Privacy Policy

Last updated: 8 January 2026

Strengthify Ltd ("Strengthify", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data, and your rights under UK data protection law.

1. Who we are

Strengthify Ltd is a company registered in England and Wales (company number 14856805).

Address:
26 Victoria Way
Burgess Hill
West Sussex
RH15 9NF
United Kingdom

If you have any questions about this Privacy Policy or how we handle personal data, you can contact us at:

Email: dpo @ strengthify.com

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed by Strengthify in connection with:

our website and online presence
business development, marketing, and relationship management activities
delivery of workshops, programmes, assessments, and related services
use of our digital platforms and tools, including Strengthify Engage

This policy applies whether you interact with us directly, through your organisation, or as part of a programme or platform we provide.

3. Our role under data protection law

Depending on the context, Strengthify may act as either:

Data controller

We act as a data controller where we determine how and why personal data is processed, including for:

marketing and business development
relationship and account management
programme delivery and facilitation
website administration
platform administration and communications

Data processor

Where Strengthify Engage is provided to an organisation and personal data is processed on that organisation’s behalf (for example, employee or team data within the platform), Strengthify acts as a data processor and the organisation acts as the data controller.

In these cases, data processing responsibilities may also be governed by a separate data processing agreement between Strengthify and the organisation.

4. Personal data we collect

We may collect and process the following categories of personal data:

Information you provide to us

name
work email address
job title and organisation
contact details
information shared during workshops, programmes, or assessments
information entered into Strengthify Engage (such as profile responses or reflections)

Information collected automatically

website usage data (via cookies and similar technologies)
platform usage data (such as login activity and feature usage within Strengthify Engage)
technical information such as IP address, browser type, and device information

Outputs and insights

Where you use Strengthify Engage or participate in assessments or programmes, we may process personal data included within generated outputs (such as reports or profiles).

5. How we use personal data

We use personal data for the following purposes:

to provide, administer, and improve our services and platforms
to manage accounts, access, and communications
to deliver workshops, programmes, assessments, and follow-on support
to respond to enquiries and maintain professional relationships
to analyse usage and improve the design, effectiveness, and quality of our services
to meet legal, regulatory, and contractual obligations

6. Legal bases for processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contractual necessity – where processing is required to provide services or platforms
Legitimate interests – where processing supports our business activities and does not override your rights
Consent – where required, for example for certain marketing communications
Legal obligation – where processing is required by law

7. Use of anonymised and aggregated data

We may use data that has been anonymised and aggregated so that individuals cannot be identified to:

improve our services and platforms, including Strengthify Engage
develop insights and benchmarks
support research and analysis

Once data is properly anonymised, it is no longer personal data under data protection law.

8. Sharing personal data

We may share personal data with:

trusted service providers who support our operations (such as IT hosting, analytics, and communication tools)
professional advisers where required (e.g. legal or accounting advisers)
organisations you are affiliated with, where appropriate and consistent with the services being provided

All third-party processors are required to handle personal data securely and in accordance with data protection law.

We do not sell personal data to third parties.

9. International data transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, in line with UK GDPR requirements.

10. Data retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including:

providing services and platforms
maintaining business records
complying with legal and regulatory obligations

Personal data processed through Strengthify Engage may be deleted or anonymised when access ends, in accordance with our retention practices and any applicable organisational agreements.

11. Your rights

You have the following rights under UK data protection law:

the right to access your personal data
the right to correct inaccurate or incomplete data
the right to request deletion of your personal data
the right to restrict or object to processing
the right to data portability
the right to withdraw consent (where applicable)

Where Strengthify acts as a data processor, requests may need to be directed to the relevant organisation acting as data controller.

12. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

13. Cookies

Our website uses cookies and similar technologies to improve functionality and analyse usage. Further details are available in our Cookie Policy.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, platforms, or legal requirements.

Where changes are material, we will take reasonable steps to notify affected individuals.

15. Contact and complaints

If you have questions or concerns about this Privacy Policy or how your personal data is handled, please contact us.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).