Strongdrwashen
Legal

Privacy Policy

Last updated: today

This Privacy Policy explains how Strongdrwashen (referred to in this document as “the studio”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit our website, complete the contact form or engage us for a workspace ergonomics assessment. We are based at 34 The Piazza, London SE10 9NJ, United Kingdom, and act as the data controller for the personal information described below.

1. Information we collect

We aim to collect the smallest amount of information needed to provide our services and to respond to enquiries. The categories below describe what we may collect and why.

1.1 Information you give us directly

  • Your name, email address and the contents of your message when you submit the contact form.
  • Details about your workspace, working hours and preferences when you engage us for an assessment.
  • Billing information needed to issue an invoice, such as a postal address and, where applicable, a company name.

1.2 Information collected automatically

  • Limited technical data such as your browser type, device type, approximate region derived from your IP address, and the pages you visit on this site.
  • Cookies and similar storage mechanisms used to remember your privacy choices and to keep the site running smoothly. See our Cookies Policy for further detail.

1.3 Information from third parties

We do not buy personal information from third-party data brokers. In limited circumstances we may receive your contact details from a colleague or employer who has asked us to contact you about a workplace assessment.

2. How we use your information

We use the information described above for the following purposes:

  • To respond to enquiries received through the contact form, email or telephone.
  • To deliver the workspace ergonomics services you have asked us to provide.
  • To issue invoices, keep accounting records and comply with tax obligations in the United Kingdom.
  • To improve the structure and content of this website by reviewing aggregated, non-identifying visit statistics.
  • To protect the website and our clients against fraudulent activity and security incidents.

3. Legal bases for processing

Under the UK General Data Protection Regulation and the Data Protection Act 2018, we rely on the following legal bases:

  • Consent for non-essential cookies and for any marketing communications you have explicitly opted in to.
  • Contract where the processing is necessary to provide a service you have requested, such as a paid assessment.
  • Legal obligation for record-keeping required by tax authorities and other regulators.
  • Legitimate interest for the secure operation of our website and for routine communication with prospective and existing clients.

4. How long we keep your information

We keep personal information only for as long as we need it. Enquiry messages are typically deleted within twelve months if no engagement follows. Assessment records and invoices are retained for the period required by UK tax law, which is currently six years from the end of the relevant accounting period. After this point, records are securely deleted or anonymised.

5. Sharing your information

We do not sell or rent personal information. We share limited information with carefully chosen service providers who help us run the studio, including:

  • An email service provider that delivers your message to our inbox.
  • An accounting system used to record invoices and reconcile payments.
  • Professional advisers, such as accountants and legal counsel, who are bound by their own confidentiality obligations.

We may also disclose information where we are legally required to do so, for example in response to a valid court order or a regulator's lawful request.

6. International transfers

Wherever possible we use service providers that store data within the United Kingdom or the European Economic Area. Where transfers outside these regions are necessary, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

7. Your rights

You have a number of rights in relation to your personal information, including the rights of access, rectification, erasure, restriction, portability and objection. You also have the right to withdraw any consent you have previously given. To exercise any of these rights please contact us using the details on our Contact page. We will respond within one calendar month of receiving a valid request.

If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the United Kingdom's data protection regulator.

8. Security

We apply reasonable technical and organisational measures to protect personal information against accidental loss and unauthorised access. This includes encrypted connections to the website, password-protected systems, restricted staff access and routine review of our suppliers' security arrangements.

9. Children's privacy

Our services are intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has shared information with us, please contact us so that we can promptly delete it.

10. Changes to this policy

We review this Privacy Policy periodically and may update it to reflect changes in our practices or in applicable law. Material changes will be highlighted on this page, along with an updated revision date at the top of the policy.

11. Contact

If you have any questions about this Privacy Policy or the way we handle personal information, please write to us at 34 The Piazza, London SE10 9NJ, United Kingdom, or use the form on our Contact page.