Privacy Policy
Standard Intelligence
​
Last Updated: 19 August 2025
Effective Date: 1 August 2025
​
Introduction and Data Controller Information
This privacy policy explains how Michael Clark ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website or interact with our services.
Data Controller Details:
-
Name: Michael Clark / Standard Intelligence
We are committed to protecting your privacy and ensuring transparency about how we handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Personal Information We Collect
Understanding what constitutes personal information helps you make informed decisions about sharing your data. Personal information is any data that can identify you as an individual, either directly or when combined with other information.
​
Information You Provide Directly
-
None
​
Information We Collect Automatically​
Website Analytics:
-
IP address (anonymised after processing)
-
Browser type and version
-
Operating system
-
Pages visited and time spent
-
Referral source (how you found our site)
-
Device type and screen resolution
-
General geographic location (country/region level)
Technical Information:
-
Cookies and similar tracking technologies
-
Website performance data
-
Error logs and security monitoring data
​
Legal Basis for Processing Your Data
The UK GDPR requires us to have a valid legal reason for processing your personal information. Think of these as the "permission slips" that allow us to handle your data for specific purposes.
​
Consent (Article 6(1)(a) UK GDPR)
We rely on your explicit consent for:
-
Email newsletter subscriptions: You actively choose to subscribe and can withdraw consent at any time
-
Marketing communications: Any promotional emails beyond basic service updates
When we process data based on consent, you have the absolute right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing before withdrawal.
​
Legitimate Interests (Article 6(1)(f) UK GDPR)
We rely on legitimate interests for:
-
Contact form processing: We have a legitimate business interest in responding to your enquiries, and you would reasonably expect us to do so
-
Website analytics: Understanding how our site is used helps us improve content and user experience
-
Security monitoring: Protecting our website and users from fraud, abuse, and technical issues
Before relying on legitimate interests, we conduct balancing tests to ensure our interests do not override your privacy rights. You have the right to object to processing based on legitimate interests.
How We Use Your Personal Information
Understanding the purpose behind data collection helps you appreciate why certain information is necessary and how it benefits your experience.
​
Primary Uses
Providing Our Services:
-
Maintaining website functionality and security
Communication:
-
Responding to your questions and support requests
-
Notifying you of important service changes (such as privacy policy updates)
Website Improvement:
-
Analyzing website traffic patterns to identify popular content
-
Understanding user preferences to create more relevant content
-
Improving website performance and user experience
-
Detecting and preventing technical issues
We Do Not
-
Sell, rent, or trade your personal information to third parties
-
Use your data for automated decision-making or profiling
-
Send unsolicited marketing communications
-
Share your information for others' marketing purposes
Data Sharing and Third-Party Services
Transparency about who else might access your data is crucial for maintaining trust. We work with carefully selected service providers who help us deliver our services securely.
Website Analytics
-
Service Provider: Google Analytics
-
Data Shared: Anonymised usage statistics, aggregated visitor data
-
Purpose: Understanding website performance and user behaviour
-
Privacy Measures: IP anonymisation enabled, data retention limited to 26 months
Website Hosting
-
Service Provider: Wix
-
Data Shared: All website data necessary for site operation
-
Purpose: Hosting and maintaining website functionality
-
Security: Encrypted connections, regular security updates, backup procedures
Data Transfers Outside the UK
When we use services that transfer data internationally, we ensure appropriate safeguards protect your information:
-
EU/EEA Countries: Adequate level of protection recognised by UK law
-
Other Countries: Data transfer agreements, adequacy decisions, or standard contractual clauses
Data Retention Periods
We keep your personal information only as long as necessary for the purposes we collected it. Think of this as our "digital decluttering" policy that ensures we don't accumulate unnecessary personal data.
Specific Retention Periods
Website Analytics:
-
Detailed logs: 26 months maximum
-
Aggregated statistics: Retained indefinitely after anonymisation
Technical Logs:
-
Security logs: 12 months for security monitoring
-
Error logs: 6 months for technical troubleshooting
Your Data Protection Rights
The UK GDPR grants you significant control over your personal information. Understanding these rights empowers you to manage your privacy according to your preferences.
Right of Access (Subject Access Request)
You can request a copy of all personal information we hold about you. We will provide this information in a commonly used, machine-readable format within one month of your request.
Right to Rectification
If any personal information we hold is inaccurate or incomplete, you can ask us to correct it. We will update our records promptly and notify any third parties if necessary.
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal information in certain circumstances:
-
The data is no longer necessary for the original purpose
-
You withdraw consent and there's no other legal basis for processing
-
Your data has been unlawfully processed
-
Erasure is required for compliance with legal obligations
Right to Restrict Processing
You can ask us to limit how we use your data while we investigate concerns about accuracy or lawfulness of processing.
Right to Data Portability
For data processed based on consent or contract performance, you can request a copy in a structured, commonly used format that you can transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where we process data based on consent, you can withdraw it at any time. This affects future processing but doesn't invalidate previous lawful processing.
