Privacy.

Stodashi Limited, a company registered in England and Wales (company no. 17199057), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. The firm is the data controller for personal data submitted through this site.

Registered with the Information Commissioner’s Office as a data controller — reference ZC148998.

Through the Engage, Connect, and Divest forms: names, email addresses, organisation names, and the free-text contents of correspondence, together with any files attached.

Through standard hosting and edge operations: IP addresses, request metadata, and user-agent strings recorded in server and edge logs.

Personal data is used to read, triage, and respond to inquiries; to operate, secure, and maintain this site and its email infrastructure; and to record and administer engagements that arise from those inquiries. Personal data is not sold, licensed, or shared for marketing, advertising, or profiling.

Pre-contractual steps taken at the request of the data subject (UK GDPR Article 6(1)(b)) where the inquiry concerns a prospective engagement; and the firm’s legitimate interest in responding to professional outreach and in operating and securing the site (UK GDPR Article 6(1)(f)).

The firm relies on the following processors, each engaged under a written agreement that meets UK GDPR Article 28:

• Vercel Inc. — site hosting and delivery
• Cloudflare, Inc. — DNS, edge routing, network security
• Zoho Corporation B.V. — email correspondence to contact@stodashi.co.uk

Certain processors are established outside the United Kingdom, including in the United States and India. Where personal data is transferred outside the UK, transfers are protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or by another safeguard recognised under UK GDPR Article 46.

• Form submissions that do not lead to an engagement: held for up to twelve months from receipt, then deleted.
• Correspondence relating to a live or concluded engagement: held for the duration of the engagement and for six years thereafter, in line with the Limitation Act 1980.
• Server and edge logs: retained for up to thirty days.

This site does not set first-party cookies for analytics, advertising, or behavioural tracking. Infrastructure providers may set strictly necessary cookies for network security and abuse mitigation (for example, Cloudflare’s bot-management cookie). These fall within the strictly-necessary exemption at regulation 6(4) of the Privacy and Electronic Communications (EC Directive) Regulations 2003 and require no consent banner. Should any non-essential cookie be introduced in future, an appropriate consent mechanism will be presented on first visit.

Under UK GDPR you have the right to be informed; the right of access; and the rights to rectification, erasure, restriction of processing, data portability, and to object to processing. Where consent is the basis of processing, you may withdraw it at any time. Exercise any of these rights by writing to contact@stodashi.co.uk; the firm may ask you to verify your identity before responding.

The firm responds to valid requests within one calendar month of receipt. That period may be extended by a further two months where a request is complex or where the firm has received a number of requests from the same subject; in such a case, the firm will explain the reason for extension within the first month.

The firm asks that concerns be raised with it first, so they may be addressed directly. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or by telephone on 0303 123 1113.

Institutional records held by the firm under separate engagements are governed by the data-processing terms of those engagements and not by this notice.

Privacy queries and rights requests: contact@stodashi.co.uk.

The firm may amend this notice. Material changes are reflected in the version date below; the version in force is the one published here.