Privacy policy

Last updated: 29 September 2026

Who we are

StrataLens Ltd (“StrataLens”, “we”, “us”) is a company registered in England and Wales under company number 16609755, with its registered office at 37 Lombard Street, 6th Floor, London EC3V 9BQ. We are the controller of the personal data described in this policy. We are registered with the Information Commissioner’s Office as a data protection fee payer under registration reference ZC269335.

You can contact us about anything in this policy at privacy@stratalens.co.uk or on 020 3432 3362.

What this policy covers

This policy covers personal data we handle when you visit stratalens.co.uk, email or call us, book a meeting, or apply for a role. It does not cover data our clients process through the StrataLens platform. In that case the client is the controller, we act as its processor, and the terms are set out in the contract with that client.

Information we collect

• Contact and enquiry details — your name, work email, phone number, employer, job title and anything you include in your message.
• Pilot pack requests — your name, work email, company and role when you request our pilot pack through the form on this website, and whether you ticked the box for occasional updates. The form is processed by Netlify, which hosts this site.
• Meeting bookings — the details you enter when booking a meeting through our Microsoft Bookings page, and the time you choose.
• Job and advisory applications — your CV, covering note, employment history and any other information you choose to send.
• Technical data — when you visit the website, our hosting provider and font provider receive your IP address, browser type and the pages requested, as part of delivering the site to you.

How and why we use it

Under UK data protection law we must have a lawful basis for each use of personal data. Ours are:

• Responding to enquiries and arranging meetings — our legitimate interest in responding to business enquiries and developing client relationships, or taking steps at your request before entering into a contract.
• Providing services to clients — performance of our contract with you or your employer.
• Recruitment — our legitimate interest in assessing candidates, and taking steps at your request before entering into an employment contract.
• Running and securing the website — our legitimate interest in operating a secure, working website.
• Business updates — we will only send you marketing emails where the law allows, and every message includes a way to opt out.
• Legal and regulatory obligations — where we need to keep records or respond to lawful requests.

We do not sell personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

Who we share it with

We share personal data only with service providers who process it on our behalf and under contract, including:

• Microsoft, for email, calendars, Microsoft Bookings and Teams;
• Netlify, which hosts this website;
• Google, which serves the fonts this website uses;
• professional advisers such as our accountants and lawyers, where needed.

We may also disclose data where required by law, or to a purchaser in the event of a sale or restructuring of our business.

International transfers

Some of our providers may process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified) or the UK International Data Transfer Agreement or Addendum to protect it.

How long we keep it

• Enquiries and meeting records — up to two years after our last contact, unless a business relationship follows.
• Client records — for the duration of the relationship and six years afterwards, to meet legal and accounting requirements.
• Unsuccessful applications — up to six months after the role is filled, unless you agree to us keeping them longer.

Cookies

This website does not set cookies and does not use advertising trackers. We count page views and button clicks with Umami, a privacy-focused analytics service hosted in the European Union. It uses no cookies, stores no personal data and cannot identify you; it records the page visited, the referring site, the country and the browser type, in aggregate. If you follow a link to a third-party site, such as our Microsoft Bookings page or LinkedIn, that site may set its own cookies under its own policy.

Your rights

You have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to erase your data;
• restrict or object to our processing, including objecting to direct marketing at any time;
• receive your data in a portable format, where the processing is based on contract or consent;
• withdraw consent at any time, where we rely on it.

To exercise any of these rights, email privacy@stratalens.co.uk. We will respond within one month.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls and encryption. No method of transmission over the internet is completely secure, but we work to protect your data and to act quickly if anything goes wrong.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.