- 1. Introduction
- Stravoryn Strategy ("we", "us" or "our") provides the services described on this website. Stravoryn is a senior-led strategy advisory for organizations facing a limited number of consequential choices. It supports corporate direction, growth platforms, portfolio priorities, market entry, planning and leadership alignment. This Privacy & Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you visit stravorynstrategy.com, contact or contract with us, use services we provide directly, or interact with systems we operate for clients. A service-, client- or partner-specific notice may add information and takes priority for that processing if it conflicts with this policy.
- 2. Company and Privacy Contact Details
- Company: Stravoryn Strategy
Headquarters: Seattle, Washington, USA
Website: https://stravorynstrategy.com
Privacy email: privacy@stravorynstrategy.com
- 3. Our Role in Data Processing
- Stravoryn Strategy is generally the controller for its website, business administration and services offered directly. For personal data supplied and controlled by a client or operational partner, roles depend on the engagement and may place Stravoryn Strategy as processor or service provider. If we process data for a client, requests about that data should normally be directed to the client. We assist the client as required by contract and applicable law.
- 4. Personal Data We Collect
- Depending on the service and your relationship with us, we may collect: business contact and relationship data; contracts, correspondence and billing records; client and stakeholder contacts; interview and workshop notes; research, planning and portfolio materials; correspondence, contracts and billing records; website and technical data such as IP address, browser and device details, pages viewed, referral source, approximate location derived from IP, cookie choices, timestamps and security logs; and information you choose to provide in inquiries, applications, surveys or support requests. Please do not provide sensitive or unnecessary data. We process sensitive data only where genuinely required, lawful and subject to appropriate safeguards.
- 5. How We Collect Personal Data
- We collect data directly from you; from your employer, client, authorized administrator, operational partner or service user; automatically from authorized websites, applications, devices, integrations and security systems; from providers involved in an authorized service or transaction; and from public or licensed sources where lawful and relevant to due diligence, research or service delivery.
- 6. Why We Process Personal Data
- We process personal data to conduct research, interviews, workshops and strategic analysis; prepare recommendations and planning materials; administer engagements, billing and secure collaboration; respond to inquiries and prepare proposals; contract with clients and manage suppliers; protect people, information and systems; prevent fraud and misuse; comply with law; resolve disputes; and maintain required records. We do not sell personal data for money and do not use client-controlled data for our unrelated advertising.
- 7. Legal Bases
- Where applicable United States federal and Washington State privacy, consumer-protection, communications and data-security laws require a legal basis, we rely as appropriate on performance of a contract or pre-contract steps; compliance with legal obligations; consent; protection of vital interests in a genuine emergency; and legitimate interests such as delivering and improving services, securing systems, administering the business and communicating with business contacts, balanced against individual rights. Where local law uses different terminology, we process data only for purposes and on grounds permitted by that law. Consent may be withdrawn without affecting earlier lawful processing.
- 8. Sharing Personal Data
- We disclose only what is reasonably necessary to authorized hosting, cloud, connectivity, security, analytics, communications, payment, customer-support and professional-service providers; clients and their authorized administrators; operational partners required for the service; advisors, insurers, auditors and transaction successors subject to confidentiality; and courts, regulators or law-enforcement bodies where legally required or necessary to protect rights and safety. Independent third parties are responsible for their own privacy notices.
- 9. International Transfers
- Our clients, users, suppliers and infrastructure may be in different countries. Where transfer restrictions apply, we use a lawful mechanism appropriate to the relevant jurisdiction, such as an adequacy decision, approved contractual clauses, binding commitments, consent where permitted, or another recognized safeguard, together with supplementary protections where appropriate.
- 10. Retention
- We retain personal data only as long as needed for the purpose collected, considering contract duration, client instructions, account activity, security and backup cycles, dispute periods and legal, tax, audit or regulatory duties. Website inquiries and unsuccessful proposals are generally retained for up to 24 months after the last substantive contact. Client, supplier, transaction and accounting records are retained for the engagement and applicable statutory period. Client-controlled service data follows the contract, secure backup rotation and legal holds. Security logs are kept for a proportionate risk-based period unless required for an investigation or claim.
- 11. Security
- We use proportionate technical and organizational safeguards, which may include role-based access, authentication, encryption where appropriate, logging and monitoring, secure change processes, vulnerability and incident management, backup and recovery controls, confidentiality duties and supplier review. No system is completely secure, but safeguards are reviewed against the risks and service needs.
- 12. Your Privacy Rights
- Subject to applicable law, you may have rights to access, correct, delete or restrict personal data; object to certain processing or direct marketing; request portability; withdraw consent; change cookie choices; appeal a refusal where local law permits; and lodge a complaint. Contact privacy@stravorynstrategy.com. We may verify identity and authority. If a client controls the data, contact that client first. You may also complain to the Washington State Attorney General and other competent US regulators: https://www.atg.wa.gov/privacy.
- 13. Cookies and Similar Technologies
- Our website may use strictly necessary cookies for security, navigation, forms and privacy choices; preference cookies for requested settings; analytics cookies to understand aggregate use; and marketing cookies only when clearly identified and lawfully enabled. Where consent is required, non-essential cookies operate only after consent. The live cookie banner or preference center must list the cookies actually deployed, their providers, purposes and durations. You can reject or withdraw consent there and can block or delete cookies in your browser; blocking essential cookies may affect operation.
- 14. Direct Marketing
- We may send relevant business communications where permitted by law. You can opt out through the message or by contacting us. Service, security and transaction messages are not marketing and may still be sent when necessary.
- 15. Children
- Our website and business services are not directed to children unless a specific service notice states otherwise. We do not knowingly collect a child's personal data in breach of applicable age-verification or parental-consent requirements. A parent or guardian may contact us about a child's data. We do not use children's personal data for targeted advertising.
- 16. Changes to This Policy
- We may update this policy when our services, technology, law or processing change. The latest version will be published on stravorynstrategy.com with its revision date, and material changes will be communicated by an additional appropriate method where required.
- 17. Contact Us
- Questions, complaints or privacy requests may be sent to privacy@stravorynstrategy.com or addressed to Stravoryn Strategy, Seattle, Washington, USA.