Privacy Policy | Solentra House

1. Who we are

Solentra House ("Solentra House", "we", "us") is the data controller for personal data processed through this website and during client engagements. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Registration number: [REGISTRATION_NUMBER - PENDING]. Contact: legal@solentrahouse.xyz. A Data Protection Officer is not appointed because our processing does not meet the thresholds of UK GDPR Articles 37(1) or EU GDPR Article 37(1).

2. What data we collect

We collect the following categories of personal data:

Identification and contact data you provide when submitting the contact form, booking modal, or service request form: name, email, company (optional), message content.
Account data when you register: name, email, hashed password, account creation timestamp.
Purchase data received from Gumroad after a completed transaction: order number, product purchased, price, sale timestamp, your billing email.
Analytics data, only if you consent: anonymised page views, session interactions, device and browser type, country (Google Analytics 4 and Microsoft Clarity).
Technical data needed to serve the site: IP address (for security and captcha verification), and strictly necessary cookies.

We do not collect special category data (health, religious belief, biometric data, and similar).

3. Why we collect it

To respond to enquiries and deliver requested services (legal basis: contract performance).
To create and manage your account (legal basis: contract performance).
To process payments and keep accounting records (legal basis: contract performance, and legal obligation for accounting records).
To send transactional emails (welcome, password reset, purchase confirmations) (legal basis: contract performance).
To improve the site through analytics (legal basis: consent).
To protect the site from abuse via captcha and rate limiting (legal basis: legitimate interest).

4. How long we keep it

Contact form submissions: 24 months from receipt.
Account data: for the lifetime of the account, plus 30 days after deletion request.
Purchase and accounting records: 6 years (UK statutory retention).
Analytics data: 14 months in Google Analytics 4 standard retention.
Server logs containing IP addresses: 30 days.

5. Who we share it with

Personal data is shared with the following processors:

Resend Inc. for transactional email delivery (contact form, account emails).
Cloudflare, Inc. for captcha verification (Turnstile) and content delivery.
Gumroad, Inc. for payment processing on service purchases. Gumroad acts as the merchant of record and is an independent controller for payment processing.
Google Ireland Limited for Google Analytics 4 (only with consent).
Microsoft Ireland Operations Limited for Microsoft Clarity (only with consent).
Vercel Inc. for hosting and serving the site.

6. International transfers

Some of our processors (Resend, Gumroad, Vercel, Microsoft Clarity) are based in the United States. Where personal data is transferred outside the United Kingdom or the European Economic Area, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or another lawful transfer mechanism. You can request a copy of the relevant safeguards by emailing legal@solentrahouse.xyz.

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete personal data.
Request erasure of personal data (subject to legal retention requirements).
Restrict our processing in certain circumstances.
Receive a portable copy of your data.
Object to processing carried out on the basis of legitimate interest.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO) (https://ico.org.uk).

8. How to exercise your rights

Email legal@solentrahouse.xyz with the request. We respond within 30 days. We may ask for proof of identity before acting on the request to protect your data.

9. Updates to this policy

We update this policy when our processing changes. Material changes are notified to account holders by email at least 14 days before they take effect. The current version is identified by the "Last updated" date at the top of this page.