Privacy Policy

StratumCGI is committed to protecting your personal data. This privacy policy explains how and why we collect, use, and store personal data relating to clients, prospective clients, and visitors to our website, in accordance with UK GDPR and the Data Protection Act 2018.

1. Who We Are

StratumCGI is a UK-based 3D architectural visualisation studio providing industrial CGI services to developers, operators, consultants, and planning teams across Britain.

We are registered with the Information Commissioner's Office (ICO) as a data controller. Our registered address is International House, 101 King's Cross Road, London, WC1X 9LP.

If you have questions about this privacy policy or how we handle your personal data, contact us at hello@stratumcgi.co.uk.

2. What Personal Data We Collect

We collect personal data that you provide to us directly, and in some cases, data that is collected automatically when you use our website.

2.1 Data You Provide to Us

  • Project enquiry data: Name, company name, email address, phone number, job title, and project details submitted through our enquiry form or by email correspondence.
  • Client communication data: Information contained in project briefs, email threads, meeting notes, and other communications relating to commissioned CGI work.
  • Contract data: Billing information, company registration details, and signed project agreements.
  • Marketing preferences: Where you opt in to receive project updates, newsletter communications, or marketing materials from StratumCGI.

2.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, device type, operating system, and referring website, collected via server logs and analytics tools.
  • Usage data: Pages visited, time spent on site, click patterns, and other behavioural data collected via cookies and analytics tools.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to enquiries: To review your project brief and respond with relevant information, a quotation, or next steps.
  • Delivering CGI services: To manage the commissioning, production, and delivery of industrial CGI deliverables as agreed in the project brief.
  • Client communication: To send project updates, deliverable notifications, invoicing, and related correspondence.
  • Account administration: To maintain client records, project files, and contractual documentation.
  • Website improvement: To analyse how visitors use our website and improve the user experience.
  • Marketing communications: Where you have given explicit consent, to send project announcements, studio newsflashes, and promotional content. You can withdraw consent at any time.

We do not use your personal data for automated decision-making or profiling.

We process your personal data under one or more of the following legal bases, as required by UK GDPR:

  • Contract performance: Processing necessary to fulfil a contract with you, including delivering agreed CGI deliverables and related communications.
  • Legitimate interests: Processing necessary for our legitimate business interests, including responding to project enquiries, maintaining client relationships, and improving our website, where these interests are not overridden by your rights.
  • Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications. You can withdraw consent at any time.
  • Legal obligation: Processing necessary to comply with applicable law, including tax and accounting obligations.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share your data with the following third parties, only where necessary:

  • Subcontractors and suppliers: Third-party software and service providers used to deliver CGI services, host our website, process payments, and manage communications, subject to appropriate data processing agreements.
  • Professional advisers: Lawyers, accountants, and insurers, where necessary for professional advice or insurance purposes.
  • Legal and regulatory authorities: Where required by law, court order, or regulatory authority, including tax authorities and law enforcement agencies.

All third-party processors are contractually bound to handle your data securely and only for the purposes specified in our agreements.

6. International Data Transfers

StratumCGI is a UK-based studio and our primary data processing activities take place within the United Kingdom and European Economic Area.

Where we transfer personal data outside the UK or EEA, we ensure an adequate level of protection is in place, using standard contractual clauses or other mechanisms recognised under UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

  • Project enquiry data: Retained for up to 2 years from the date of last contact, or until the enquiry is converted into a commissioned project, whichever is later.
  • Client project data: Retained for the duration of the project and for up to 7 years following project completion, to comply with financial record-keeping requirements and to support any future claims or queries.
  • Marketing data: Retained until you withdraw consent, after which it is deleted within 30 days.
  • Website analytics: Retained for up to 26 months, after which data is anonymised or deleted.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:

  • Encrypted data transmission (TLS/SSL) on our website
  • Access controls limiting data access to authorised personnel
  • Regular security reviews and software updates for our systems
  • Secure storage of physical and electronic project records
  • Data processing agreements with all third-party service providers

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware, and inform affected individuals directly where required.

9. Cookies

Our website uses cookies to distinguish you from other visitors and to collect standard technical and usage data. Cookies are small text files stored on your device.

Essential Cookies

These cookies are necessary for the website to function correctly. They enable core features such as navigation, security, and form submissions. You cannot opt out of essential cookies as the website will not work without them.

Analytics Cookies

We use analytics tools to collect information about how visitors use our website, including pages visited, time spent, and navigation patterns. This data is aggregated and anonymous, and helps us improve our website and services. Analytics cookies are only set with your consent, which you can manage via our cookie consent banner.

You can manage your cookie preferences at any time by adjusting your browser settings or our cookie consent preferences.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data, subject to certain exemptions:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete personal data.
  • Right to erasure: Request deletion of your personal data, where there is no overriding legitimate basis for continued processing.
  • Right to restriction: Request restriction of processing while accuracy is verified or objections are resolved.
  • Right to portability: Receive your personal data in a structured, machine-readable format, where processing is based on consent or contract.
  • Right to object: Object to processing based on legitimate interests, including direct marketing.
  • Rights related to automated decision-making: Request human intervention in automated decisions that affect you significantly.

To exercise any of these rights, contact us at hello@stratumcgi.co.uk. We will respond to all requests within one month of receipt.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the ICO:

  • ICO website: ico.org.uk
  • ICO helpline: 0303 123 1113

Our website may contain links to third-party websites, including social media platforms, LinkedIn, and partner organisations. This privacy policy applies only to our website. We are not responsible for the privacy practices of third-party websites, and we recommend reviewing their privacy policies before submitting any personal data.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at hello@stratumcgi.co.uk.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised "last updated" date.

For significant changes, we will provide prominent notice on our website or contact you directly where appropriate.

14. Contact

For any questions about this privacy policy, to exercise your data protection rights, or to make a complaint, contact StratumCGI at:

Last updated: April 2026