Privacy Policy

1. Information we collect

• Contact information — name, business email, telephone number, job title and company name provided through enquiry forms, consultation bookings, demo requests or the Get Access checkout.
• Billing information — billing address and company details required to issue invoices and receipts. Card details are never received or stored by us; they are handled entirely by our payment processor.
• Account information — credentials for the client portal, stored as a salted cryptographic hash and never in plain text.
• Engagement information — project details, documents and correspondence associated with your engagement.
• Technical information — IP address, browser type and pages visited, used for security, rate limiting and aggregate analytics.

2. How we use information

• To respond to enquiries, prepare proposals and deliver contracted services
• To issue invoices, process payments and produce receipts
• To provide access to and operate the client portal
• To send transactional communications relating to your engagement
• To send marketing communications only where you have given separate, specific consent
• To protect our systems against fraud, abuse and unauthorised access
• To comply with legal, tax and accounting obligations

3. Legal basis for processing

Where the GDPR or comparable legislation applies, we process personal data on the basis of contract performance for engagement delivery, legitimate interest for business communication and system security, consent for marketing communications, and legal obligation for tax and accounting records.

4. Sharing information

We do not sell personal information. We share it only with service providers necessary to operate our business, each bound by contractual confidentiality and data protection obligations.

These include our payment processor for transaction handling, our email delivery provider for transactional messages, our cloud infrastructure provider for hosting, and professional advisers where legally required.

5. Data retention

• Enquiry records are retained for 24 months from last contact unless you request deletion sooner.
• Client engagement records are retained for 7 years after engagement completion to meet contractual, tax and professional obligations.
• Financial records including invoices and receipts are retained for 7 years as required by applicable tax law.
• Client portal account data is retained while the account remains active and for 12 months after closure.
• Technical and security logs are retained for 12 months.

6. Your rights

Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion where no legal obligation requires retention, restriction of processing, a portable copy of information you provided, and withdrawal of consent for marketing at any time.

Requests should be sent to our contact address. We respond within thirty days. Where we cannot fulfil a request because of a legal retention obligation, we explain the specific basis.

7. Security measures

• Encryption in transit using current TLS standards
• Encryption at rest for stored data
• Passwords stored only as salted cryptographic hashes
• Role-based access control on a least-privilege basis
• Audit logging of access to client data
• Regular security review of infrastructure and applications

8. International transfers

Our infrastructure is operated primarily in the United States. Where personal data is transferred internationally, appropriate safeguards are applied through contractual protections with our service providers.

9. Cookies

This website uses strictly necessary cookies for session management and security. Details of all cookies used are set out in our Cookie Policy.

10. Contact

Privacy enquiries may be directed to Stravix Technologies LLC using the contact details published on our Contact page. If you are not satisfied with our response you may lodge a complaint with your local data protection authority.