Privacy policy
This policy explains what personal data Straits Partners LLP collects through this website, why, who processes it, how long we keep it and how you can ask us to access, correct or delete it. We collect only what you submit in a form, with your consent, and we do not sell personal data.
Who we are
This website is operated by Straits Partners LLP ("we", "us"). For questions about this policy, write to connect@straitspartners.co.
What we collect
- Enquiry, resource and requirement-finder forms: your name, company, work email, phone or WhatsApp number (optional), service of interest (optional), your message and, for the requirement finder, the answers you chose.
- Context we add to a form: the page you sent it from, campaign parameters in the link you followed (for example utm_source), the referring site and the time you gave consent.
- Security data: to stop abuse, we process a hashed form of your IP address for rate limiting, and our bot-check provider processes technical signals from your browser.
- Emails you send us: the content of your message and your address.
We do not ask for payment details, government identifiers or other sensitive data through this website, and we ask you not to send them.
Why we use it
- To reply to your enquiry and arrange a scoping call
- To send you the resource you requested, such as workflow files
- To keep the website secure and prevent spam
- To improve the site by understanding which pages lead to enquiries
We rely on your consent, which you give by ticking the consent box on the form. You can withdraw consent at any time by writing to us.
Who processes it for us
- Zoho CRM and Zoho Mail store enquiries and deliver a copy to our inbox so our team can respond. Zoho Corporation Private Limited processes this data on our behalf.
- WhatsApp: if you choose to message us on WhatsApp, your message is handled by WhatsApp under its own terms. The requirement finder only opens WhatsApp with a pre-filled message; nothing is sent until you press send.
- Cloudflare hosts the website, delivers it, protects it and provides the bot-check (Turnstile). It processes technical request data. A short-lived queue in Cloudflare's database holds an enquiry only if our CRM is unavailable, and the entry is deleted once delivered.
- Email provider: messages sent to our email address are handled by our email service.
We do not sell personal data. We share it with others only where needed to provide the service you asked for, or where the law requires.
Cookies and tracking
This website does not use advertising cookies. The bot-check provider may set technical cookies or use browser storage to tell people from automated programs.
Google Analytics. We use Google Analytics 4 to understand which pages and tools help visitors, for example how many people use the requirement finder or send an enquiry. Analytics cookies are set only if you choose "Accept analytics" in the banner. Until then, and if you decline, Google receives only cookieless signals without identifiers (Google Consent Mode). Advertising features are switched off. Your choice is stored in your browser; clear your site data to change it. Google LLC processes this data as our service provider.
How long we keep it
We keep enquiry records for as long as needed for the purposes above, including a reasonable period to follow up and to answer later questions. When they are no longer needed, we delete or anonymise them. Entries that fail delivery to our CRM and stay in the retry queue are deleted automatically after 30 days.
Your rights
Under the Digital Personal Data Protection Act, 2023 and its rules, you can ask us for a summary of the personal data we hold about you and the parties it has been shared with, ask us to correct or erase it, withdraw consent, and raise a grievance. Write to connect@straitspartners.co and tell us what you need. We will respond within the period the law requires. You can also nominate another person to exercise your rights if you cannot.
Where data is processed
Our providers may process data in more than one country. We choose providers that offer appropriate safeguards and we limit the data we send to what is needed.
Children
This website is for businesses. We do not knowingly collect personal data from children.
Changes to this policy
We will post changes here and update the date above.