Privacy

Privacy notice.

We process personal data only to reply to the decision you bring us and to send evidence notes you actively subscribe to. This notice describes what we collect, why, how long we keep it, and the rights you have under the GDPR.

Last reviewed · 22 October 2026

Data controller

STREDGEPARTNERS. Registered office: 167 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

Contact / DPO

For any question about this notice or your personal data, write to our data-protection contact, contact@stredgepartners.co.

Purposes and lawful bases

Reply to an enquiry submitted through the contact form — Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) (legitimate interest in responding).
Send evidence notes and decision briefings to subscribers who confirm double opt-in — Art. 6(1)(a) GDPR (consent), withdrawable at any time.
Maintain anti-abuse, honeypot and rate-limit logs — Art. 6(1)(f) GDPR (legitimate interest in securing the service).

Data we collect

Contact form: name, work email, company, role, country, arena, message, submission timestamp, coarse IP for rate-limiting. Newsletter: work email, opt-in timestamp, confirmation token, unsubscribe token. No cookies are set for advertising or cross-site tracking.

Audience measurement

We use Plausible Analytics, a cookieless, EU-hosted measurement tool, on the production site only. It sets no cookies, writes nothing to your browser storage, assigns no cross-site or persistent identifier, and collects no personal data — which is why no consent banner is shown. What is recorded is aggregate: page URL, referrer, country, and coarse device type, plus seven site events (a form submission attempt, a form submission success, a resource-filter selection, and four events from the on-page decision instruments: a gate overridden, a gate reading completed, a hand-off to Evidence Express, and an Evidence Express reading issued). Event payloads carry only fixed labels — the form name, the filter name, which gate bound, how many gates were answered — never your email address, your name, the decision you typed, and never an overall score or grade, because the instruments produce none. Lawful basis: Art. 6(1)(f) GDPR, legitimate interest in understanding aggregate site usage.

Embedded video player

Podcast episodes on /podcast are played in an embedded ad-free player operated by KillerPlayer. Nothing is requested from that provider until you press play on an episode: the still images on the page are served from our own infrastructure, and the player frame is created only on your click, with referrer information suppressed and the frame sandboxed. When you do press play, the provider receives your IP address, your browser user-agent and the identifier of the episode you chose, as any video host must in order to stream to you. We set no advertising or tracking cookie for playback, and we receive no personal data back from the provider. Lawful basis: Art. 6(1)(f) GDPR, legitimate interest in publishing our own programme.

Retention

Contact enquiries are deleted or fully anonymised after a fixed period from last contact (24 months from last contact). Newsletter subscribers: until you unsubscribe plus a 30-day cool-down. Rate-limit and abuse logs: 30 days. Aggregate analytics contain no personal data and are retained as site statistics.

Processors and recipients

Hosting and database — managed cloud infrastructure in the production region named above, under a data-processing agreement.
Transactional email — the sender domain notify.stredgepartners.co, operated via our email infrastructure provider under DPA.
Audience measurement — Plausible Analytics (EU-hosted, cookieless), under a data-processing agreement.
Video playback — KillerPlayer, the embedded ad-free player used on /podcast, engaged only when you press play.
No sale of personal data. No advertising. No profiling beyond service operation.

Storage, access and international transfers

Production storage is in the European Union. Storage is not the same fact as access: colleagues in the network's other jurisdictions may need to reach that data to do the work, and each of those access paths is a restricted transfer out of the controller's country. The map below names every path and states the instrument relied on for it — including, where that is the honest position today, that no instrument is yet executed. We do not rely on an adequacy finding, standard contractual clauses, a UK international data transfer agreement or a completed transfer risk assessment on this site unless the map records one.

Where data is stored, who accesses it, and under what safeguard
Processing activity	Stored in	Accessed from	Safeguard relied on
Contact enquiries	European Union	Morocco · Restricted transfer out of United KingdomGuinea · Restricted transfer out of United KingdomTogo · Restricted transfer out of United KingdomCôte d'Ivoire · Restricted transfer out of United Kingdom	No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027
Newsletter subscriptions	European Union	Morocco · Restricted transfer out of United KingdomGuinea · Restricted transfer out of United KingdomTogo · Restricted transfer out of United KingdomCôte d'Ivoire · Restricted transfer out of United Kingdom	No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027No transfer instrument in place · Review by 20 January 2027

The standalone residency and access map.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent for the newsletter at any time without affecting prior processing. The controller named above is established in the United Kingdom, so its lead supervisory authority is the Information Commissioner's Office (ICO), and you may complain to the ICO at ico.org.uk. If you are in the European Union or another country with its own regulator, you may instead complain to your national supervisory authority.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Changes

We will update this notice when practices or processors change. The date at the top of the page reflects the latest revision.

Requests to read or download publications

When you ask to read or download a publication, such as the Global Strategic Outlook 2027, we record your work email address, the name, company and role you choose to give, the language and page of the request, the files requested, the consents you gave and the time of the request. To protect the form against abuse, we also record your IP address, a one-way hash of it and the identification string your browser sends (user agent).

We use these details to give you access to the publication, to send you the files you asked for and to keep a record of the request. We process them because you asked for that access and those files, and on our legitimate interest in keeping a record of what was sent and in preventing abuse of the form. We send you other publications only if you tick the separate box that asks for them and then confirm your address from the email we send you; this rests on your consent, which you can withdraw at any time from the link in each message.

When you give your email to read a publication online, we place one cookie in your browser so that its pages stay open for 90 days. The cookie holds a signed reference to your request and its expiry date, nothing else, and is needed for the access you asked for. The link in our email places the same cookie on another device. Deleting the cookie closes access in that browser until you use the link or the form again.

We keep a download request, including the technical details above, for 24 months, then delete it, unless you have asked to receive publications, in which case we keep your email address until you unsubscribe.

Privacy notice.

Requests to read or download publications

Evidence for your next high-stakes decision, starting with nine gates.