Privacy Policy

1. Introduction and scope

This Privacy Policy applies when you visit https://strategy-guide.win/ (the “Site”), contact Strategy Guide Win, ask for a review or proposal, or receive consulting and related technical services from us.

It does not cover third-party websites, platforms, or services that you may access through links on the Site. Those organisations are responsible for their own privacy practices.

Please read this policy together with the Cookie Policy and any contract, statement of work, or service-specific notice provided to you.

2. Who we are

Strategy Guide Win provides DevOps-first automation consulting, workflow review, integration, monitoring, maintenance, and related technical services. In this policy, “Strategy Guide Win”, “we”, “us”, and “our” refer to the operator of the Site and the provider identified in your proposal, invoice, or contract.

For personal data that we decide how and why to use—for example, contact details received through an enquiry—we act as the data controller or equivalent responsible organisation under applicable privacy law.

When we process personal data solely on a client’s documented instructions as part of a technical engagement, the client will normally be the controller and we will act as its processor or service provider. Those responsibilities should be set out in the relevant contract or data-processing terms.

3. Personal data we collect

The data collected depends on how you interact with us. It may include:

• Identity and contact data: name, email address, telephone number, organisation, job title, and business contact details.
• Enquiry and appointment data: preferred date and time, service of interest, message content, and information you choose to provide about a workflow or business problem.
• Client and commercial data: proposal, contract, project, billing, payment, transaction, and account administration information.
• Technical and project data: system descriptions, diagrams, logs, configuration details, integration requirements, support records, and other material needed to assess or deliver agreed services.
• Communications data: emails, meeting notes, feedback, support requests, and records of our correspondence.
• Website technical data: information that a hosting, content-delivery, or security provider may record, such as IP address, browser type, device information, requested page, referring page, and date and time of access.
• Marketing preferences: whether you have asked to receive or stop receiving relevant updates.

4. How data is collected

We may collect personal data:

• directly from you when you email, call, meet with us, request a review, ask for a proposal, enter a contract, or provide information during service delivery;
• from your organisation, colleagues, authorised representatives, or project partners;
• from systems, platforms, and service providers that you authorise us to access for an agreed engagement;
• from public business sources, such as company websites or professional profiles, where relevant to a legitimate business enquiry; and
• automatically through limited server, delivery, and security logs generated when the Site is accessed.

If you provide personal data about another person, you should have authority to do so and should make this policy available to them where appropriate.

5. How and why data is used

We use personal data only where there is a valid reason under applicable law. The table below summarises the main purposes and likely legal bases.

Where consent is used, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

We may use information for another compatible purpose where permitted by law. If a materially different purpose requires a new notice or consent, we will provide it first.

6. Website and technical data

The Site is intended to be static and does not provide a user account or login area. The visible booking and enquiry tools prepare an email draft in your own email application. Your information is not transmitted to Strategy Guide Win until you choose to send that email.

A web host, content-delivery network, domain provider, or security service may process limited technical logs to deliver pages, prevent abuse, diagnose faults, and maintain security. These records may include IP address, browser or device information, requested resources, timestamps, and security events.

At the date shown above, the Site does not intentionally use analytics, advertising, or behavioural profiling tools. See the Cookie Policy for more detail and for changes to cookie use.

7. Enquiries, appointments, and client work

Before an engagement

When you send an enquiry or booking request, we use the details you provide to understand the request, communicate with you, arrange a call, assess fit, and prepare a proposal or next step.

During an engagement

We may need access to business systems, workflow data, logs, configuration, credentials, or sample records. Access should be limited to what is necessary, granted through suitable accounts or secure channels, and removed when no longer required.

Where client systems contain personal data, the client remains responsible for deciding what data may be made available and for ensuring an appropriate lawful basis, notice, and contract are in place. We will follow documented instructions, confidentiality obligations, and agreed security controls.

