Skip to content

Legal

Privacy policy

Last reviewed by Seehab Ahmed

In plain English: I collect what you choose to send me through the forms, tools and bookings, and use it to reply, deliver what you asked for and follow up. Analytics only run if you accept them. I never sell your data, and you can ask me to see, change or delete it at any time by emailing hello@stratusgrowth.co.uk.

Who I am

Stratus Growth Limited ("Stratus Growth", "I", "me") is a company registered in England and Wales, company number 17473029, with its registered office at 79 Belgrave Road, Aylesbury, HP19 9TN. Stratus Growth is the practice of Seehab Ahmed.

I am the data controller for personal data collected through stratusgrowth.co.uk and in the course of selling and delivering my services. You can contact me about anything in this policy at hello@stratusgrowth.co.uk.

What I collect and why

When you contact me or submit a form

Your name, email address, company, the problem you describe and anything else you choose to tell me, plus the page you came from, the form you used and any campaign (UTM) tags in the link you followed. I use this to reply, to follow up about your enquiry and to understand which pages bring enquiries.

Lawful basis: legitimate interests in responding to and following up enquiries, or steps at your request before entering into a contract.

When you use a free tool or download a template

The answers you enter are processed in your browser to show your result. If you ask for the full report or a template by email, I store your name, email address, the tool or template and a summary of your result, so I can send it and follow up.

Lawful basis: legitimate interests in delivering what you asked for and following up with relevant, related information. Follow-up emails are only about what you asked for, and every email lets you unsubscribe in one click. You can object at any time.

The AI search readiness check fetches the public web address you enter. It does not store the address unless you ask for the report by email.

When you book a call

Your name, email address, the call you booked, the time, anything you add to the booking and, for paid calls, payment details handled by Stripe. I use this to hold the call and keep financial records.

Lawful basis: contract, or steps at your request before entering into one; legal obligation for financial records.

When you become a client

Contact details for the people I work with, contract and billing details, and the business information needed to do the work.

Lawful basis: contract; legitimate interests for the people at a client I work with; legal obligation for financial records.

Analytics, only with your consent

With your consent, I measure how the site is used: pages viewed, how far you scroll, which buttons and tools you use, the referring site, approximate location from your IP address, and your device and browser. Session recordings mask everything you type. Nothing loads until you accept, and you can change your mind at any time from "Cookie settings" in the footer. See the cookie policy.

Lawful basis: consent.

Call recordings in the commercial audit

The commercial audit includes reviewing recordings of your recent sales calls, which contain personal data about your prospects and your staff. For that data, you are the controller and I act as your processor. The terms of engagement include a data processing clause, and you confirm that the recordings were made with proper notice to the people on them. I use recordings only to carry out the audit, store them in my Google Workspace account, which only I can access and which is protected by two-step verification, and delete them 30 days after the readout call.

Who I share data with

I use these services to run the practice. Each processes data on my instructions.

ServiceWhat it is used forWhere data may be processed
CloudflareHosting the website, spam protection on forms (Turnstile)UK, EU, US and global edge network
Cal.comBooking callsUS
StripeTaking payment for paid calls, through Cal.comUK, EU, US
Google WorkspaceEmail, calendar and documentsUK, EU and US (Google data centres)
HubSpotCRM: storing enquiries, bookings and client contactsEU
ResendSending form confirmations and requested reportsUS
Google Analytics 4Site analytics, only with consentUS, EU
PostHog (EU cloud)Site analytics and session recordings, only with consentEU

I don't sell personal data, and I don't share it with anyone for their own marketing. I may disclose data where the law requires it.

International transfers

Some of these services process data outside the UK. Where a country has no UK adequacy decision, I rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK-US data bridge, as each provider offers.

How long I keep data

DataHow long
Enquiries and tool reports that don't become work2 years from last contact
Client records and contracts6 years after the engagement ends
Financial records6 years, as HMRC requires
Commercial audit call recordings30 days after the readout call
Analytics14 months

Your rights

You can ask for a copy of your data, ask me to correct or delete it, restrict or object to how I use it, ask for it in a portable format, and withdraw consent at any time. Email hello@stratusgrowth.co.uk. I will reply within one month. Objections to direct marketing are always honoured.

I don't make decisions about you by purely automated means that have legal or similarly significant effects.

Security

Data is encrypted in transit, accounts use two-step verification, and access is limited to what is needed. If a breach puts your rights at risk, I will tell the ICO within 72 hours and tell you without undue delay where required.

Complaints

Please contact me first at hello@stratusgrowth.co.uk. You can also complain to the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113, ico.org.uk.

Changes

I will update this policy when my services, providers or the law change. The date at the top shows the latest version.