Privacy

Privacy notice.

We process personal data only to reply to the decision you bring us and to send evidence notes you actively subscribe to. This notice describes what we collect, why, how long we keep it, and the rights you have under the GDPR.

Last updated · July 2026

Data controller

STREDGEPARTNERS. Registered office: 167 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

Contact / DPO

For any question about this notice or your personal data, write to our data-protection contact, contact@stredgepartners.co.

Purposes and lawful bases

Reply to an enquiry submitted through the contact form — Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) (legitimate interest in responding).
Send evidence notes and decision briefings to subscribers who confirm double opt-in — Art. 6(1)(a) GDPR (consent), withdrawable at any time.
Maintain anti-abuse, honeypot and rate-limit logs — Art. 6(1)(f) GDPR (legitimate interest in securing the service).

Data we collect

Contact form: name, work email, company, role, country, arena, message, submission timestamp, coarse IP for rate-limiting. Newsletter: work email, opt-in timestamp, confirmation token, unsubscribe token. No cookies are set for advertising or cross-site tracking.

Audience measurement

We use Plausible Analytics, a cookieless, EU-hosted measurement tool, on the production site only. It sets no cookies, writes nothing to your browser storage, assigns no cross-site or persistent identifier, and collects no personal data — which is why no consent banner is shown. What is recorded is aggregate: page URL, referrer, country, and coarse device type, plus seven site events (a form submission attempt, a form submission success, a resource-filter selection, and four events from the on-page decision instruments: a gate overridden, a gate reading completed, a hand-off to Evidence Express, and an Evidence Express reading issued). Event payloads carry only fixed labels — the form name, the filter name, which gate bound, how many gates were answered — never your email address, your name, the decision you typed, and never an overall score or grade, because the instruments produce none. Lawful basis: Art. 6(1)(f) GDPR, legitimate interest in understanding aggregate site usage.

Retention

Contact enquiries are deleted or fully anonymised after a fixed period from last contact (24 months from last contact). Newsletter subscribers: until you unsubscribe plus a 30-day cool-down. Rate-limit and abuse logs: 30 days. Aggregate analytics contain no personal data and are retained as site statistics.

Processors and recipients

Hosting and database — managed cloud infrastructure in the production region named above, under a data-processing agreement.
Transactional email — the sender domain notify.stredgepartners.co, operated via our email infrastructure provider under DPA.
Audience measurement — Plausible Analytics (EU-hosted, cookieless), under a data-processing agreement.
No sale of personal data. No advertising. No profiling beyond service operation.

International transfers

Production hosting is in the European Union. Where a processor operates outside the EEA, transfers rely on the European Commission Standard Contractual Clauses (2021/914) together with a transfer risk assessment.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent for the newsletter at any time without affecting prior processing. You may lodge a complaint with your national supervisory authority — CNIL in France, APD in Belgium, PFPDT in Switzerland, CNPD in Luxembourg, ICO in the UK.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Changes

We will update this notice when practices or processors change. The date at the top of the page reflects the latest revision.

Privacy notice.

Evidence for your next high-stakes decision, starting with nine gates.