GDPR Statement

133 Strategy Co. GDPR Statement

133 Strategy Co. complies with UK GDPR and the Data Protection Act 2018. We process personal data only where necessary for contracts, legitimate business interests, or with consent. We do not intentionally collect or process special category data. If such data is provided by a client, it will be deleted unless its processing is strictly necessary, and a lawful basis applies. Data is stored securely via Google Workspace and other approved processors, with access controlled and two-factor authentication enabled.

Client information (such as contact details, SOPs, branding materials, and performance data) is used solely for delivering contracted services and is not shared with third parties other than approved processors, unless required by law, or with client consent. Data retention is limited to 12 months for non-converted enquiries and 6 years for client projects and financial records.

We are committed to transparency, confidentiality, and safeguarding client data, in line with the UK GDPR, the Data Protection Act 2018, and ICO guidance.