Privacy Policy for Strixen Limited
1. Introduction
Welcome to Strixen Limited (“we”, “us”, “our”). We are committed to protecting and respecting your privacy. This policy explains what personal data we collect from you, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are (Data Controller)
Strixen Limited is the controller and responsible for your personal data.
- Full Company Name: Strixen Limited
- Company Number: 16737556
- Contact Email for Privacy Matters: support@strixen.com
- Registered Address: Strixen Limited, Suite RA01, 195-197 Wood Street, London, E17 3NU
3. The Data We Collect About You
We may collect and process the following data about you:
- When you contact us via our website: We collect your Name, Email Address, and the contents of your Message.
- When you use our website: We automatically collect technical data, including your IP address, browser type, and information about your visit through essential, performance, and analytics cookies and tools, including PostHog.
- When you become a client: We collect information necessary to provide our services, including contact details, billing and payment information, and details of your employees who will use our services.
- When we provide IT services: To fulfil our contractual obligations, we may have access to or process personal data held on your systems (e.g., managing user accounts). When doing so, we act as a “data processor” on your behalf and strictly under your instruction.
4. How We Use Your Personal Data
We will only use your personal data to carry out our business services and when the law allows us to. Most commonly, we will use it in the following circumstances:
- To respond to your inquiries (Lawful basis: Consent and Legitimate Interest).
- To perform the contract we are about to enter into or have entered into with you (Lawful basis: Contract).
- To manage our relationship with you, including sending invoices and service updates (Lawful basis: Contract).
- To improve our website, services, and marketing (Lawful basis: Legitimate Interest).
- To comply with a legal or regulatory obligation.
5. Data Sharing and Third Parties
We do not sell your personal data. We may have to share your data with trusted third parties to provide our services, including:
- Service Providers: Cloud and hosting providers such as AWS, Google, Microsoft, and Digital Ocean.
- Business Operations: Third-party software for email, accounting, and customer relationship management.
- Technology Partners: We may share necessary details with partners like Microsoft and Google for software licensing purposes on your behalf.
- Professional advisers: Lawyers, bankers, auditors, and insurers.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. International Transfers
Some of our external third parties may be based in the European Economic Area (EEA). When we transfer your data to the EEA, it is protected by adequacy regulations issued by the UK government, which recognise that the EEA provides an adequate level of data protection comparable to that in the UK. We will not transfer your personal data outside the UK or EEA without ensuring appropriate safeguards are in place.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for any legal, accounting, or reporting requirements.
- Contact form inquiries from non-clients will be retained for 2 years.
- Client data will be held for 7 years after the end of our contractual relationship for tax and legal purposes.
8. Your Legal Rights
Under data protection law, you have rights including:
- Right of access: To request a copy of the personal data we hold about you.
- Right to rectification: To request correction of inaccurate data.
- Right to erasure: To request that we delete your personal data.
- Right to restrict processing: To request that we suspend the processing of your data.
- Right to data portability: To request the transfer of your data to you or a third party.
- Right to object: To object to our processing of your data.
To exercise any of these rights, please contact us at support@strixen.com.
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. These measures include Multi-Factor Authentication (MFA), strict access controls, and secure network configurations.
10. Cookies
Our website uses essential, performance, and analytics cookies to distinguish you from other users. This helps us to provide you with a good experience and also allows us to improve our site. For detailed information, we recommend you create a separate Cookie Policy.
11. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at support@strixen.com.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113