book a demo, request information, or contact us through a form on this site, we collect the details you enter. Typically that is your name, work email address, company name, and whatever you choose to write in the message field. Where a form includes optional fields, you decide whether to complete them.

Your cookie choice

When you accept or decline analytics cookies, we record that choice so we can honour it and evidence it. The record contains the choice itself, the time you made it, the version of the cookie policy it applied to, a random identifier for your browser, your browser’s user agent string, and a one way cryptographic hash of your IP address. The hash lets us group repeated events without holding the address itself, and it cannot be reversed back into an IP address by us.

Analytics

If, and only if, you accept analytics cookies, we collect aggregate usage information through PostHog: pages viewed, referring page, approximate country, device and browser type, and how long a visit lasted. We do not record your screen, and we do not use PostHog’s automatic event capture. We also use Vercel Analytics, which measures page performance and traffic volume without setting cookies or identifying individual visitors.

Technical logs

Our hosting provider records standard request logs for security, troubleshooting and abuse prevention. These may include IP address, timestamp, requested URL and user agent.

If a page or form on the site fails, an error report is sent to our error monitoring service so we can fix it. Reports describe the technical fault, the page and your browser type. We remove names, email addresses, form contents and cookies before a report is sent.

04

How we use your information

  • Responding to you. Answering enquiries, arranging demos, and providing the information you asked for.
  • Managing our sales pipeline. Keeping a record of the conversation so colleagues can pick it up and so we do not ask you the same question twice.
  • Improving the website. Understanding in aggregate which pages people find useful, and where the site is confusing or slow.
  • Security and integrity. Detecting and preventing spam, abuse and attacks on the site.
  • Meeting our legal obligations. Including keeping a record of cookie consent, as required by UK data protection and privacy law.

We do not sell personal data, and we do not share it with third parties for their own marketing.

We do not use your enquiry or your website activity to train artificial intelligence models.

05

Our lawful bases for processing

Under UK GDPR we must have a lawful basis for each purpose. Ours are:

Lawful bases for processing
PurposeLawful basis
Replying to an enquiry or arranging a demoLegitimate interests, or steps taken at your request before entering a contract
Keeping a record of business contact and conversationsLegitimate interests in running and developing a business to business relationship
Analytics cookiesYour consent, which you can withdraw at any time
Visitor identification cookiesYour consent, which you can withdraw at any time
Site security, spam prevention and technical logsLegitimate interests in keeping the site available and secure
Keeping a cookie consent audit trailLegal obligation under UK data protection and privacy law

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded it is not, because the data involved is limited business contact information used in a way a business contact would reasonably expect. You can object to this processing at any time, as described in section 9.

06

Cookies and analytics

Essential cookies keep the site working and record your cookie choice. Analytics cookies are set only after you accept them, and you can change your mind at any time using the Cookie preferences link in the footer of every page.

Our Cookies Policy lists every cookie this site sets, what each one is for, how long it lasts, and how to turn it off.

07

Who we share information with

We use a small number of service providers to run this website. Each one processes data on our instructions under a contract, and none of them is permitted to use it for their own purposes.

Third party service providers
ProviderWhat they doPrivacy policy
VercelHosts the website and provides cookieless traffic analyticsvercel.com
SupabaseDatabase holding enquiry records, published content and the consent audit trailsupabase.com
SentryError monitoring: receives technical reports when part of the site fails, with names, email addresses, form contents and cookies removedsentry.io
PostHogWebsite analytics, loaded only after you accept analytics cookiesposthog.com
StorylaneInteractive product demos, loaded only after you accept analytics cookies or click to open a demostorylane.io
Google (YouTube)Video playback, loaded only when you press play on a videopolicies.google.com

We may also disclose information where we are required to by law, or where it is necessary to establish, exercise or defend legal claims. If our business or part of it were sold or reorganised, information could transfer to the new owner, who would remain bound by this policy.

08

How long we keep information

Data retention periods
InformationRetention period
Enquiry and demo request records36 months
Cookie consent records12 months
Server request logs30 days
Analytics dataHeld in aggregate by PostHog and Vercel according to their retention settings; not linked to a named individual by us
Your cookie choice, stored in your browser12 months, or until you clear your browser data

Where you become a customer, records relating to the contract are kept for as long as the relationship lasts and then for the period required by tax and company law.

09

Your rights

Under UK and EU data protection law you have the right to:

  • ask what personal data we hold about you and get a copy of it
  • have inaccurate data corrected and incomplete data completed
  • ask us to delete your data, where there is no overriding reason for us to keep it
  • ask us to restrict how we use your data while a concern is resolved
  • object to processing we carry out on the basis of legitimate interests
  • receive data you gave us in a portable format, where processing is based on consent or a contract
  • withdraw consent at any time, without affecting anything done before you withdrew it

To exercise any of these, email enquiries@stratas.co.uk. We will respond within one month. We may ask you for enough information to be confident we are dealing with the right person, although in most cases the small amount of data we hold makes that straightforward.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you are in the EEA, you can complain to your local supervisory authority. We would appreciate the chance to address your concern first.

10

International transfers

This website and its database are hosted in United Kingdom (London).

Some of our service providers are based outside the United Kingdom, or may process data outside it. Where personal data is transferred out of the UK or EEA, we rely on the safeguards permitted by law: an adequacy decision covering the destination country, or contractual protections in the form of the UK International Data Transfer Agreement or Addendum and the European Commission’s Standard Contractual Clauses.

11

Children

This website and our services are aimed at businesses, not children. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted information to us, contact us and we will delete it.

12

Security

The site is served over HTTPS, so traffic between your browser and us is encrypted in transit. Data at rest is encrypted by our hosting and database providers. Access to enquiry records is limited to Stratas staff who need it, protected by individual accounts and multi factor authentication.

Because the site has no visitor accounts and takes no payments, there are no visitor passwords or card details to be exposed. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours and tell you without undue delay where the law requires it.

13

Changes to this policy

We update this policy when our practices change. The date at the top of the page shows when it was last revised. Where a change materially affects how we use cookies, the cookie banner reappears so you can make a fresh choice.

14

Contact us

Questions about this policy, or about the data we hold, go to enquiries@stratas.co.uk, or write to us at 4 Greenfield Road, Holmfirth, England, HD9 2JT.

Given the size of our organisation and the nature of our processing, we are not required to appoint a Data Protection Officer. Privacy enquiries are handled by the address above.