Privacy Policy

Sterling Formations ("we", "us", "our") operates the website at www.sterlingformations.co.uk and any associated subdomains.

We are the data controller for personal data collected through this website. For data-protection enquiries, contact us at: privacy@sterlingformations.co.uk

We may collect the following categories of personal data:

• Email address — when you submit our early-access / waitlist form or contact us.
• Name — if you provide it via a contact or enquiry form.
• Message content — any information you voluntarily include in a contact form.
• Technical data — IP address, browser type, operating system, referring URL, and pages visited, collected automatically via server logs and analytics.
• Cookies — see Section 7 below.

We do not collect payment card information, national insurance numbers, or any special-category data (as defined by UK GDPR Article 9).

We use your personal data for the following purposes and on the following legal bases:

We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

We do not sell your personal data. We may share it with:

• Hosting and infrastructure providers — who process data on our behalf under data-processing agreements.
• Analytics providers — aggregated, anonymised data only where possible.
• Legal authorities — if required by law, court order, or to protect our legal rights.

All third-party processors are required to handle your data in accordance with UK GDPR.

We retain personal data only for as long as necessary for the purpose it was collected:

• Waitlist email addresses — until you unsubscribe, or until we have notified you of our launch and 30 days have elapsed, whichever is sooner.
• Contact enquiries — up to 2 years from the date of the enquiry.
• Server logs — up to 90 days, then anonymised or deleted.

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent (e.g. unsubscribing from our waitlist).

To exercise any of these rights, email us at privacy@sterlingformations.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use the following types of cookies:

• Strictly necessary — required for the site to function (e.g. session management). These cannot be disabled.
• Analytics — used to understand how visitors use our site. We aim to use privacy-preserving, cookieless analytics where possible. Where cookies are set, we will seek your consent.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

We use industry-standard measures to protect your data — including TLS encryption in transit and encrypted storage at rest. No internet transmission is completely secure; we cannot guarantee the absolute security of data sent to us, but we take all reasonable precautions.

We primarily store and process data within the UK and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page with a revised "Last updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, contact us at privacy@sterlingformations.co.uk.