Privacy Policy

Last updated: 24th June 2026

This privacy policy explains how the Centre for Strategic Advantage collects, uses and protects personal information when you visit our website.

Our website is a static informational website. It does not provide user accounts, login functionality or online member areas.

If you have any questions about this privacy policy or how we handle personal information, please contact: dpo@strategic-advantage.org
 
1. Who we are
This website is operated by the Centre for Strategic Advantage, a company registered in England and Wales.

  • Company number: 16696995
  • Registered address: London Scottish House, 95 Horseferry Road, London, England, SW1P 2DX
  • Website: strategic-advantage.org

For the purposes of UK data protection law, the Centre for Strategic Advantage is the controller of any personal information processed through this website.

2. What personal information we collect
We aim to minimise the personal information we collect through this website.
At present, the website does not:

  • require visitors to create an account;
  • include a login page;
  • use contact forms;
  • use cookies; or
  • use advertising or marketing trackers.

However, when you visit the website, certain technical information may be processed automatically by our hosting provider or related infrastructure. This may include:

  • your IP address;
  • browser type and version;
  • device type;
  • pages requested;
  • date and time of access;
  • referring website address, where applicable;
  • server logs and security event information.

This information is generally used to deliver the website, maintain security, monitor performance and diagnose technical issues.

3. How we use personal information
We may use technical information collected through the website for the following purposes:

  1. To deliver the website to visitors: we may process IP address, browser and device information, and page requests. Our lawful basis is legitimate interests.
  2. To keep the website secure: we may process server logs, IP addresses and security event data. Our lawful basis is legitimate interests.
  3. To diagnose faults and maintain website performance: we may process technical logs and access data. Our lawful basis is legitimate interests.
  4. To understand website traffic in future, if analytics are introduced: we may process aggregated or pseudonymised usage data. Our lawful basis will be legitimate interests or consent, depending on the analytics technology used.

Our legitimate interests include operating a secure, reliable and accessible website, protecting our systems, and understanding how the website is used.

4. Cookies and analytics
This website does not currently use cookies.

We may introduce website traffic analytics in the future to help us understand how visitors use the site and improve its content and performance.

If we do introduce analytics, we will update this privacy policy and, where required, provide appropriate information, controls or consent options before using cookies or similar technologies.

We will not use analytics tools for advertising, profiling or cross-site tracking unless this policy is updated and any required consent is obtained.

5. Who we share personal information with
We do not sell personal information.

We may share limited technical information with trusted service providers where necessary to operate, host, secure and maintain the website. These may include:

  • website hosting providers;
  • domain name or DNS providers;
  • security monitoring providers;
  • IT support providers.

Where we use suppliers, we will take appropriate steps to ensure they process personal information securely and only in accordance with our instructions.

We may also share information where required by law, regulation, court order or to protect our legal rights.

6. International transfers
Our website is hosted in the United Kingdom.

If any of our service providers process personal information outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

7. How long we keep information
We only keep personal information for as long as necessary for the purposes described in this policy.
Typical retention periods may include:

  • Server access logs: 90 days.
  • Security logs: up to 12 months.
  • Analytics data, if introduced: up to 12 months.

We may retain information for longer where necessary for security investigations, legal claims, compliance obligations or to protect our systems.

8. Your rights
Under UK data protection law, you may have the right to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate information;
  • ask us to delete your information;
  • ask us to restrict how we use your information;
  • object to our use of your information;
  • ask for your information to be transferred to another organisation, where applicable;
  • withdraw consent, where we rely on consent.

To exercise your rights, please contact dpo@strategic-advantage.org.
We may need to verify your identity before responding to a request.

9. Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk

10. Changes to this policy
We may update this privacy policy from time to time, for example if we change how the website operates or introduce analytics.

The latest version will always be published on this page.