Privacy Policy

Last updated: 15 October 2026

StrategiQ Analytics Ltd is a company registered in Scotland (SC828557) and is the data controller for personal information we use to run this website and our consultancy business. For some client projects, we may instead act as a data processor on the client’s instructions; that is explained below.

1. What information we collect

We try to collect only what we actually need. Depending on how you deal with us, this may include:

• Enquiry and contact information: your name, organisation, work email address, the service you are interested in and anything you choose to include in your message.
• Project and business information: requirements, meeting notes, system details, business rules, sample workbooks, reports or datasets that are needed to understand or deliver an agreed project.
• Commercial and administrative records: proposals, contracts, purchase orders, invoices, payment records and correspondence relating to the business relationship.
• Basic technical information: our hosting provider and form provider may create routine security and server logs, such as IP address, browser information, timestamps and request information.

We do not ask for payment-card information through this website. We also do not intentionally ask for special-category personal data through the public contact form.

2. Why we use personal information

Under UK data protection law we need a lawful basis for using personal information. The basis depends on the purpose:

• Responding to an enquiry and discussing possible work: our legitimate interests in operating the consultancy and, where the individual is entering into a contract, taking steps at their request before a contract.
• Delivering an agreed service: performance of a contract where the contract is with an individual, or our legitimate interests in delivering business-to-business services where the contract is with an organisation.
• Keeping accounting, tax and company records: compliance with legal obligations.
• Protecting systems, preventing misuse and establishing or defending legal claims: our legitimate interests in running a secure and accountable business.

Submitting the contact form does not automatically add you to a bulk marketing list. If we introduce newsletters or other consent-based marketing in future, they will use a separate sign-up or another lawful route permitted by applicable electronic-marketing rules.

Relevant business introductions

We may research suitable business contacts using company websites, professional business profiles and business directories. This can include a person’s name, role, work contact details and information about the organisation. We use it to assess whether our services are relevant and, where permitted, make a limited business introduction. Where we rely on legitimate interests, we assess the purpose, necessity and impact on the individual. We provide privacy information when required and an easy way to object. We do not treat a publicly listed email address as consent.

You can ask us to stop marketing to you at any time by replying to the message or emailing info@strategiqanalytics.co.uk. We will stop using your details for that purpose and may retain a minimal suppression record so that we can respect your choice.

3. Client data and consultancy projects

Business intelligence work can involve data belonging to a client. The legal role depends on the project:

• Where StrategiQ Analytics decides why and how personal data is used for our own business administration, we act as the controller.
• Where a client gives us personal data solely so that we can analyse, transform, model or report it on their behalf, the client will normally remain the controller and StrategiQ Analytics will act as a processor.
• Where processor obligations apply, the project agreement or a separate data-processing agreement will set out the instructions, permitted use, confidentiality, security, retention and deletion requirements.

We will not use identifiable client data for marketing, public demonstrations, case studies or portfolio work unless the client has expressly agreed to that use. Portfolio examples may instead be recreated with non-confidential or synthetic/example data.

4. How we protect information

We use practical safeguards appropriate to a small specialist consultancy and to the sensitivity of the project. These include:

• limiting access to people who genuinely need it for the work;
• using reputable business, hosting and cloud services with security controls appropriate to the task;
• using multi-factor authentication on business accounts where the service supports it;
• using secure devices, access controls and encrypted connections provided by our platforms;
• minimising local copies of client data and removing working data when it is no longer needed;
• agreeing additional controls with a client where the data or environment requires them.

No internet or computer system can be guaranteed to be completely secure, so we do not make unrealistic claims of absolute security. If we become aware of a personal-data breach, we will assess it promptly and follow any notification duties that apply.

5. Use of AI-assisted tools

StrategiQ Analytics may use AI-assisted tools to support activities such as coding, development, documentation, drafting and internal productivity. This does not mean client data is automatically sent to an AI service.

Client confidential information or personal data will not be submitted to a third-party AI service unless that use is appropriate for the project, has been agreed where necessary, and the relevant privacy, contractual and security safeguards have been considered. Where the same result can be achieved without providing identifiable client data, we will prefer that approach.

6. Who may receive information

We do not sell or rent personal information. We may use trusted service providers where they are needed to operate the business or deliver a project. These can include:

• Website hosting and email providers used to operate the site and business communications.
• Formspree, which processes and stores contact-form submissions and sends notifications to us. Formspree states that its service is hosted on AWS in the United States and that it relies on Standard Contractual Clauses for GDPR-related international transfers.
• Microsoft services such as Microsoft 365, Azure, Fabric or Power BI where they are used for our business or an agreed client solution.
• Professional advisers such as accountants, insurers or legal advisers where information is genuinely required.
• Approved contractors or future team members only where they need access for the agreed work and are subject to appropriate confidentiality and data-protection obligations.

If a provider processes personal information outside the UK, we will rely on the safeguards made available by that provider and required under applicable UK data-protection law, such as an adequacy arrangement or approved contractual clauses.

7. How long we keep information

We keep information only for as long as there is a genuine business, contractual or legal reason to do so. As a working default:

• General enquiries: normally up to 24 months after the last meaningful contact, unless the enquiry develops into a client relationship or there is another reason to keep it.
• Prospective business contacts: normally up to six months after research or the last outreach where no conversation develops. Minimal suppression details may be kept for as long as needed to honour a marketing objection.
• Project working data: for the duration of the engagement and then deleted, returned or retained in line with the client agreement. Where no different term is agreed, we aim to remove client working datasets within 90 days once they are no longer needed for delivery or support.
• Contracts, invoices and core business records: generally up to six years where needed for accounting, tax, contractual or legal-record purposes.

Copies held in routine service-provider backups may remain for a limited period until those backups rotate out. Where a client contract requires a shorter or longer period, the contract takes priority for that project.

8. Cookies and website tracking

The current website does not intentionally set advertising or analytics cookies and does not use behavioural advertising. The site, hosting environment or security services may use strictly necessary technical mechanisms required to deliver and protect the website.

If we later add non-essential analytics, advertising or similar technologies, we will update this notice and provide an appropriate consent mechanism before those technologies are used where consent is required.

9. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to request access to your personal information, correct inaccurate information, ask for deletion or restriction, object to certain uses, or request data portability. Where processing is based on consent, you can withdraw that consent.

These rights are not absolute in every situation. We may need to keep certain information where the law, a contract or the establishment or defence of legal claims requires it.

Your right to object to use of your personal information for direct marketing is absolute. We will stop that use if you object.

To exercise a right, email info@strategiqanalytics.co.uk. We may need to verify your identity before acting on a request. We will respond within the timeframe required by applicable law.

You can also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

10. Automated decision-making

We do not use personal information collected through this website to make solely automated decisions about individuals that produce legal or similarly significant effects.

11. Changes to this policy

We will review this notice as the business, website and services develop. If we introduce a materially different way of using personal information, we will update the notice before or when that processing begins where required.

12. Contact

Privacy questions and data-rights requests can be sent to:

StrategiQ Analytics Ltd
Registered in Scotland · SC828557
Hamilton, Scotland, United Kingdom
Email: info@strategiqanalytics.co.uk

StrategiQ Analytics Ltd does not currently appoint a separate Data Protection Officer because we do not believe our present processing activities require one. Privacy enquiries are handled through the contact details above.

13. Data protection complaints

If you are unhappy with how we have used your personal information, email info@strategiqanalytics.co.uk and describe your concern. You do not need to use particular wording or provide unnecessary sensitive information. We will acknowledge your complaint within 30 days, investigate without undue delay, keep you informed and tell you the outcome. You can also complain to the ICO.