Exercising Your Rights
To exercise any of these rights, contact us using the details provided in this policy. We will respond within one month and will not charge a fee unless requests are manifestly unfounded or excessive.
Cookies and Tracking Technologies
Cookies are small text files that websites store on your device to remember information about your visit. Understanding how we use cookies helps you make informed decisions about your browsing preferences.
Essential Cookies
These cookies are necessary for basic website functionality and cannot be disabled:
-
Session management: Keeping you logged in during your visit
-
Security: Protecting against fraud and ensuring secure connections
-
Functionality: Remembering your preferences and settings
Analytics Cookies
We use analytics cookies to understand how visitors interact with our website:
-
Usage patterns: Which pages are most popular and how long people spend reading
-
Technical performance: Identifying slow-loading pages or broken links
-
Content effectiveness: Understanding which topics resonate with our audience
Managing Cookie Preferences
You can control cookie settings through:
-
Our cookie banner: Choose your preferences when you first visit
-
Browser settings: Most browsers allow you to block or delete cookies
-
Cookie management tools: Third-party tools for granular control
Disabling certain cookies may limit website functionality, but essential features will continue to work.
Data Security Measures
Protecting your personal information is our priority. We implement multiple layers of security to safeguard your data against unauthorised access, alteration, disclosure, or destruction.
Technical Safeguards
-
Encryption: All data transmissions use SSL/TLS encryption
-
Secure hosting: Servers protected by firewalls and intrusion detection
-
Access controls: Limited access to personal data on a need-to-know basis
-
Regular updates: Security patches applied promptly to all systems
Organisational Measures
-
Staff training: Regular privacy and security awareness training
-
Data handling procedures: Clear policies for collecting, storing, and processing data
-
Incident response: Procedures for detecting and responding to data breaches
-
Regular audits: Periodic reviews of security measures and data handling practices
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
-
Notify the Information Commissioner's Office within 72 hours
-
Inform affected individuals without undue delay
-
Provide clear information about the nature of the breach and steps being taken
-
Offer guidance on protecting yourself from potential harm
Children's Privacy
Our website and services are designed for adults interested in regulatory analysis and business commentary. We do not knowingly collect personal information from children under 16 years of age.
If we become aware that we have collected personal information from a child under 16 without appropriate consent, we will delete that information promptly. Parents or guardians who believe we may have collected information from their child should contact us immediately.
Making a Complaint About Your Personal Data
We are committed to resolving any concerns you may have about how we handle your personal information. The Data (Use and Access) Act 2025 provides you with the right to complain directly to us before contacting the Information Commissioner's Office.
How to Complain to Us
-
Email: privacy@standardintelligence.com with subject "Data Protection Complaint"
What Happens Next
-
We will acknowledge your complaint within 30 days
-
We will investigate your concerns thoroughly and keep you informed of progress
-
We will inform you of the outcome and any corrective actions taken
-
We aim to resolve complaints within 60 days of receipt
Escalating to the ICO
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office:
-
Website: ico.org.uk
-
Phone: 0303 123 1113
-
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
International Data Transfers
When we use service providers located outside the UK, we ensure your personal information receives adequate protection through appropriate safeguards.
Transfer Mechanisms
-
Adequacy decisions: Countries recognised as providing adequate protection
-
Standard contractual clauses: Legally binding commitments for data protection
-
Certification schemes: Providers certified under recognised privacy frameworks
Your Rights
International transfers do not diminish your data protection rights. You can request information about specific safeguards applied to your data and challenge transfers that may not provide adequate protection.
Changes to This Privacy Policy
We may update this privacy policy to reflect changes in our practices, legal requirements, or service offerings. Understanding how we communicate changes helps you stay informed about your privacy rights.
Notification Process
-
Material changes: 30-day advance notice via email to newsletter subscribers and website banner
-
Minor updates: Notice on our website and updated "Last Modified" date
-
Emergency changes: Immediate notification if required for legal compliance or security reasons
What Constitutes Material Changes
-
Changes to the types of personal information we collect
-
New purposes for processing your data
-
Additional third-party service providers with access to your data
-
Changes to data retention periods
-
Modifications to your rights or how to exercise them
Your Options
-
Continued use: Using our website after changes take effect indicates acceptance
-
Objection: Contact us if you disagree with material changes
-
Withdrawal: You can always withdraw consent or request data deletion
Contact Information and Data Protection Officer
For any questions about this privacy policy or how we handle your personal information, please contact us:
Michael Clark / Standard Intelligence
-
Response time: We aim to respond within 48 hours
Given the scale of our operations, we do not currently have a designated Data Protection Officer. All privacy-related enquiries are handled directly by Michael Clark, who has responsibility for data protection compliance.
​
This privacy policy is written in plain English to help you understand your rights and our obligations. If you need clarification on any section, please don't hesitate to contact us.