Privacy Notice for Stride Security

Last Updated: June 7, 2025

Welcome to Stride Security. We are a consultancy business providing expert information and cyber security consulting services. We are committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or otherwise interact with us.

1. Who We Are

Stride Security

info@stridesecurity.co.uk

2. Information We Collect

We may collect various types of information from and about you, depending on your interactions with us:

• Personal Identification Information:

  • Name, email address, phone number, company name, job title.

  • This is typically collected when you contact us through our website forms, email, or phone, or when you engage us for our services.

• Professional Information:

  • Details related to your company's security posture, systems, and requirements, which may be shared during consultations and service delivery. This information will be treated with the utmost confidentiality and handled according to specific engagement agreements.

• Website Usage Data:

  • IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and other similar analytics data.

  • This information is collected automatically as you navigate our website, often through cookies and similar tracking technologies.

• Communication Data:

  • Records of your communications with us, including emails, chat transcripts, and phone call details.

3. How We Collect Your Information

We collect information through the following methods:

• Directly from You: When you fill out contact forms on our website, send us emails, call us, or provide information during consultations and service agreements.

• Automatically: As you navigate our website, through the use of cookies, web beacons, and other tracking technologies (see Section 6).

• From Third Parties (Limited): In some cases, we may receive information from third-party services if you engage with us through professional networking platforms or referrals, but only with your explicit consent or where legally permissible.

4. How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Improve Our Services: To deliver our information and cyber security consulting services, respond to your inquiries, and fulfill our contractual obligations.

• To Communicate with You: To send you updates, newsletters (if you opt-in), marketing communications (where permissible), and respond to your questions and requests.

• To Operate and Maintain Our Website: To ensure the proper functioning and security of our website, and to personalize your experience.

• For Analytics and Research: To understand how users interact with our website, identify trends, and improve our services and content.

• For Legal and Security Purposes: To comply with legal obligations, enforce our terms and conditions, prevent fraud, and protect the security of our systems and data.

5. Legal Basis for Processing (for GDPR Compliance)

If you are located in the European Economic Area (EEA) or the UK, we rely on the following legal bases for processing your personal data:

• Performance of a Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., providing consulting services).

• Legitimate Interests: When processing is necessary for our legitimate interests (or those of a third party) and your fundamental rights do not override those interests (e.g., website analytics, direct marketing where permissible, improving our services, preventing fraud). We ensure that a balance is struck between our legitimate interests and your rights and freedoms.

• Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter). You have the right to withdraw your consent at any time.

• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze website usage, and for marketing purposes.

• What are Cookies? Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work more efficiently, as well as to provide information to the owners of the site.

• Types of Cookies We Use:

  • Essential Cookies: Necessary for the website to function properly.

  • Analytical/Performance Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.

  • Functionality Cookies: Used to recognize you when you return to our website and enable personalized features.

  • Marketing/Advertising Cookies: Used to track visitors across websites and display relevant advertisements.

• Your Choices Regarding Cookies: Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may affect the functionality of our website. You can also opt-out of certain third-party advertising cookies through industry-specific opt-out pages.

7. How We Share Your Information

We do not sell your personal data. We may share your information with the following categories of recipients, only when necessary and with appropriate safeguards:

• Service Providers: Third-party vendors and service providers who perform services on our behalf (e.g., website hosting, analytics, email marketing, CRM systems). These providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.

• Legal and Regulatory Authorities: If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

• With Your Consent: We may share your information with other third parties with your explicit consent.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Examples include using SSL/TLS encryption for data in transit, access controls, regular security audits and secure data storage.

• While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

10.21 International Data Transfers (if applicable)

If we transfer your personal data outside of the UK or EEA, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or the UK government.

• Where we use certain service providers, we may use specific contracts approved by the European Commission or the UK government which give personal data the same protection it has in the EEA/UK.

11. Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right to Access: The right to request copies of your personal data.

• Right to Rectification: The right to request that we correct any information you believe is inaccurate24 or incomplete.

• Right to Erasure ('Right to be Forgotten'): The right to request that we erase your personal data, under certain conditions.

• Right to Restrict Processing: The right to request that we restrict the processing of your personal data, under certain conditions.

• Right to Object to Processing: The right to object to our processing of your personal data, under certain conditions.

• Right to Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

• Right to Withdraw Consent: Where we are relying on consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 1. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

12. Complaints

If you have concerns about our privacy practices, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority.

For individuals in the UK, the supervisory authority is the Information Commissioner's Office (ICO). You can find their contact details on their website: https://ico.org.uk/

13. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Notice on this page with a new "Last Updated" date. We encourage you to review this Privacy Notice periodically.

14. Contact Us

If you have any questions about this Privacy Notice or our privacy practices, please contact us at:

Stride Security

info@stridesecurity.co.uk