Who we are

Stabiliti Ltd ("Stabiliti", "we", "us", "our") is the data controller responsible for your personal data. We are incorporated in England and Wales under company number 12962740, with a registered office at West Door, 18 Brock Street, Bath, BA1 2LW.

This website (stabiliti.io) is a business-to-business information and marketing site. We do not operate user accounts, process payments, or engage in e-commerce.

If you have any questions about this policy or how we handle your personal data, please contact us at hello@stabiliti.io.

What personal data we collect

We may collect the following categories of personal data:

Contact data: your name, email address, and company name, provided voluntarily when you complete a contact form on our website.
Usage and analytics data: information about how you interact with our website, including your IP address, browser type and version, operating system, pages visited, time spent on pages, and referring URL. This data is collected automatically when you visit stabiliti.io.
Cookie data: data stored in cookies placed on your device. See Section 7 (Cookies) below for further detail.

We do not collect any special category data (as defined in Article 9 UK GDPR), and we do not knowingly collect data from children under 16.

How we collect your data

Contact forms: when you submit an enquiry via a form on our website.
Website analytics: automatically via analytics tools when you browse the site.
Cookies: automatically when you visit the site, subject to your consent preferences.

Why we collect your data and our legal basis

We process personal data only where we have a valid legal basis under UK GDPR:

Contact enquiries

Where you submit a contact form, we process your name, email address, and company name in order to respond to your enquiry and take steps at your request prior to entering into a business relationship. Our legal basis is Article 6(1)(b) UK GDPR (performance of a contract or steps taken at the request of the data subject prior to entering into a contract) and, where applicable, our legitimate interests (Article 6(1)(f) UK GDPR) in managing and responding to business communications.

Website analytics

We process usage and analytics data on the basis of our legitimate interests (Article 6(1)(f) UK GDPR) in understanding how visitors use our website so that we can improve it. We have assessed that this interest is not overridden by your rights and freedoms given the limited nature of the data processed and the measures we take to minimise it.

Cookie consent

We place or read cookies on the basis of your consent (Article 6(1)(a) UK GDPR), except for strictly necessary cookies which are placed on the basis of our legitimate interests in operating the website securely.

How long we keep your data

Contact data (name, email, company): retained for up to two years from the date of last meaningful contact, after which it is securely deleted unless we are required by law to retain it for longer.
Analytics data: retained in accordance with the data retention policies of our analytics provider. We do not retain raw analytics data ourselves beyond the period needed for the purposes described in Section 4.
Cookie data: retained for the duration specified in Section 7 below.

Who we share your data with

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We may share your data with:

Service providers acting as data processors: including our website hosting provider (Vercel Inc.) and website analytics provider, who process data on our behalf and under our instructions. These providers are contractually bound to protect your data and may only use it to provide their services to us.
Legal and regulatory authorities: where we are required to do so by applicable law, court order, or regulatory obligation.
Professional advisers: such as lawyers or accountants, where necessary and subject to obligations of confidentiality.

Cookies

Cookies are small text files placed on your device when you visit a website. We use the following categories of cookies:

Strictly necessary cookies

These cookies are essential for the website to function and cannot be switched off. They include session management and security cookies set by our hosting infrastructure. They do not track you across other sites and do not store personally identifiable information beyond what is needed to operate the site. No consent is required for these cookies.

Analytics cookies

Where analytics cookies are in use, they allow us to count visits and understand how visitors interact with our website so that we can improve it. The data collected is aggregated and anonymous where possible. These cookies are placed only with your consent.

You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or clearing cookies. Note that disabling cookies may affect the functionality of the website.

International data transfers

We do not transfer your personal data outside the United Kingdom or European Economic Area unless an appropriate safeguard is in place (such as adequacy regulations or standard contractual clauses). Where our third-party service providers process data outside the UK/EEA, we ensure that appropriate contractual protections are in place in accordance with UK GDPR requirements.

Your rights under UK GDPR

Depending on the circumstances, you have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to have inaccurate personal data corrected or incomplete data completed.
Right to erasure: to request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to restriction of processing: to ask us to restrict how we use your data in certain circumstances.
Right to data portability: to receive personal data you have provided to us in a structured, commonly used, machine-readable format.
Right to object: to object to processing based on legitimate interests, including profiling.
Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@stabiliti.io. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.

We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

Right to complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at hello@stabiliti.io.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.