Legal

Privacy notice

This notice explains what personal data we collect when you visit subjectaccessrequests.org.uk, why, and the rights you have. We collect as little as we can.

Last updated 2 October 2026

Who is responsible for your data

WeAreStrata Limited, trading as Strata AI, is the controller of the personal data described in this notice. We are registered in England and Wales under company number 16974757, with our registered office at 4 Usk Vale Court, Pontypool, NP4 8AS.

This notice covers this website only. When we provide Requests by Strata AI to a customer, the customer is the controller of the personal data in its requests and we act as its processor under a written agreement.

What we collect and why

Personal data we collect, our purpose and our lawful basis
DataWhy we use itLawful basis
Technical data your browser sends when it requests a page: IP address, browser and device type, the page requested, the referring page and the timeTo deliver the site, keep it secure, and detect and prevent abuseLegitimate interests in running a secure website
Your cookie choice, stored in the sar_consent cookieTo remember whether you accepted or rejected analytics cookiesLegal obligation to respect your choice, and legitimate interests
Analytics data, only if you accept analytics cookies: pages viewed, approximate location, device type and how you arrived at the siteTo understand how the site is used and improve itConsent, which you can withdraw at any time
Anything you send us by email or post: your name, contact details, organisation and messageTo reply to you and, if you ask, to arrange a demoLegitimate interests in responding to enquiries

We do not currently run analytics on this site. If we start, nothing will be collected unless you accept analytics cookies, and this notice and our cookie policy will name the provider.

What we do not collect

  • The SAR deadline calculator runs entirely in your browser. The dates you enter are never sent to us.
  • We do not use advertising cookies, tracking pixels or social media plug-ins.
  • We do not sell personal data, and we do not use it to make automated decisions about you.

Demo bookings are made on wearestrata.ai, and the privacy information on that site applies to them.

Who we share it with

We share personal data only with service providers who process it for us under contract, on our instructions:

  • Vercel Inc., which hosts the site and processes the technical data above to deliver it
  • our email and productivity providers, if you write to us

We may also disclose personal data if the law requires it, or to protect our rights, property or safety, or those of others.

International transfers

Our hosting provider is based in the United States and serves the site through a global network. Where personal data is transferred outside the UK, it is protected by the UK–US data bridge, where the recipient is certified to it, or by the International Data Transfer Agreement or Addendum issued by the Information Commissioner's Office.

How long we keep it

  • Technical data in hosting logs is kept only for the short period our hosting provider's logging service retains it, and is used only for security and troubleshooting.
  • The sar_consent cookie expires after 180 days, after which we ask again.
  • Correspondence is kept for as long as we need it to deal with your enquiry, and for no more than two years after our last contact unless you become a customer.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you (a subject access request)
  • ask us to correct data that is inaccurate or incomplete
  • ask us to delete your data
  • ask us to restrict how we use your data
  • object to our use of your data where we rely on legitimate interests
  • withdraw consent at any time, where we rely on consent, for example by changing your choice in Cookie settings at the foot of any page
  • ask for data you gave us to be transferred to another organisation, where it is processed by automated means on the basis of consent or a contract

To exercise any of these rights, write to WeAreStrata Limited, 4 Usk Vale Court, Pontypool, NP4 8AS, or use the contact details at wearestrata.ai. We will respond within one calendar month, as the law requires. There is normally no charge.

Complaints

If you are unhappy with how we have used your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

We will update this notice if the way we use personal data changes. The date at the top shows when it last changed.