After an engagement

We may retain agreed deliverables, project records, invoices, correspondence, and limited technical notes for support, warranty, audit, legal, and business-record purposes. Client secrets and access credentials should be removed or returned when they are no longer needed.

8. Who data may be shared with

We do not sell personal data. We may share the minimum necessary information with:

• hosting, content-delivery, security, communications, email, file-transfer, project-management, accounting, and other business service providers;
• approved subcontractors or technical specialists supporting an engagement, subject to appropriate confidentiality and data-protection terms;
• professional advisers such as accountants, insurers, auditors, and legal advisers;
• regulators, courts, law-enforcement bodies, tax authorities, or other public authorities where disclosure is required or legally permitted;
• a potential buyer, investor, successor, or transaction adviser in connection with a sale, restructuring, merger, or transfer of the business; and
• other parties where you ask us to share the information or give valid consent.

Service providers are expected to use personal data only for the contracted purpose, keep it secure, and comply with applicable privacy obligations.

9. International data transfers

Some technology and communications providers may store or process data in countries other than the country where you are located. Where privacy law restricts international transfers, we will use an approved safeguard where required, such as an adequacy decision, recognised contractual clauses, or another lawful transfer mechanism.

You may contact us for more information about safeguards relevant to your personal data.

10. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Measures may include access controls, least-privilege permissions, multi-factor authentication, secure transfer methods, encryption where appropriate, backups, logging, and supplier review.

No internet or storage system is completely secure. Please tell us promptly if you believe information connected with Strategy Guide Win has been exposed or misused.

11. How long data is kept

We retain personal data only for as long as reasonably needed for the purpose it was collected, including service delivery, support, record keeping, security, tax, accounting, insurance, and legal requirements.

Retention depends on the type of record, the relationship, contractual commitments, sensitivity, risk, and any applicable limitation or statutory period. When data is no longer required, it will be deleted, securely disposed of, returned, or anonymised where reasonably practicable.

Backup copies may remain for a limited period until they are overwritten through the normal backup cycle. Data needed for a dispute, investigation, legal hold, or regulatory obligation may be retained longer.

12. Your privacy rights

Depending on where you live and the law that applies, you may have some or all of the following rights:

These rights are not absolute. We may need to verify your identity, clarify the request, retain information required by law, or refuse a request where the law allows. We will explain any applicable limitation.

We do not intend to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

13. Marketing communications

We may send relevant business communications where you have asked to receive them or where applicable law permits communication based on an existing business relationship. You may opt out at any time by using an unsubscribe option where provided or by contacting us.

Opting out of marketing will not prevent service, project, billing, security, or other non-marketing communications that are still necessary.

14. Children and sensitive data

The Site and services are intended for business users and are not directed to children. We do not knowingly collect personal data from children through the Site.

We do not intentionally request special-category or highly sensitive personal data through general enquiries. Please do not send information about health, biometrics, race or ethnicity, political opinions, religion, sexual orientation, criminal allegations, or similar sensitive matters unless it is necessary, lawful, and specifically agreed for an engagement.

15. Third-party links and services

The Site may link to third-party websites, repositories, social platforms, booking tools, documentation, or other services. Following a link may allow that third party to collect or receive information under its own privacy policy. We do not control those third-party services.

16. Questions and complaints

Please contact us first if you have a question, wish to exercise a privacy right, or are concerned about how your data has been handled. We will review the request and respond within the period required by applicable law.

You may also have the right to complain to the privacy or data-protection authority in your country or region. We would appreciate the opportunity to address the issue before you approach a regulator.

17. Changes to this policy

We may update this policy when the Site, services, suppliers, legal requirements, or data practices change. The “Last updated” date at the top of the page identifies the current version.

Material changes will be highlighted on the Site or communicated directly where appropriate.

18. Contact

Questions, rights requests, or complaints about this Privacy Policy can be sent through the enquiry options on the Strategy Guide Win website. Please use the subject “Privacy request” and include enough information for us to identify and respond to your request.