Privacy Policy

Scope

The policy applies to visitors, registered users, and business contacts whose data is processed in connection with Stratford IQ. It covers information we collect directly, data provided by customers, and data obtained from public or licensed sources across the UK.

Information we collect

Public data collection (Article 14 transparency)

We collect personal data about UK companies and associated individuals (directors, officers, persons with significant control, and business contacts) from publicly available sources. These include:

• Companies House and other public registers.
• Publicly accessible websites via lawful crawls of .uk domains.
• Licensed commercial datasets.

We rely on our legitimate interests in building accurate UK business intelligence. Given the scale of public data collection, providing individual notice to every data subject would require disproportionate effort under Article 14(5)(b) of UK GDPR. Instead, we make this policy publicly available and ensure individuals can exercise their rights by contacting us. Data is refreshed regularly and outdated records are removed as part of our refresh cycle.

Scoring & automated analysis

We may generate scores, ratings, or intelligence about companies and individuals based on automated analysis of available data. These outputs:

• Represent our subjective interpretation or automated inference, not assertions of fact.
• Are provided for informational purposes only and should not be relied upon as the sole basis for any decision.
• May include modelling assumptions and should be independently verified before use.

Individuals may request an explanation of the logic involved in automated processing that affects them and may contest outputs by contacting us at support@stratfordiq.com.

How we use information

• Deliver, maintain, and improve Stratford IQ, including authentication and user support.
• Provide analytics dashboards, search functionality, alerts, and API responses to customers.
• Secure our infrastructure, detect abuse or fraud, and monitor platform performance.
• Communicate product releases, security advisories, and essential service notifications.
• Comply with legal requirements, enforce agreements, and protect our legitimate interests.

Legal bases for processing

• Legitimate interests in building accurate UK company intelligence and protecting our services.
• Contractual necessity to provide subscriptions, APIs, support, and billing.
• Legal obligation to retain records for compliance and taxation.
• Consent for optional marketing communications and event invitations (withdrawable at any time).

Sharing & recipients

We do not sell personal data. Personal data may be shared with:

• Customers who access business intelligence through Stratford IQ dashboards and APIs. Customers act as independent controllers for data they access and are responsible for their own compliance.
• Processors that provide hosting, analytics, and email delivery services. Each processor is bound by a written agreement and must implement appropriate safeguards.
• Independent controllers such as Paddle, our payment processor, who process billing data under their own privacy policies.

Security

• TLS 1.2+ encryption in transit and encryption at rest for stored data.
• Strict role-based access control, enforced MFA, and least-privilege policies.
• Continuous monitoring and intrusion detection.
• Documented incident response plan with regulatory and customer notification workflows.

Retention

Account data is retained for the lifetime of the subscription and archived for up to twelve months for billing, dispute, or legal purposes before secure deletion. Marketing contact data is retained until consent is withdrawn or engagement lapses for 24 months. Business intelligence datasets are refreshed regularly and outdated records are removed as part of the refresh cycle.

Cookies & tracking

We use strictly necessary cookies for login sessions and fraud prevention. Optional analytics cookies help us improve the product and are only activated where permitted by cookie banners or browser settings. You can manage cookies at any time through your browser or in-product preferences.

International transfers

When data is transferred outside the UK or EEA, we rely on adequacy regulations or approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses. Hosting regions and transfer safeguards are available upon request.

Your rights

Individuals may exercise their UK/EU data protection rights by emailing support@stratfordiq.com. We respond within statutory deadlines to:

• Access, portability, and rectification requests.
• Objections or restrictions to processing based on legitimate interests.
• Deletion requests, subject to retention required by law.
• Marketing opt-outs and do-not-contact preferences.

Complaints & data removal requests

If you believe your personal data is inaccurate, has been processed unlawfully, or should be removed, please contact us at support@stratfordiq.com with details of your concern. We will investigate and respond within statutory timeframes. Where appropriate, we will correct or remove data and suppress your details from future data refreshes.

You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

Contact

Questions or concerns can be sent to support@stratfordiq.com.