Privacy notice.

STREDGEPARTNERS. Registered office: 167 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

For any question about this notice or your personal data, write to our data-protection contact, contact@stredgepartners.co.

Contact form: name, work email, company, role, country, arena, message, submission timestamp, coarse IP for rate-limiting. Newsletter: work email, opt-in timestamp, confirmation token, unsubscribe token. No cookies are set for advertising or cross-site tracking.

We use Plausible Analytics, a cookieless, EU-hosted measurement tool, on the production site only. It sets no cookies, writes nothing to your browser storage, assigns no cross-site or persistent identifier, and collects no personal data — which is why no consent banner is shown. What is recorded is aggregate: page URL, referrer, country, and coarse device type, plus seven site events (a form submission attempt, a form submission success, a resource-filter selection, and four events from the on-page decision instruments: a gate overridden, a gate reading completed, a hand-off to Evidence Express, and an Evidence Express reading issued). Event payloads carry only fixed labels — the form name, the filter name, which gate bound, how many gates were answered — never your email address, your name, the decision you typed, and never an overall score or grade, because the instruments produce none. Lawful basis: Art. 6(1)(f) GDPR, legitimate interest in understanding aggregate site usage.

Podcast episodes on /podcast are played in an embedded ad-free player operated by KillerPlayer. Nothing is requested from that provider until you press play on an episode: the still images on the page are served from our own infrastructure, and the player frame is created only on your click, with referrer information suppressed and the frame sandboxed. When you do press play, the provider receives your IP address, your browser user-agent and the identifier of the episode you chose, as any video host must in order to stream to you. We set no advertising or tracking cookie for playback, and we receive no personal data back from the provider. Lawful basis: Art. 6(1)(f) GDPR, legitimate interest in publishing our own programme.

Contact enquiries are deleted or fully anonymised after a fixed period from last contact (24 months from last contact). Newsletter subscribers: until you unsubscribe plus a 30-day cool-down. Rate-limit and abuse logs: 30 days. Aggregate analytics contain no personal data and are retained as site statistics.

Production storage is in the European Union. Storage is not the same fact as access: colleagues in the network's other jurisdictions may need to reach that data to do the work, and each of those access paths is a restricted transfer out of the controller's country. The map below names every path and states the instrument relied on for it — including, where that is the honest position today, that no instrument is yet executed. We do not rely on an adequacy finding, standard contractual clauses, a UK international data transfer agreement or a completed transfer risk assessment on this site unless the map records one.

The standalone residency and access map.

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent for the newsletter at any time without affecting prior processing. The controller named above is established in the United Kingdom, so its lead supervisory authority is the Information Commissioner's Office (ICO), and you may complain to the ICO at ico.org.uk. If you are in the European Union or another country with its own regulator, you may instead complain to your national supervisory authority.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

We will update this notice when practices or processors change. The date at the top of the page reflects the latest revision.