Privacy Policy
Last updated: 19 September 2026
This Privacy Policy explains how Strategic Minds Group Limited, trading as Strategic Minds (“we”, “us”, “our”), collects, uses and protects your personal data when you visit our website at https://strategicminds.co.uk (“the Website”) or contact us about our services.
We are a company registered in England and Wales under company number 10642767. Our registered office is at 57 Nine Elms Lane, London, SW11 7DF. For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, we are the data controller for the personal data described in this policy.
1. Scope of this policy
This policy covers the Website and the enquiries you send us through it. It does not cover the products we build and operate, each of which has its own privacy policy and terms published on its own site:
Where we provide consultancy services to a client under a written engagement, the handling of personal data in that engagement is governed by the agreement and any data processing terms we enter into with that client. In that context we usually act as a processor on the client’s behalf.
2. Information we collect
2.1 Contact enquiries
When you complete the contact form on the Website we collect your name, email address, telephone number, your message, and your company name if you provide it. The form submission is delivered to our inbox by email and we may store it in our mailbox, notes and customer relationship records so that we can respond and keep track of the enquiry.
2.2 Email and other correspondence
If you email us, connect with us on LinkedIn, or speak to us at an event, we collect the contact details and other information you share with us, and we keep a record of our correspondence.
2.3 Website usage data (analytics)
With your consent, we use Google Analytics 4 to understand how visitors use the Website, including pages visited, session duration, approximate location (city or region level), device and browser type, and the referring website. Analytics cookies are only set after you accept them in our cookie banner. See section 5 for details and how to change your choice.
2.4 Technical and security data
Our hosting provider automatically records technical information about requests to the Website, including IP address, browser type, the pages requested and the time of the request, in server logs. We use this to keep the Website secure and reliable and to diagnose faults. This information is retained for a short period and is not used to build a profile of you.
2.5 Blog readership
We count how many times each blog post is read so that we can show popular articles. The count is a simple total and is not linked to you. A marker is stored in your browser’s session storage to avoid counting the same visit twice; it contains no personal data.
2.6 Content administration area
The Website has a private area used by our own staff to publish content. Signing in sets the session cookies listed in section 5. Visitors to the Website do not use this area and no visitor accounts are created.
3. How we use your information
- To respond to your enquiry and discuss how we might work together.
- To prepare proposals, agree engagements and provide our consultancy services to clients.
- To keep in touch about our work and services where you have asked us to or where we have an existing relationship with you. You can ask us to stop at any time.
- To operate, secure and improve the Website.
- To understand how the Website is used, where you have consented to analytics cookies.
- To comply with our legal, regulatory and accounting obligations.
4. Legal bases for processing
Under the UK GDPR we rely on the following legal bases:
- Legitimate interests (Article 6(1)(f)), to respond to enquiries, develop our business relationships, keep the Website secure and improve it, and keep in touch with business contacts, where those interests are not overridden by your rights and freedoms.
- Contract (Article 6(1)(b)), to take steps at your request before entering into an engagement and to perform an engagement we have agreed with you.
- Consent (Article 6(1)(a)), for the placement of analytics cookies. You can withdraw consent at any time using the “Manage cookies” link in the footer of the Website.
- Legal obligation (Article 6(1)(c)), to keep business and accounting records as required by law.
5. Cookies and similar technologies
Cookies are small text files placed on your device when you visit a website. This section also covers similar technologies such as browser local storage and session storage, which work in the same way.
Strictly necessary cookies and storage are needed for the Website to work and for us to remember your cookie choices. They are set without consent as permitted by the Privacy and Electronic Communications Regulations 2003 (“PECR”).
