Whether you’re browsing the site or reaching out for a project, this policy covers how we handle your data.

1. Introduction

This Privacy Policy explains how Strata Heritage ("we", "us", "our") collects, uses, and protects personal data when you visit www.strataheritage.co.uk (the "Website") or otherwise get in touch with us.

Strata Heritage is a sole trader business based in Shrewsbury, Shropshire, United Kingdom, and is the data controller for the purposes of UK data protection law.

We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Data controller: Strata Heritage Contact: j.hancock.watts@gmail.com Address: Shrewsbury, Shropshire, United Kingdom

As a sole trader operation, all data handling decisions are made directly by the business owner. There is no separate Data Protection Officer, but any queries can be directed to the contact above.

3. What Data We Collect

We collect personal data in the following ways:

Contact form submissions When you submit an enquiry through the Website contact form, we collect:

• your name

• your email address

• any details you provide about your project, organisation, or enquiry

Email correspondence If you contact us directly by email, we retain that correspondence, including your name, email address, and the content of our exchange.

Website usage data The Website may use basic analytics tools to understand how visitors use the site (e.g. pages viewed, time on site, general location at country/region level, device type). This data is collected in an aggregated or anonymised form where possible.

We do not collect any special category data (such as health, religious belief, or other sensitive personal data) through the Website.

4. How We Use Your Data

We use the personal data we collect to:

• respond to enquiries submitted via the contact form or email

• discuss and scope potential consultancy projects

• prepare quotes, proposals, and contracts for services

• maintain records of client communications for professional and accounting purposes

• improve the Website based on general usage patterns

We do not use your data for automated decision-making or profiling.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your data:

• Legitimate interests — responding to enquiries and operating the Website is necessary for the legitimate interests of running a consultancy business, and does not override your rights and freedoms.

• Contract — where you become a client, processing your data is necessary to perform the contract for services (e.g. preparing reports, invoicing).

• Legal obligation — in some cases we may need to retain financial records (e.g. invoices) to comply with UK tax law (HMRC requirements typically require records to be kept for at least 6 years).

6. Sharing Your Data

We do not sell or rent personal data to third parties.

We may share limited data with the following categories of third party where necessary:

• Website hosting and form provider (e.g. Framer) — to operate the Website and process contact form submissions

• Email provider — to send and receive business correspondence

• Accounting/bookkeeping software (e.g. FreeAgent or QuickBooks) — for invoicing and financial record-keeping

• Professional advisors (e.g. accountant, solicitor) — where necessary for business administration

• Legal or regulatory authorities — where required by law

These providers may process data outside the UK (see Section 8, International Transfers).

We do not share client project data — including site addresses, HER search results, or report content — with any third party other than as required to deliver the commissioned work, or where a client has given written consent.

7. Cookies

The Website may use essential cookies required for it to function correctly, and may use limited analytics cookies to understand site usage.

You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of some parts of the Website.

[If using Framer's built-in analytics or a third-party analytics tool, add the specific tool name here and link to their privacy policy, e.g. "We use Framer Analytics / Google Analytics to understand site usage. See [provider]'s privacy policy for further detail."]

8. International Transfers

Some of the third-party services we use (such as Website hosting, email, or analytics providers) may store or process data outside the United Kingdom, including in the United States.

Where this occurs, we ensure that appropriate safeguards are in place, such as the provider's participation in a recognised data protection framework or the use of UK-approved standard contractual clauses.

9. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected:

• General enquiries that do not become projects — retained for up to 12 months, then deleted

• Client project correspondence and records — retained for the duration of the engagement and for a period afterward in line with professional and legal record-keeping requirements (typically up to 6 years for financial records)

• Website analytics data — retained in aggregated/anonymised form where possible

10. Your Rights

Under UK GDPR, you have the right to:

• access the personal data we hold about you

• rectify inaccurate or incomplete data

• erase your data, in certain circumstances ("right to be forgotten")

• restrict processing of your data in certain circumstances

• object to processing based on legitimate interests

• data portability — receive your data in a structured, commonly used format

• withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at j.hancock.watts@gmail.com. We will respond within one month, as required by law.

If you are unhappy with how we have handled your data, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) www.ico.org.uk Helpline: 0303 123 1113

11. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including the use of reputable, secure third-party platforms for Website hosting, email, and file storage.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security of data transmitted to us.

12. Children's Privacy

This Website is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised.

14. Contact

Questions about this Privacy Policy or how your data is handled can be sent to:

Strata Heritage j.hancock.watts@gmail.com www.strataheritage.co.uk Shrewsbury, Shropshire, United Kingdom

Last Updated: July 2026