Privacy Policy

Overview

Stratis Outsourcing Inc. ("Stratis Outsourcing", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit stratisoutsourcing.com or engage with our services.

We serve clients in the USA, Canada, UK, Australia, and the Gulf region. Our practices are designed to comply with applicable privacy laws in those jurisdictions, including the General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the UK GDPR, Australia's Privacy Act 1988, and applicable US state privacy laws.

Information We Collect

Information you provide directly

When you fill out our contact form, request a consultation, or correspond with us by email, we collect:

• Full name and job title
• Email address and phone number
• Company name and business sector
• The service you are enquiring about
• The content of your message

Information collected automatically

When you visit our website, we automatically receive certain technical data, including:

• IP address and approximate geographic location (country / city)
• Browser type, version, and operating system
• Pages viewed, time on site, and referral URL
• UTM campaign parameters (utm_source, utm_medium, utm_campaign)
• Cookie identifiers (see Section 4 for details)

Information from third-party services

We may receive limited information from Google Analytics 4 in aggregated, anonymised form to understand overall website usage patterns. We do not receive raw individual-level data from Google Analytics.

How We Use Your Information

We use the information we collect for the following purposes, each supported by a lawful basis where required under applicable law:

• To respond to your enquiries — We use your contact details to reply to your messages and schedule consultations. (Lawful basis: Legitimate interest / Contract)
• To deliver our services — We use your information to set up and manage any service agreement you enter into with us. (Lawful basis: Contract)
• To send service communications — We may send you emails relating to your engagement with us, including onboarding documents, invoices, and support updates. (Lawful basis: Contract / Legitimate interest)
• To improve our website — We analyse aggregated usage data to understand how visitors navigate our site and which content is most useful. (Lawful basis: Legitimate interest)
• Marketing communications — Only with your explicit consent, we may send occasional updates about relevant services or resources. You may opt out at any time. (Lawful basis: Consent)
• Legal and compliance obligations — We may process your data to comply with applicable laws, court orders, or regulatory requirements. (Lawful basis: Legal obligation)

Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to any third party. We share your information only in the following limited circumstances:

Service providers (processors)

We engage a small number of trusted service providers who process data on our behalf and under our instruction:

• Email delivery — Our transactional email provider (e.g., SMTP service) to send enquiry acknowledgements
• Web hosting — Our hosting provider who operates the servers on which this website runs
• Analytics — Google Analytics 4, for anonymised website usage statistics (IP anonymisation enabled)

All processors are contractually required to handle your data only as instructed and to apply appropriate security measures.

Legal requirements

We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court or government agency).

Business transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal data is transferred and becomes subject to a different privacy policy.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and understand how our site is used.

Types of cookies we use

• Strictly necessary cookies — Required for the website to function (e.g., CSRF token, session cookie). These cannot be disabled.
• Analytics cookies — Used by Google Analytics 4 to collect anonymised data about page views, session duration, and traffic sources. IP anonymisation is enabled.
• Attribution cookies — We store UTM parameters (e.g., utm_source, utm_medium) in a first-party cookie for up to 30 days to understand which marketing channels bring visitors to our site.

Managing cookies

You can control or delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website. For more information, visit aboutcookies.org.

You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required by law.

• Contact enquiries — We retain the details of your enquiry for up to 3 years so we can provide context if you contact us again.
• Active client data — Retained for the duration of our service agreement plus 7 years to comply with financial record-keeping requirements.
• Analytics data — Google Analytics data is retained for 14 months as configured in our GA4 property settings.
• Marketing consents — Records of your consent and opt-outs are retained for the duration of our marketing relationship plus 3 years.

When personal data is no longer needed, we securely delete or anonymise it.

Security

We implement appropriate technical and organisational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and our server
• Access controls limiting who can view personal data within our organisation
• Regular security assessments of our hosting environment
• Rate limiting and CSRF protection on all form submissions

Your Rights

Depending on your location, you may have the following rights regarding your personal data. We will respond to verified requests within 30 days.

• Right to access — Request a copy of the personal data we hold about you
• Right to rectification — Ask us to correct inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data, subject to legal obligations to retain it
• Right to restrict processing — Ask us to pause processing your data in certain circumstances
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interest, including direct marketing
• Right to withdraw consent — Where we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us at grow@stratisoutsourcing.com. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your local data protection authority.

International Data Transfers

Stratis Outsourcing operates from North Carolina, USA. If you are located outside the USA — including in the UK, European Economic Area, Canada, or Australia — your personal information may be transferred to, stored, and processed in the United States.

When we transfer personal data from the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions where applicable.

For Canadian residents, our practices comply with PIPEDA and applicable provincial privacy legislation.

Third-Party Links

Our website may contain links to third-party websites, including partner tools, software vendors, and resource pages. These sites have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

Children's Privacy

Our website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it promptly.

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights in addition to those listed in Section 7:

• Right to know — The categories of personal information collected and the purposes for which it is used
• Right to delete — Request deletion of personal information we have collected, subject to certain exceptions
• Right to opt out of sale — We do not sell personal information, so this right does not apply to our practices
• Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA rights

To submit a CCPA request, email us at grow@stratisoutsourcing.com with "CCPA Request" in the subject line.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

Your continued use of our website after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: