How we handle your data.

01Who we are

Srate Global ("we", "us", "our") is a product engineering studio. We are the data controller responsible for any personal data we collect through our website, proposals, and client engagements.

For privacy questions or to exercise your rights, contact us at hello@srateglobal.com.

02Data we collect

We collect personal data in three ways: data you give us, data we collect automatically, and data we receive from trusted third parties.

Data you give us

• Contact information (name, email, company, role) submitted through our contact form, proposal requests, or newsletter.
• Project briefs and materials you share with us under an engagement.
• Payment and billing details processed by our payment providers.

Data we collect automatically

• Device and browser information (type, OS, language).
• Approximate location derived from IP address.
• Aggregated analytics about how visitors use the site.

03How we use your data

We use personal data to deliver our services, communicate with prospective and current clients, improve the website, and meet our legal obligations.

• Responding to inquiries and managing client relationships.
• Delivering, supporting, and improving our services.
• Sending product updates, newsletters, and operational emails (with opt-out).
• Detecting, preventing, and responding to fraud or security incidents.
• Complying with applicable law, accounting, and tax obligations.

04Legal basis (GDPR Art. 6)

Where the GDPR applies, we process personal data under one or more of the following legal bases:

• Consent — for marketing emails and non-essential cookies.
• Contract — to negotiate, deliver, and manage client engagements.
• Legitimate interest — to run, secure, and grow our business in a way that respects your rights.
• Legal obligation — to satisfy applicable laws, court orders, and tax records.

05Sharing and third parties

We never sell personal data. We share it only with service providers that help us run the studio — for example, email, analytics, payment, and cloud infrastructure — under written agreements that require equivalent protection.

We may also disclose personal data when required by law, to enforce our terms, or to protect the rights and safety of clients and the public.

06International transfers

Some of our service providers are located outside your country. When personal data leaves the EEA, UK, or other regulated regions, we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant regulator.

07Data retention

We keep personal data only as long as needed to deliver our services, meet contractual obligations, resolve disputes, and comply with applicable law. When data is no longer needed, we delete or anonymise it.

08Your rights

Depending on where you live, you have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete data, subject to legal limits.
• Restriction — limit how we use your data in specific situations.
• Portability — receive your data in a portable, machine-readable format.
• Objection — object to processing based on legitimate interest, including direct marketing.
• Withdraw consent — at any time, where processing is based on consent.

To exercise a right, email hello@srateglobal.com. You also have the right to lodge a complaint with your local data protection authority.

09Children's privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10Changes to this policy

We update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the website or notified by email where appropriate.

11Contact us

If you have questions about this policy or how we handle your data, email hello@srateglobal.com and we'll respond within a reasonable timeframe.