Analytics cookies are set by Google Analytics 4 and are only placed after you accept them in our cookie banner. We do not use advertising or social media tracking cookies on the Website.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
sm_consent_v1 | Strategic Minds (browser localStorage) | Records the cookie choices you made in our banner so we do not ask again. | Until cleared | Strictly necessary |
viewed:<post> | Strategic Minds (browser sessionStorage) | Prevents a blog post view being counted more than once in a browsing session. Contains no personal data. | Browser session | Strictly necessary |
authjs.session-token, authjs.csrf-token, authjs.callback-url | Strategic Minds (Auth.js) | Keep our own staff signed in to the private content administration area and protect it against request forgery. Only set if you sign in. | Session to 30 days | Strictly necessary |
_ga | Distinguishes unique visitors by assigning a randomly generated identifier. | 2 years | Analytics | |
_ga_<container> | Used by Google Analytics 4 to persist session state. | 2 years | Analytics |
Cookie names and durations may change as providers update their services. Where a cookie is set by a third party, that party’s own privacy policy also applies.
Managing your choices. When you first visit the Website you can accept or reject analytics cookies in the banner. You can change your choice at any time using the “Manage cookies” link in the footer. Your choice is stored in your browser’s local storage, so it will not be removed by clearing cookies alone; clearing site data in your browser will remove it. You can also block or delete cookies through your browser settings, although some parts of the Website may then not work as intended.
6. Who we share your information with
We share personal data only with the service providers listed below, and only to the extent necessary to operate the Website and respond to you. Each acts on our instructions under a written contract.
- Vercel Inc. (United States). Website hosting, content delivery network and server logs.
- Supabase Inc. (EU region). Database hosting for our published content and blog readership counts.
- Resend (Plus Five Five, Inc.) (United States). Delivery of contact form submissions to our inbox by email.
- Google LLC (United States). Google Analytics 4, only where you have consented to analytics cookies. We also use Google Workspace for our email and documents.
We may also share information with our professional advisers, and we will disclose information where required by law, regulation or legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others. If we sell or restructure our business, personal data may be transferred to the new owner as part of that transaction.
7. International transfers
Some of our service providers are based outside the United Kingdom, principally in the United States and the European Economic Area. Where personal data is transferred outside the UK, we rely on an adequacy decision where one is in place, or on appropriate safeguards such as the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses.
8. Data retention
- Contact enquiries and correspondence: retained for up to 2 years after our last communication, unless the enquiry leads to an engagement, in which case records are kept for the duration of the relationship and for up to 6 years afterwards to meet legal and contractual obligations.
- Server and security logs: retained in line with our hosting provider’s standard settings, typically no more than 30 days.
- Google Analytics data: retained in accordance with our Google Analytics settings, currently 14 months.
- Business and accounting records: retained for up to 7 years as required by UK tax and company law.
9. Your rights
Under the UK GDPR you have the following rights in relation to the personal data we hold about you:
- Right of access, to request a copy of the personal data we hold about you.
- Right to rectification, to ask us to correct inaccurate or incomplete data.
- Right to erasure, to ask us to delete your personal data, subject to our legal obligations.
- Right to restrict processing, to ask us to limit how we use your data.
- Right to data portability, to receive your data in a structured, commonly used, machine-readable format.
- Right to object, to object to processing based on our legitimate interests, including direct marketing.
- Right to withdraw consent, at any time where we rely on consent.
To exercise any of these rights, contact us at hello@strategicminds.co.uk. We will respond within one month of receiving your request. If we need more time for a complex request (up to a further two months), we will let you know.
10. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
We would appreciate the chance to address your concerns first, so please contact us before approaching the ICO.
11. Children
The Website and our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@strategicminds.co.uk and we will delete it.
12. Security
We take appropriate technical and organisational measures to protect the personal data we hold, including encryption in transit (TLS), access controls limited to the people who need access, and the careful selection of our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review it periodically.
14. Contact us
If you have any questions about this Privacy Policy or our data practices:
- Email: hello@strategicminds.co.uk
- Post: Strategic Minds Group Limited, 57 Nine Elms Lane, London, SW11 7DF
See also our Terms of Use.