Privacy Policy
Last updated: 15 September 2026
Who is responsible for your information
Productestry is owned and operated by STRASEC CONSULTING LTD, which is the controller of the personal information described here. STRASEC CONSULTING LTD is registered in England and Wales under company number 08380132, with its registered office at 5 Ivegate, Yeadon, Leeds, England, LS19 7RE. Privacy enquiries and rights requests can be sent to hello@productestry.com.
Information and current data flows
- Newsletter: first and last name, email address, normalized email, subscription status, consent wording/version and timestamps, source, and secured unsubscribe-token data. Supabase stores these Productestry-owned records.
- Email delivery: active subscribers' name, email address and newsletter content may be sent individually through the Google Workspace Gmail API using
hello@productestry.comwhen a campaign is manually approved. - Contact and Book a Call: name, email address, optional organisation, enquiry type, message and privacy acknowledgement are validated server-side and delivered through Google Workspace to Productestry. A transactional acknowledgement is sent to the supplied email address. These enquiries do not enrol anyone in marketing.
- Event registration: event, name, email address, normalized international mobile number, optional organisation, source, privacy acknowledgement and registration timestamps are stored in Supabase. Google Workspace sends transactional confirmation and configured reminder messages. Event registration does not enrol anyone in marketing.
- Cookie preference: a consent choice, categories, version and timestamps are kept locally on the device without an account or direct identifier.
- Technical requests: Vercel hosts and delivers the website and may process IP address, browser, device and request information in operational and security logs.
Purposes and lawful bases
| Purpose | Current basis |
|---|---|
| Manage newsletter subscriptions and send requested marketing email | Consent |
| Record and honour unsubscribe requests | Legal obligations where applicable and legitimate interests in maintaining an accurate suppression record and respecting marketing choices |
| Remember cookie preferences requested by the visitor | Legitimate interests in providing and remembering the privacy controls requested by visitors |
| Enquiry, booking and event-registration handling | Steps requested before entering a contract where applicable; otherwise legitimate interests in responding to enquiries and administering requested events |
| Security and essential operational logs | Legitimate interests in securing, operating and diagnosing the website and its services |
Marketing and your choices
Newsletter marketing uses separate, affirmative consent. Cookie choices never subscribe anyone, and rejecting optional cookies never prevents newsletter signup. Every campaign email must provide an unsubscribe mechanism. You can withdraw email consent at any time; Productestry will then stop marketing unless you later subscribe again. You have an absolute right to object to direct marketing.
Recipients and service providers
Vercel provides website hosting, content delivery and operational request handling. Supabase provides the managed PostgreSQL and API infrastructure used for subscriber and event-registration records. Google Workspace and the Gmail API provide outbound email identity and delivery. Productestry's editorial images are served locally. No analytics, advertising, CAPTCHA, map, social-embed or remote-font provider is currently configured.
International transfers
Vercel, Supabase and Google may process information outside the UK depending on their infrastructure and the relevant account or regional configuration. Where UK data protection law treats processing as a restricted international transfer, Productestry will need to ensure an applicable adequacy regulation, contractual safeguard or other permitted transfer mechanism is in place. Contact us for information about safeguards relevant to your information.
Retention and security
Active newsletter records are retained while a subscription remains active. Unsubscribed records currently remain as suppression and consent evidence; automated deletion is not implemented. Contact enquiries and event records are retained only while reasonably needed to handle the request or event, maintain necessary business records, resolve disputes, and meet legal or security obligations. Operational logs are retained according to the hosting and service configuration and only while needed for security and diagnostics. Productestry retains cookie choices for up to six months as a governance choice, not because UK law mandates that period. A documented operational deletion and suppression schedule still needs to be finalised. Server credentials are excluded from browser bundles, unsubscribe values are protected, and database access is restricted server-side, but no system can promise absolute security.
Your rights
Depending on the circumstances, UK data protection law may give you rights of access, correction, erasure, restriction, objection and portability, and rights concerning solely automated decisions. You may withdraw consent without affecting earlier lawful processing. Contact Productestry using the address above. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Children
Productestry is directed to professionals and organisations, not children, and does not knowingly seek children's personal information. If you believe a child has provided personal information, contact us so the circumstances can be reviewed and appropriate action taken.
Changes to this notice
This notice will be updated when Productestry's processing or providers change. Material cookie changes will increment the consent version and request a fresh choice. See the Cookie Policy for the current technology inventory.