1. Data Collection & Processing Principles
We operate under the core principle of data minimization. We only collect personal data strictly required to deliver, secure, and evaluate our online publications and advisory communications. We do not sell, rent, or trade your personal data to third-party data brokers or behavioral advertising networks.
We collect two general categories of information:
- Directly Provided Information: When you complete our contact inquiry form, schedule a briefing, or correspond with us via email, you provide your full name, business email address, employer or organization name, and message context.
- Automatically Collected Technical Telemetry: When you access our website, our web servers log standard HTTP request metadata, including your IP address (anonymized at ingress), browser family, operating system, referring URL, timestamp, and requested asset pathways.
2. Legal Basis for Processing (GDPR & UK Data Protection)
For individuals residing within the European Economic Area (EEA) and the United Kingdom, we process personal data under the following lawful bases established under Article 6 of the General Data Protection Regulation (GDPR):
- Legitimate Interests: To protect our technical infrastructure against distributed denial-of-service (DDoS) attacks, detect malicious scanning, and analyze aggregated readership patterns to improve research publications.
- Contractual Performance: To respond to your direct inquiries, deliver requested technical briefs, or fulfill commercial research engagements.
- Consent: Where required by applicable privacy directives for non-essential telemetry or cookies, we rely upon your affirmative opt-in consent recorded via our cookie consent banner.
3. Third-Party Service Providers & Processors
We partner with vetted infrastructure and IT service providers to deliver our digital services. These sub-processors operate under strict Data Processing Agreements (DPAs) requiring adherence to equivalent data security standards:
- Hosting & Content Delivery Networks: Secure static hosting platforms that store and route website assets via global edge nodes.
- Email & Communications Infrastructure: Encrypted enterprise email gateways handling inbound and outbound communications securely.
- Privacy-Conscious Analytics: Aggregated measurement tools configured without cross-site tracking cookies to observe traffic volume.
If personal data is transferred outside the EEA or the United Kingdom, we ensure appropriate transfer mechanisms, including standard contractual clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum.
4. Data Retention Schedules
We store your personal data only for the period necessary to fulfill the specific purposes outlined in this policy:
- General Inquiries: Communications submitted via our contact portal are retained for up to 24 months from the last active correspondence, after which records are permanently deleted or anonymized.
- Server Access Logs: Raw IP and technical server logs are automatically rotated and purged after 30 days.
- Consent Records: Records of your cookie banner consent choices are maintained in your local browser storage for up to 365 days or until cleared.
5. Your Statutory Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction, you maintain specific enforceable rights regarding your personal data:
- Right of Access: You may request a copy of the specific personal data we hold about you.
- Right to Rectification: You may request corrections to inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where retention is no longer necessary.
- Right to Restrict Processing: You may request limits on how your personal data is utilized during active disputes.
- Right to Data Portability: You may obtain your provided information in a structured, machine-readable format.
- Right to Object: You may object at any time to processing grounded in legitimate interests.
- Non-Discrimination: Under the California Consumer Privacy Act (CCPA), we will never deny services or charge differing rates for exercising your privacy rights.
6. Data Protection Officer (DPO) & Contact Information
To exercise any statutory rights, submit questions regarding this policy, or register a concern regarding our privacy standards, please contact our designated privacy team:
Data Protection Officer
Happystckscoopstrem Tech Intelligence Ltd
72 Great Eastern Street, Shoreditch, London EC2A 3NQ, United Kingdom
Email: [email protected]
You also possess the right to lodge a formal complaint with the competent supervisory authority, such as the UK Information Commissioner's Office (ICO) at ico.org.uk.