Products
See how Stratas automates AP for mid-market finance teams.
Stratas connects to 100+ ERPs. Start with the system you run.
Proof
Find out what Stratas could save your team.

How Smeg built an efficient, transparent invoice process with Stratas.
Talk to our team about what Stratas could do for you.
Privacy Policy
How we handle personal data on this website, and the rights you have over it.
Last updated 11 October 2026
Who we are
This website is operated by Stratas Business Solutions LLP, trading as Stratas, a limited liability partnership registered in England and Wales under company number OC382058, with its registered office at 4 Greenfield Road, Holmfirth, England, HD9 2JT.
For the personal data described in this policy, we are the data controller. You can reach us about anything on this page at enquiries@stratas.co.uk.
What this policy covers
This policy covers personal data we handle through this website: the enquiry and demo request forms, the cookie consent record, and website analytics. It applies to visitors to stratas.co.uk.
It does not cover the data we process inside the Stratas and Data Forge platform on behalf of customers. That processing is governed by the agreement between Stratas and the customer, including our General Terms and any data processing agreement. In that context we act as a processor, and the customer is the controller.
Information we collect
What we do not collect
This is a marketing website, so a lot of the data people expect a website to hold simply is not here. We do not:
- offer visitor accounts, so there are no usernames or passwords
- take payments or hold card or bank details
- collect precise location data
- store raw IP addresses against form submissions or consent records
- run advertising pixels, retargeting tags or cross-site tracking
- buy personal data from list brokers or data enrichment services
Information you give us
When you book a demo, request information, or contact us through a form on this site, we collect the details you enter. Typically that is your name, work email address, company name, and whatever you choose to write in the message field. Where a form includes optional fields, you decide whether to complete them.
Your cookie choice
When you accept or decline analytics cookies, we record that choice so we can honour it and evidence it. The record contains the choice itself, the time you made it, the version of the cookie policy it applied to, a random identifier for your browser, your browser’s user agent string, and a one way cryptographic hash of your IP address. The hash lets us group repeated events without holding the address itself, and it cannot be reversed back into an IP address by us.
Analytics
If, and only if, you accept analytics cookies, we collect aggregate usage information through PostHog: pages viewed, referring page, approximate country, device and browser type, and how long a visit lasted. We do not record your screen, and we do not use PostHog’s automatic event capture. We also use Vercel Analytics, which measures page performance and traffic volume without setting cookies or identifying individual visitors.
Technical logs
Our hosting provider records standard request logs for security, troubleshooting and abuse prevention. These may include IP address, timestamp, requested URL and user agent.
If a page or form on the site fails, an error report is sent to our error monitoring service so we can fix it. Reports describe the technical fault, the page and your browser type. We remove names, email addresses, form contents and cookies before a report is sent.
How we use your information
- Responding to you. Answering enquiries, arranging demos, and providing the information you asked for.
- Managing our sales pipeline. Keeping a record of the conversation so colleagues can pick it up and so we do not ask you the same question twice.
- Improving the website. Understanding in aggregate which pages people find useful, and where the site is confusing or slow.
- Security and integrity. Detecting and preventing spam, abuse and attacks on the site.
- Meeting our legal obligations. Including keeping a record of cookie consent, as required by UK data protection and privacy law.
We do not sell personal data, and we do not share it with third parties for their own marketing.
We do not use your enquiry or your website activity to train artificial intelligence models.
Our lawful bases for processing
Under UK GDPR we must have a lawful basis for each purpose. Ours are:
| Purpose | Lawful basis |
|---|---|
| Replying to an enquiry or arranging a demo | Legitimate interests, or steps taken at your request before entering a contract |
| Keeping a record of business contact and conversations | Legitimate interests in running and developing a business to business relationship |
| Analytics cookies | Your consent, which you can withdraw at any time |
| Visitor identification cookies | Your consent, which you can withdraw at any time |
| Site security, spam prevention and technical logs | Legitimate interests in keeping the site available and secure |
| Keeping a cookie consent audit trail | Legal obligation under UK data protection and privacy law |
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded it is not, because the data involved is limited business contact information used in a way a business contact would reasonably expect. You can object to this processing at any time, as described in section 9.
How long we keep information
| Information | Retention period |
|---|---|
| Enquiry and demo request records | 36 months |
| Cookie consent records | 12 months |
| Server request logs | 30 days |
| Analytics data | Held in aggregate by PostHog and Vercel according to their retention settings; not linked to a named individual by us |
| Your cookie choice, stored in your browser | 12 months, or until you clear your browser data |
Where you become a customer, records relating to the contract are kept for as long as the relationship lasts and then for the period required by tax and company law.
Your rights
Under UK and EU data protection law you have the right to:
- ask what personal data we hold about you and get a copy of it
- have inaccurate data corrected and incomplete data completed
- ask us to delete your data, where there is no overriding reason for us to keep it
- ask us to restrict how we use your data while a concern is resolved
- object to processing we carry out on the basis of legitimate interests
- receive data you gave us in a portable format, where processing is based on consent or a contract
- withdraw consent at any time, without affecting anything done before you withdrew it
To exercise any of these, email enquiries@stratas.co.uk. We will respond within one month. We may ask you for enough information to be confident we are dealing with the right person, although in most cases the small amount of data we hold makes that straightforward.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you are in the EEA, you can complain to your local supervisory authority. We would appreciate the chance to address your concern first.
International transfers
This website and its database are hosted in United Kingdom (London).
Some of our service providers are based outside the United Kingdom, or may process data outside it. Where personal data is transferred out of the UK or EEA, we rely on the safeguards permitted by law: an adequacy decision covering the destination country, or contractual protections in the form of the UK International Data Transfer Agreement or Addendum and the European Commission’s Standard Contractual Clauses.
Children
This website and our services are aimed at businesses, not children. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted information to us, contact us and we will delete it.
Security
The site is served over HTTPS, so traffic between your browser and us is encrypted in transit. Data at rest is encrypted by our hosting and database providers. Access to enquiry records is limited to Stratas staff who need it, protected by individual accounts and multi factor authentication.
Because the site has no visitor accounts and takes no payments, there are no visitor passwords or card details to be exposed. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours and tell you without undue delay where the law requires it.
Changes to this policy
We update this policy when our practices change. The date at the top of the page shows when it was last revised. Where a change materially affects how we use cookies, the cookie banner reappears so you can make a fresh choice.
Contact us
Questions about this policy, or about the data we hold, go to enquiries@stratas.co.uk, or write to us at 4 Greenfield Road, Holmfirth, England, HD9 2JT.
Given the size of our organisation and the nature of our processing, we are not required to appoint a Data Protection Officer. Privacy enquiries are handled by the address above.