Skip to main content
Strongo© Discuss your project

Privacy Policy

Last updated: 13 November 2026

1. Who we are

This website is operated by The Strongo, a sole trader established in England, with a business address at 15 Osmod Street, Oldham, OL4 3EB, United Kingdom. We are the data controller for the personal information described in this policy.

Contact for privacy matters: Ricardo, ricardo@thestrongo.com.

2. What this policy covers

This policy explains what personal information we collect through this website, why we collect it, how long we keep it, who we share it with, and the rights you have. It applies to visitors in the United Kingdom, the European Union and Portugal.

3. Information we collect

  • Enquiry information you submit through our contact form: full name, work email, company name, telephone number (optional), project type, business objective, timeline, how you heard about us, and the message you write.
  • Correspondence you send us by email or through the client portal at clients.thestrongo.com.
  • Technical information generated when you visit: IP address, browser type, device type and pages requested, held in server logs for security and troubleshooting.
  • Aggregated analytics described in section 5. We do not collect advertising identifiers and we do not build user profiles.

4. Why we use it, and our lawful basis

  • To answer your enquiry and provide our services — lawful basis: performance of a contract, or steps taken at your request before entering a contract.
  • To manage our business relationship (invoicing, records, service updates) — lawful basis: contract and legal obligation.
  • To keep the site secure and prevent abuse — lawful basis: legitimate interests in protecting our website and users.
  • To measure aggregate website usage — lawful basis: legitimate interests, using the identifier-free methods described in section 5.

5. Analytics without identifiers

We measure visits and engagement without creating a profile of you and without storing cookies or similar technologies on your device for analytics:

  • PostHog runs in cookieless mode. Nothing is written to cookies or local storage, no session recording is captured, and no person profiles are created.
  • Google Analytics 4, delivered through Google Site Kit, runs with Google Consent Mode v2 set to denied by default. In this state Google receives cookieless, aggregated signals only and does not set analytics cookies.

Because no information is stored on or read from your device for these purposes, these measurements do not require your consent. We disclose them here for transparency.

6. Cookies

We do not use advertising or tracking cookies. The small number of cookies we do use are strictly necessary, plus a consent-preference record. Full details are in our Cookie Policy.

7. Who we share information with

We do not sell personal information. We use service providers (processors) who act on our instructions:

  • Hosting and infrastructure for this website and the client portal.
  • Google (Google Analytics 4 and Google Tag Manager, via Google Site Kit) — aggregated measurement only.
  • PostHog (EU Cloud) — cookieless product analytics.
  • Vimeo — the showreel embedded on our homepage.
  • Complianz — records your cookie preference.
  • Our email provider — for correspondence and enquiries.

We may also disclose information where required by law, or to professional advisers under a duty of confidentiality.

8. International transfers

Some providers process data outside the UK and EEA, principally in the United States. Where that happens we rely on the UK International Data Transfer Addendum and the European Commission Standard Contractual Clauses, together with the providers’ technical and organisational safeguards.

9. How long we keep it

  • Enquiries and project correspondence: 24 months from our last contact, then deleted.
  • Aggregated analytics: 24 months.
  • Invoices and accounting records: 6 years, as required by UK tax law.
  • Server logs: typically 30 days.

10. Your rights

You have the right to be informed, to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email ricardo@thestrongo.com. We respond within one month. We may need to confirm your identity before acting.

11. Complaints

If you are unhappy with how we handle your information, please contact us first so we can put it right. You also have the right to complain to a supervisory authority:

  • United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk.
  • Portugal: Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt.
  • Other EU member states: your national supervisory authority.

12. Security

We use HTTPS across the site, restrict administrative access, keep software updated and limit access to personal information to those who need it. No system is completely secure, but we take these measures seriously.

13. Children

Our services are aimed at businesses. This website is not directed at children under 16 and we do not knowingly collect their personal information.

14. Automated decisions

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

15. Changes to this policy

We may update this policy to reflect changes in our services or the law. The date at the top shows when it was last revised.

16. Contact

The Strongo, 15 Osmod Street, Oldham, OL4 3EB, United Kingdom. Email ricardo@thestrongo.com.