Privacy Policy

Institutional Overview & Data Controller

StratWell ("the Practice") is committed to maintaining the highest standards of data privacy, confidentiality, and executive security. This Privacy Policy outlines how we collect, process, and safeguard personal and corporate information when you access strat-well.co.uk or submit a mandate request through our intake portal.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, StratWell acts as the Data Controller for all information submitted via this domain.

Information We Process

To evaluate strategic fit and manage enterprise mandates, we collect and process limited, high-intent executive data:

  • Executive Contact & Corporate Data: Full name, executive job title, direct corporate email address, contact number, company name, registered business address, and reported annual turnover metrics submitted via the intake portal.

  • Mandate Diagnostics: Qualitative operational context, friction descriptions, and governance background provided during preliminary diagnostic evaluations.

  • Technical & Usage Metadata: Standard server log information, including IP addresses, browser specifications, and referral sources collected strictly for security, system integrity, and platform optimization.

Lawful Basis & Use of Data

StratWell processes personal and corporate data strictly under the following lawful bases:

  • Contractual Necessity & Pre-Contractual Steps: Processing intake submissions to evaluate strategic fit, conduct pre-mandate diagnostics, and execute formal advisory agreements.

  • Legitimate Interests: Maintaining institutional security, defending against digital vulnerabilities, and managing active corporate relationships.

  • Legal Obligation: Retaining financial transaction records, invoicing metadata, and compliance documentation under English tax and corporate law.

We do not rent, sell, trade, or publicly disclose corporate or personal data under any circumstances.

Data Sharing & Institutional Safeguards

We only disclose information to trusted enterprise service providers essential to operational execution (such as encrypted cloud infrastructure, security networks, and secure banking processors). All technical partners are bound by strict contractual confidentiality agreements and data protection standards compliant with UK legislation.

We reserve the right to disclose data only where required by English law or to protect the legal rights, security, and intellectual property of the Practice.

Data Security & Retention

All diagnostic disclosures and executive communications are held under strict institutional confidentiality standards.

  • Security Controls: We implement enterprise-grade technical and organizational security measures to protect corporate data against unauthorized access, loss, or alteration.

  • Mandate Retention: Non-converting intake inquiries are securely purged from our systems within 12 months. Financial and contractual documentation relating to confirmed engagements is retained for six (6) years in accordance with UK statutory requirements. Payment data is processed via secure PCI-compliant gateways; full card credentials are never stored by the Practice.

Essential Cookies & Telemetry

The Practice deploys minimal essential cookies necessary for system security, CSRF protection, session integrity, and platform optimization. We do not run intrusive consumer tracking networks.

Statutory Rights (UK GDPR)

Under UK data protection legislation, executive contacts retain formal statutory rights regarding their personal data, including the right to:

  • Access personal and corporate data held by the Practice.

  • Request immediate correction of inaccurate records or complete erasure of non-statutory data.

  • Restrict or object to the processing of specific data streams.

  • Request data portability for formal transfer.

To exercise any statutory rights or submit a formal data inquiry, contact the Practice directly at: contact@stratwell.co.uk

Updates to Governance Protocols

StratWell reserves the right to amend this Privacy Policy to reflect evolving regulatory, legal, or practice standards. Revisions take immediate effect upon publication to this page.

Contact Us

For formal inquiries regarding this Privacy Policy or data processing practices, direct all correspondence to: contact@stratwell.co.uk