Privacy Policy
Effective date: 1 September 2026
1. Who we are
Welcome to the privacy notice for STEK SOLUTIONS LTD (trading as S Tek Solutions). We respect your privacy and are committed to protecting your personal data.
For the purposes of the UK General Data Protection Regulation (UK GDPR), we are the data controller for the personal data described in this notice.
- Legal Entity: STEK SOLUTIONS LTD
- Company Number: 17207754
- Registered Office: Templefields House, Flat 133 River Way, Harlow, Essex, United Kingdom, CM20 2GP
- Email: info@steksolutions.net
- Phone: 07506 247024
- Website: https://www.steksolutions.net
2. Scope of this notice
This privacy notice informs you about how we collect, use, store, and transfer your personal data when you visit our website, contact us, or engage our services. It also informs you about your privacy rights and how the law protects you.
3. How to contact us about data protection
If you have any questions about this privacy notice, our data protection practices, or if you wish to exercise your legal rights, please contact us at our primary contact point for privacy queries:
Email: info@steksolutions.net
4. The personal data we collect
We collect personal data from various sources depending on how you interact with us:
- Information you give us via forms: When you use our contact or enquiry forms, we collect your name, email address, phone number, the service you are interested in, and the content of your message.
- Information from business correspondence: If we enter into discussions or deliver a project, we collect information relating to the project delivery and ongoing client relationship management.
- Technical information collected automatically: When you visit our website, our hosting platform sets a first-party session cookie named session-id and automatically records aggregate page-view data (pages viewed, referrer, approximate location from IP, browser and device type) so we can measure site traffic and detect abuse.
5. Purposes and lawful bases
We will only use your personal data when the law allows us to. The table below outlines the purposes for which we process your data, the categories of data involved, and our lawful basis for doing so.
| Purpose | Personal data used | Lawful basis |
|---|---|---|
| Responding to enquiries and providing quotations | Name, email, phone, message content | Legitimate interests; steps prior to entering a contract |
| Delivering contracted services and managing client relationship | Identity, contact details, project correspondence | Performance of a contract |
| Invoicing and keeping accounting records | Identity, contact details, financial records | Legal obligation |
| Securing and maintaining the website | Technical data (IP, browser type) | Legitimate interests |
| Marketing communications (where sent) | Name, email | Consent (with the right to withdraw at any time) |
6. Cookies and local storage
Our website does not use advertising or third-party tracking cookies. We only use strictly necessary technical storage, such as browser local storage, to remember your preferences (e.g., your light/dark theme preference).
Our website hosting and deployment platform sets a first-party session cookie named session-id and records aggregate page-view data (pages viewed, referrer, approximate location from IP, browser and device type) so we can measure site traffic and detect abuse. This data is aggregated, is not used to build marketing profiles, and is not shared with advertisers. We rely on our legitimate interests for this processing. You can block or clear these cookies in your browser settings, or contact us to object.
We do not use advertising, profiling, or third-party marketing cookies. We will update this notice and seek your consent before introducing any such cookies.
7. Sharing your personal data and our processors
We do not sell your personal data. We may share it with trusted third-party service providers (processors) who help us operate our business, including:
- Hosting and website infrastructure providers
- Email delivery providers
- Cloud storage providers
- Website hosting, deployment and site-analytics platform
- Accounting and professional advisers
These processors act only on our documented instructions under written contracts containing UK GDPR Article 28 terms. We may also share data with law enforcement or regulatory bodies where required by law.
8. International transfers
Some of our service providers may process your data outside the UK. Where they do, we ensure your data is protected by relying on UK adequacy regulations or implementing appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
9. How long we keep personal data
We only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for:
- Unconverted enquiries: Kept for a limited period to allow follow-up, then securely deleted.
- Client and project records: Retained for the duration of our commercial relationship.
- Financial and tax records: Retained for the statutory period of six years after the end of the relevant financial year.
- Marketing consents: Kept until you withdraw consent.
10. How we protect your personal data
We have implemented appropriate organisational and technical security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. These include encryption in transit, strict access controls, least-privilege access policies, and thoroughly vetted suppliers.
11. Your rights
Under the UK GDPR, you have several rights in relation to your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Request that we suspend processing of your data.
- Portability: Request transfer of your data to you or a third party in a machine-readable format.
- Objection: Object to processing based on our legitimate interests.
- Withdrawal of consent: Withdraw consent at any time where we rely on it.
- Automated decision-making: The right not to be subject to solely automated decision-making. (We confirm we do not carry out automated decision-making or profiling).
To exercise any of these rights, please email us at info@steksolutions.net. We respond to all legitimate requests within one month, free of charge in normal circumstances. We may need to request specific information to help confirm your identity.
12. Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
13. Third-party links
Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these external sites and are not responsible for their privacy statements.
14. Children
Our website and services are aimed exclusively at businesses and professionals. They are not directed at children under the age of 18, and we do not knowingly collect personal data relating to children.
15. Changes to this notice
We keep our privacy notice under regular review and may update it from time to time. The effective date at the top of this page indicates the current version.