All legal documents

Privacy Policy

What personal data we collect, why, and your rights under UK GDPR.

Last updated: 30 July 2026

1. Who we are

STRIDEHQ LTD ("StrideHQ", "we", "us"), registered in England and Wales with company number 17105516, operates stridehq.ai and the StrideHQ platform. For personal data described in this policy, StrideHQ is the controller unless stated otherwise.

2. Roles: when we are and are not the controller

2.1 Website visitors and demo requests: StrideHQ is the controller.

2.2 Engagement data on the platform (creator details, contracts, invoices uploaded by a client): the client is the controller and StrideHQ is a processor acting under the Data Processing Agreement. Rights requests about that data should go to the client; we will assist them.

2.3 Compliance processing (identity verification, sanctions and AML screening): StrideHQ and its payment provider each act as independent controllers to meet their own legal obligations.

3. What we collect

  • Contact and account data: name, work email, company, role, login credentials.
  • Creator onboarding data: legal name, address, date of birth, tax identifiers (for example UTR, W-8BEN/W-9 details), bank details, identity documents where verification requires them.
  • Transaction and engagement data: contracts, invoices, payment instructions and their audit trail.
  • Technical data: IP address, browser and device information, and usage logs kept for security.
  • Marketing data: demo requests and correspondence, managed in our CRM.

4. Why we use it and our lawful bases

  • To provide the platform (performance of a contract).
  • Identity verification, sanctions and AML checks (legal obligation, and legitimate interests in preventing fraud).
  • Security, logging and abuse prevention (legitimate interests).
  • Responding to enquiries and marketing to business contacts (legitimate interests, or consent where required; you can opt out at any time).
  • Tax and regulatory record-keeping (legal obligation).

We do not sell personal data.

5. Who we share it with

  • Payment provider (Airwallex) to execute payments and meet its own regulatory obligations.
  • Service providers that host and support the platform (for example cloud hosting, email delivery, CRM and analytics providers), under contracts restricting their use of the data.
  • Regulators, tax authorities and law enforcement where required by law.
  • Professional advisers and prospective acquirers in connection with corporate transactions, under confidentiality obligations.

A current list of sub-processors used for platform data is available in the Data Processing Agreement or on request.

6. International transfers

Platform data is stored in the UK and EU by default. Where personal data is transferred outside the UK or EEA (for example to pay a creator in another country, or where a service provider processes data abroad), we rely on adequacy regulations, the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses, as applicable.

7. Retention

Tax, AML and audit records are retained for the periods required by law, typically 5 to 7 years. Account data is deleted or anonymised within 90 days of account closure unless a longer period is legally required. Marketing data is kept until you opt out or it becomes inactive.

8. Your rights

Subject to legal limits, you can ask us to: access your personal data; correct it; delete it; restrict or object to processing; provide a portable copy; and withdraw consent where processing is based on consent. Contact support@stridehq.ai. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, or to your local supervisory authority.

9. Cookies

Cookies and similar technologies are described in our Cookie Policy. Consent is managed through the banner on this site and can be changed at any time.

10. Changes

We will post updates to this policy on this page and, for material changes affecting platform users, notify you by email or in the platform.