Privacy Policy

1. Introduction

Staxxd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website staxxd.co.uk and use our services.

We are a UK-based business consultancy and are committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide to us when you:

• Contact us through our contact form (name, email, phone, company, message)
• Subscribe to our newsletter or marketing communications
• Request information about our services

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide customer support
• Send you information about our services (with your consent)
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure website security

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent (e.g., contact form submissions)
• Legitimate Interests: To respond to enquiries and improve our services
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We use Formspree to process contact form submissions. They are GDPR-compliant and act as data processors.
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie preferences through your browser settings or our cookie consent banner.

For more information, please see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Contact form submissions: Retained for 2 years or until you request deletion
• Marketing communications: Until you unsubscribe
• Website analytics: Anonymised data may be retained longer

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at hello@staxxd.co.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

We are committed to maintaining high standards of cybersecurity and follow best practices aligned with Cyber Essentials, a UK government-backed cybersecurity certification scheme. Our security measures include:

• Secure data transmission using encryption (HTTPS/SSL)
• Regular security updates and patches
• Access controls and authentication measures
• Secure hosting and infrastructure
• Regular security assessments

10. International Data Transfers

Your data may be processed and stored outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: