Privacy Notice

Last updated: 8 September 2026

Version 2.0 | Replaces the version dated 15 January 2025

Strategy Mentors Ltd is a company registered in England and Wales under company number 10613840, with its registered office at 27 Old Gloucester Street, London WC1N 3AX, United Kingdom (“we”, “us”, “our”). We are the controller of the personal data described in this notice and are registered with the Information Commissioner’s Office (ICO) ZA705188.

Our Managing Director is responsible for data protection matters within the company. You can contact us about anything in this notice:

By post: Strategy Mentors Ltd, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. If you remain dissatisfied, you can escalate your complaint to the Information Commissioner’s Office (ICO):

By email: info@strategymentors.co.uk

Scope of this notice

This notice explains how we collect, use, share and protect personal data, and the rights you have, when you:

visit or interact with our website at strategymentors.co.uk (the “Site”);
are a client, prospective client or a representative of one;
are a supplier, contractor, consultant or other counterparty of ours, or a representative of one;
correspond with us, or are referred to in correspondence or documents we hold in the course of our business;
are otherwise a business contact of ours.

This notice is provided for transparency under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It is not a contract, and using the Site does not constitute agreement to it. Where we process personal data on behalf of a client under a services agreement, that agreement governs the processing, and this notice applies to the extent it is consistent with it.

The personal data we collect

Identity and contact details: name, business name, job title, postal address, email addresses, and telephone numbers.
Business and transaction details: information about your business, invoices you issue to us or we issue to you, bank account details shown on invoices or provided for payment, tax identification numbers, payment records, credit notes and refunds.
Contractual and correspondence data: agreements, proposals, deliverables, and the content of emails, letters and other communications exchanged with us.
Enquiry data: information you submit through forms on the Site or by other means, and your marketing preferences.

Data you provide to us

Data we collect automatically

Technical data when you use the Site: IP address, browser type and version, device information, pages visited and usage statistics, collected through cookies and similar technologies (see section 10).

Data we receive from other sources

From your organisation or colleagues, where you act for a client or counterparty.
From public sources such as Companies House, professional registers and business websites, to verify identity and business details.
From our professional advisers, banks and payment providers in the course of managing our affairs.

We do not intentionally collect special category data (such as health data) or criminal offence data. If such data is provided to us unsolicited, we will only retain it where we have a lawful basis to do so.

How we use personal data and our lawful bases

We only process personal data where the law allows us to. The table below sets out our purposes and the lawful bases we rely on under Article 6 UK GDPR.

Purpose	Lawful basis
Responding to enquiries and providing information you request	Legitimate interests (responding to those who contact us); performance of a contract where you engage us
Delivering advisory and other services to clients, managing client relationships, invoicing and payment	Performance of a contract; legal obligation (accounting and tax records)
Engaging and paying suppliers, contractors and other counterparties; receiving and processing invoices	Performance of a contract; legal obligation (accounting and tax records); legitimate interests (managing our business relationships)
Keeping accounting, tax and corporate records	Legal obligation
Managing our financial affairs, including obtaining advice and support from financial, accounting and legal advisers	Legitimate interests (prudent management of our business)
Establishing, exercising or defending legal claims, including debt recovery and pre-action correspondence	Legitimate interests (protecting our legal and financial position); legal obligation where applicable
Security of our systems, premises and information; prevention and investigation of misuse	Legitimate interests; legal obligation where applicable
Marketing communications about our services	Consent (where required by law); otherwise legitimate interests, with the right to opt out at any time
Website analytics and improvement	Consent (non-essential cookies); legitimate interests (essential operation of the Site)

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your interests, rights or freedoms. Our legitimate interests include running and administering our business, managing relationships with clients and counterparties, obtaining professional advice, keeping our systems and information secure, and establishing, exercising or defending our legal rights, including recovering sums due to us. You can request a summary of the relevant assessment, and you have the right to object as described in section 8.

Who we share personal data with

We share personal data only where necessary for the purposes above, and only to the extent required. Recipients may include:

Professional advisers: accountants, bookkeepers, financial and corporate finance advisers, auditors, lawyers and insurers, where their advice or services require access to the relevant information.
Service providers acting on our behalf: providers of email, cloud storage, IT, document management and accounting software, who process data under our instructions and appropriate contractual safeguards.
Banks and payment providers, to make and receive payments.
Courts, tribunals, regulators, law enforcement and public authorities, where required by law or in connection with legal proceedings.
Counterparties to a contract or dispute and their representatives, where necessary to perform the contract or to establish, exercise or defend legal claims.
A prospective buyer or successor of all or part of our business, subject to confidentiality obligations.

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

International transfers

We are based in the United Kingdom. Some recipients, including advisers, counterparties and service providers, may be located in the European Economic Area or elsewhere. Transfers to the EEA are made under the UK’s adequacy regulations. Where we transfer personal data to a country not covered by UK adequacy regulations, we use appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or rely on a legal derogation, for example, where the transfer is necessary for the establishment, exercise or defence of legal claims. You can ask us for details of the safeguards used.

External Links

The Site may link to third-party websites. These websites are not governed by our Privacy Policy, and we are not responsible for their data practices. Review the privacy policies of any external sites you visit.

How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements and to establish, exercise or defend legal claims. Our main retention periods are:

Category	Retention period or criteria
Accounting, tax and invoicing records (including supplier and client invoices and payment records)	Six years from the end of the financial year to which they relate, as required by UK accounting and tax law, or longer where records are relevant to an open enquiry or claim
Client and counterparty contracts and related correspondence	Duration of the relationship and six years thereafter, reflecting limitation periods for contractual claims
Records relating to actual or anticipated legal claims	Until the claim is finally resolved and any period for appeal or enforcement has expired, and thereafter as required for related accounting or legal purposes
Enquiries that do not lead to a relationship	Up to two years from the last contact
Marketing preferences	Until you withdraw consent or object, plus a record of that withdrawal
Website analytics data	As set out in the cookie information below; aggregated or anonymised data may be kept indefinitely

When data is no longer needed, we delete it securely or anonymise it.

Security

We apply technical and organisational measures appropriate to the risk, including access controls, secure and reputable service providers, encryption in transit, and limiting access to those who need it for the purposes described. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet.

Your rights

Under UK GDPR, you have the right to:

Access: obtain confirmation of whether we process your personal data and a copy of it, together with information about the processing.
Rectification: have inaccurate data corrected and incomplete data completed.
Erasure: have your data deleted in certain circumstances. This right does not apply where we need the data to comply with a legal obligation or to establish, exercise or defend legal claims.
Restriction: have processing restricted in certain circumstances.
Objection: object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. You can object to direct marketing at any time, and we will stop.
Portability: receive certain data in a structured, commonly used, machine-readable format.
Withdraw consent: where processing is based on consent, withdraw it at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in section 1. We may need to verify your identity or the authority of anyone acting on your behalf before responding. We will respond within one month of receiving a valid request, extendable by up to two further months for complex or numerous requests, in which case we will tell you within the first month. There is normally no fee.

If you are unhappy with how we handle your personal data, please contact us first so that we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; helpline 0303 123 1113; ico.org.uk. If you are located in the EU, you may also be able to complain to the supervisory authority in your member state.

Cookies

Cookies are small files placed on your device when you visit the Site. We use:

Essential cookies, which are necessary for the Site to function and are set based on our legitimate interests.
Analytics cookies, such as those provided by Google Analytics, help us understand how the Site is used. These are set only with your consent, which you can give or withdraw through the cookie banner or your browser settings.

You can manage or disable cookies through your browser settings. Disabling some cookies may affect the functionality of the Site. Further details of the cookies we use are available in our cookie settings. Other categories shown in our cookie settings (functional, performance, advertisement) are not currently in use; if this changes, they will be set only with your consent.

Third-party websites

The Site may contain links to third-party websites. This notice does not apply to those sites, and we are not responsible for their privacy practices. We recommend reviewing the privacy notices of any external sites you visit.

Children

Our services and the Site are directed at businesses and business professionals and are not intended for children. We do not knowingly collect personal data from anyone under 18.

Changes to this notice

We may update this notice from time to time to reflect changes in our practices or in the law. We will publish the updated version on the Site with a revised “Last updated” date and version number. Where changes are significant, we will take reasonable steps to notify those affected. Previous versions are available on request.