Privacy Policy

1. Who we are

Strategy Studio is owned and operated by Molly Edgecombe, trading as Strategy Studio, based in Penzance, Cornwall, United Kingdom.

For any privacy-related queries, please contact us at [email protected].

2. What data we collect and why

When you complete a form or quiz

We collect your first name, email address, and any additional information you provide (such as business name, website, Instagram handle, revenue band, and business type). This information is used to send you your personalised results, relevant resources, and communications based on your answers.

When you make a purchase

We collect your name, email address, and billing information (processed securely by Stripe). We use this to fulfil your order, send purchase confirmations, and provide access to your purchased products.

When you book a call

We collect your name, email address, and any information submitted in the booking or application form. This is used to prepare for and conduct the call.

When you visit our website

We may collect standard analytics data (such as pages visited and time on site) to help us understand how our website is used and improve it. This data is anonymised and does not personally identify you.

3. Legal basis for processing (UK GDPR)

We process your data on the following legal bases:

• Consent - when you opt in to receive marketing communications via a form or checkbox
• Contract - when processing is necessary to fulfil a purchase or booking you have made
• Legitimate interests - for analytics and improving our services, where these interests do not override your rights

4. How we use your data

• To send you your quiz results and personalised recommendations
• To deliver digital products, course access, and workshop details you have purchased or registered for
• To send you relevant marketing emails, resources, and service updates (where you have consented)
• To manage and improve our website and customer experience
• To respond to enquiries and support requests

5. Third parties we share data with

We use trusted third-party service providers to help us operate our business. These include:

• CRM and marketing platform - stores contact data, manages automations and email marketing
• Stripe - processes payments securely. Stripe is PCI-DSS compliant. We do not store card details
• Zoom - used for live workshops and calls
• Analytics tools - used to understand website traffic (data is anonymised)

We do not sell your personal data to any third party.

6. How long we keep your data

• Contact and marketing data: retained until you unsubscribe or request deletion
• Purchase records: retained for 7 years in accordance with UK tax and accounting law
• Booking and call records: retained for 12 months

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (‘right to be forgotten’)
• Object to or restrict how we process your data
• Request a portable copy of your data
• Withdraw consent at any time (including unsubscribing from emails)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to help it function correctly and to understand how visitors use it. These include essential cookies (required for the site to work) and analytics cookies (used to measure traffic). You can manage cookie preferences through your browser settings.

Please see our cookies policy page.

9. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page. We encourage you to check back periodically.