Legal & Privacy
Privacy Policy
This policy explains what personal information Thakstra collects, why it is used, who may process it and the rights available to you.
Last updated: 17 July 2026In plain English: Thakstra uses personal information only to handle enquiries, deliver agreed work, keep necessary business records, protect the website and conduct limited, relevant business-to-business outreach. Personal information is not sold.
1. Who is responsible for your information?
Thakstra is a UK sole-trader business and is the controller of the personal information described in this policy.
Privacy enquiries, rights requests and data protection complaints can be sent to hello@thakstra.com.
2. Information we may collect
Depending on how you interact with Thakstra, we may collect:
- Enquiry details: your name, business name, role, business email address, telephone number if supplied, and the information included in your message or form response.
- Client and project information: correspondence, agreed instructions, invoices, payment records and the business materials you choose to provide for an agreed review.
- Professional contact information: business contact details, role, employer and relevant publicly available business information used for carefully targeted business-to-business outreach.
- Technical information: limited device, browser, IP address, security and request-log information processed by hosting, security and form providers.
Please do not send special-category information, passwords, payment-card details or unrelated personal information through the website forms.
3. How we obtain information
Information is obtained directly from you when you use a form, email Thakstra, become a client or provide material for a review. For limited business-to-business prospecting, professional information may also come from business websites, Companies House, LinkedIn or other reputable public business sources.
4. Why we use it and our lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Review and respond to an enquiry | Contact and enquiry details | Taking steps at your request before a contract, and legitimate interests in operating the business |
| Agree, deliver and manage client work | Contact, project, correspondence and payment information | Performance of a contract and legitimate interests in managing a business relationship |
| Maintain financial, tax and compliance records | Transaction, invoice and relevant correspondence records | Legal obligation and legitimate interests in establishing or defending legal claims |
| Protect and operate the website and forms | Technical, security and submission information | Legitimate interests in keeping services secure and functional |
| Send limited, relevant B2B outreach | Public professional contact and company information | Legitimate interests, subject to applicable electronic-marketing rules and your right to object |
Where legitimate interests are used, Thakstra considers the purpose, necessity and likely effect on the individual. You may object at any time to direct marketing, including prospecting emails.
5. Who may process information
Thakstra uses a small number of service providers where necessary to run the website and business. These may include:
- Cloudflare for website hosting, delivery and security;
- Formspree for processing submissions made through the website contact form;
- Tally for enquiry or client-intake forms;
- the business email, file-storage, bookkeeping and payment providers used to handle communications and agreed work; and
- professional advisers, regulators, courts or public authorities where disclosure is necessary or legally required.
Providers may process information only for the relevant service or under their own legal responsibilities. Thakstra does not sell or rent personal information.
6. International transfers
Some technology providers may process information outside the UK. Where this occurs, Thakstra relies on an applicable UK adequacy regulation or appropriate contractual and organisational safeguards, such as the UK International Data Transfer Agreement or UK Addendum, as appropriate.
7. How long information is kept
| Record | Typical retention |
|---|---|
| Enquiries that do not become client work | Normally up to 12 months after the last meaningful contact |
| B2B prospecting records | Normally up to 12 months after the last meaningful activity; a minimal suppression record may be kept longer to honour an objection |
| Client project records and correspondence | Normally up to 6 years after the engagement ends, where needed for records or legal claims |
| Invoices and tax records | For the period required by UK tax and accounting law |
| Technical and security logs | According to the relevant provider's security and retention schedule |
Information may be deleted sooner when no longer required, or retained longer where a legal duty, dispute, fraud-prevention need or active claim requires it.
8. Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
- ask for access to your personal information;
- ask for inaccurate or incomplete information to be corrected;
- ask for information to be erased or its use restricted;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain information in a portable format; and
- withdraw consent where consent is the lawful basis.
There is no fee in ordinary circumstances. Identity may need to be verified before a request is fulfilled. Some rights are subject to legal exceptions.
9. Data protection complaints
Email hello@thakstra.com with the subject “Data protection complaint”. Thakstra will acknowledge a complaint within 30 days and respond without undue delay, in line with applicable law.
You can also complain to the UK Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.
10. Cookies and external services
At the date of this policy, Thakstra does not intentionally use advertising cookies or behavioural advertising analytics on this website. Essential hosting and security functions may process technical information. Web fonts are loaded from Google, and external forms or links are governed by the relevant provider's privacy information.
If non-essential analytics or marketing technologies are introduced later, this policy and any required consent controls will be updated before they are used.
11. Security and automated decisions
Reasonable technical and organisational measures are used to protect information and limit access to what is needed. No internet service can guarantee absolute security.
Thakstra does not use personal information to make decisions that produce legal or similarly significant effects solely by automated means.
12. Children
The website and services are intended for businesses and are not directed at children. Thakstra does not knowingly seek personal information from children through this website.
13. Changes to this policy
This policy may be updated when the website, services, providers or legal requirements change. The latest version will appear on this page with its revision date.
Contact
For privacy questions, rights requests or complaints, email hello@thakstra.com.