Privacy Policy

Effective date: 21 October 2025

STRATITECH CONSULTING LTD ("we", "us", "our") provides IT consultancy services.

We respect your privacy and are committed to protecting personal data.

This notice explains what data we collect, how we use it, the lawful bases we rely on, how long we keep it, who we share it with, and your rights. It applies to our website, contact forms, emails, calls, social media messages, and client work.

1) Who we are (Data Controller)

Legal entity: STRATITECH CONSULTING LTD
Company number: SC862890 (Registered in Scotland)
Registered office: CLYDE OFFICES, 2ND FLOOR, 48 WEST GEORGE STREET, GLASGOW, G2 1BP
Email: hello@stratitech.co.uk

If you have questions about this notice or how we handle your data, contact us using the details above. You can also complain to the UK Information Commissioner’s Office (ICO) – see section 12.

2) The data we collect

Depending on how you interact with us, we may process:

Identity & contact data: name, role, company, email, phone.
Communications: messages you send via forms/email/phone/social, and notes of calls/meetings.
Website data: IP address, device/browser details, pages viewed (via Wix site functionality and cookies – see Cookies).
Client service data (during engagements): user lists, configuration details, system logs and similar information required to deliver our services (kept to the minimum necessary and defined in the engagement scope).
Billing: addresses, purchase orders, transaction references.
Recruitment (if you apply): CV, cover letter, interview notes.

We do not intentionally collect special category data. If such data is provided, we limit or delete it where appropriate.

3) How we collect data

Directly from you: when you complete a form, email or call us, book a meeting, or become a client.
Automatically: through essential/functional cookies and Wix site analytics when you visit our website.
From third parties: referrals or publicly available sources (e.g., Companies House/LinkedIn) to keep professional contact details accurate.

4) How we use your data & lawful bases (UK GDPR)

We only use personal data where lawful and necessary:

To respond to enquiries and provide quotations (Art. 6(1)(b) contract; or Art. 6(1)(f) our legitimate interests in running our business).
To deliver our services and manage client relationships (contract).
To operate and improve our website (cookies/analytics) (legitimate interests; you can manage cookies and/or opt out).
To meet legal, tax and accounting obligations (legal obligation – Art. 6(1)(c)).

We do not send marketing newsletters. If we ever invite you to optional updates in the future, we will ask for your consent first.

Where we rely on legitimate interests, we balance our interests against your rights and will not use your data where your interests override ours.

5) Sharing your data

We share data only with providers that help us run this business or deliver services—under contracts that protect your information:

Website & forms hosting: Wix.
Email & productivity: our business email/calendar service provider.
Accounting & invoicing: our finance tools (for billing records only).
IT service partners/sub‑contractors: only if required for your project, and only under confidentiality and data processing terms.
Regulators or law enforcement: where required by law.

We do not sell personal data.

6) International transfers

Some providers (including Wix) may store or process data outside the UK. Where this happens, we use safeguards such as UK adequacy regulations (e.g., EEA) and/or appropriate transfer mechanisms (UK International Data Transfer Agreement or EU Standard Contractual Clauses with UK Addendum).

7) Data retention

We keep personal data only as long as necessary for the purposes described:

Enquiries (non‑clients): typically up to 12 months.
Client records and project files: typically 6–7 years after the end of the contract (legal/tax purposes).
Recruitment records: typically 6 months unless hired.
Cookie preferences: until you change or clear them.

We may retain minimal suppression records to honour do‑not‑contact requests.

8) Security

We apply technical and organisational measures appropriate to the risk, including access controls, multi‑factor authentication where available, encryption in transit, regular backups, least‑privilege access, and vendor due diligence. Access is limited to those who need it.

9) Your rights (UK GDPR)

You may have rights to access, rectify, erase, restrict, or object to processing, and to data portability for information you provided. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact hello@stratitech.co.uk. We may need to verify your identity. You also have the right to complain to the ICO (see below).

10) Cookies & analytics

Our Wix site uses cookies to run the site and understand usage. On your first visit you’ll see a cookie banner where you can accept, reject, or manage settings. You can also block cookies in your browser. See our Cookies Policy for details.

11) Children

Our services are aimed at organisations. We do not knowingly collect personal data from children.

12) Contact & complaints

Questions or requests about this policy: hello@stratitech.co.uk
You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

13) Changes to this notice

We may update this policy to reflect changes to our services or the law. We will post the updated version here and change the effective date. Material changes will be highlighted for a reasonable period.