Privacy

The short version

• stravaya.com tells you about Stravaya, our advisory work and the products of Stravaya Labs. It has no forms, no accounts, no advertising and no analytics, and it sets no cookies for visitors.
• To show you a page, our hosting provider handles the technical details every website receives. We use them only to deliver the site and keep it safe.
• If you write to us, we use your message and your email address to answer you and to carry out what you ask.
• We do not sell what we hold, and we share it only with the providers who run our website and our email for us.

Who we are

• This notice is published by Stravaya LLP, LLP Identification Number ADD-6649. Stravaya LLP decides how the information described here is used. In this notice, "we" and "us" mean Stravaya LLP.
• Questions about this notice, and requests about your data, may be sent to cio@stravaya.com. A person reads every message.

When you visit the site

• When your browser asks for a page, it sends the details every website receives: the network address it is using, the page asked for, the time, the page that linked to us, and the type of browser and device. Our hosting provider uses them to deliver the page, and keeps a short record of them to keep the site running and to protect it against misuse.
• We do not use these details to find out who you are, we do not combine them with other information, and we do not build profiles of visitors.
• Every part of the site, including its fonts, is served from stravaya.com. The site loads nothing from other companies, so no one else learns of your visit through it.
• Our products and other sites we link to, such as ControlRegistry, AssureDesk and the client portal, have their own notices, which apply when you use them.

When you write to us

• The site gives our email address instead of a form. When you write, we receive what you choose to send: usually your name, your email address, your organisation and your message.
• We use it to answer you, to arrange any call or work you ask about, and to keep a record of what we agreed.
• Our email provider stores these messages for us.
• We keep correspondence for three years after the matter it concerns is closed, and longer only where the law requires it, for example for the financial records of an engagement. Then we delete it.

Why we may use it

Where the law asks us to state a basis for each use:

• Delivering and protecting the site: our legitimate interest in running a website that works and is secure.
• Answering you and arranging what you ask for: the steps you ask us to take before any agreement, or our legitimate interest in replying to people who write to us. Where the law relies on your choice, that choice is your decision to write to us.
• Keeping records: our legal obligations, and our legitimate interest in being able to show what was agreed.

Who receives it

• Our hosting provider and our email provider, each under contract with us and only to provide its service.
• Our professional advisers, or a public authority, only where the law requires it or to protect our legal rights.
• No one else. We do not sell what we hold, and we do not share it for advertising.

Where it is processed

Our providers may process information in countries other than your own. Where that happens, we rely on the safeguards the law provides for such transfers.

Your rights

• You may ask to see what we hold about you, to have it corrected or completed, to have it deleted, or to have us stop a use of it. Write to cio@stravaya.com. We answer within 30 days.
• If you are not satisfied with our answer, you may complain to the data protection authority that covers you.

Children

The site is written for people at organisations. It is not directed at children, and we do not knowingly hold information about them.

Changes to this notice

When we change this notice, we publish the new version on this page with its date.