Last updated: 09 May 2026

This Privacy Policy explains how Strategic Intelligentia collects, uses, stores and shares personal data when you visit strategicintelligentia.com, contact us, create an account, request free access, purchase access, subscribe, accept an invitation, manage seats, view gated content, receive private reports, use a member dashboard, submit forms, use checkout, make payments, subscribe to communications, or otherwise use our website and services.

Strategic Intelligentia is the data controller for the personal data described in this policy, unless stated otherwise. Strategic Intelligentia is registered in England and Wales under company number 08205601. You can contact us about this Privacy Policy or your personal data by emailing barak.seener@gmail.com.

We collect personal data that you provide directly to us. This may include your name, email address, telephone number, organisation, job title, enquiry details, message content, account registration details, username, display name, subscription or membership selections, billing information, order information, payment-related information, report request details, profile information, uploaded profile images, form submissions, and any other information you choose to submit through forms, account pages, checkout pages or correspondence.

We may collect and process data needed to create and manage member accounts and gated access. This may include your WordPress user account, email address, username, display name, password credentials in protected or hashed form, password reset or setup records handled by WordPress, account status, member role, access tier, access plan, seat limit, seat usage, joined date, revoked date, subscription status, renewal or expiry date, order reference, product reference, variation reference, dashboard status, and account activity connected with access management.

If you request free member access, we may collect your email address so we can create or locate your member account, assign the appropriate free access tier, and send you a password setup or access link. If the form asks for additional information, such as name, organisation or role, we will process that information for the purposes described at the point of collection and in this policy.

If you are an account owner and invite another person to access gated content through your account, we will process the invited person’s email address so that we can send the invitation and manage that seat. We may also store invitation status, token hashes, expiry dates, acceptance status, accepted user details and related account records. You should only provide another person’s email address where you have a lawful and fair reason to do so, such as where they are part of your organisation or have asked to be invited.

Where paid access, subscriptions, private reports, digital products or other purchases are available, orders are handled through WooCommerce and payments are processed through Stripe. WooCommerce may store order details, product details, subscription details, billing details, customer details, tax/accounting information and order history. Stripe may process payment details, card information, payment authentication data, fraud prevention data, transaction identifiers and related payment information. We do not intentionally store full card numbers on our website.

We may use WooCommerce order, product, subscription and billing information to provision gated access. This may include linking a purchase to a member account, creating or updating an account, assigning a content tier, applying an access plan, setting seat limits, recording access duration, creating private report requests, and applying expiry or renewal dates.

Where private reports, bespoke reports, account-only resources or gated content are provided, we may process data about which account, user, tier or organisation has access to that content. Private content may include post titles, report titles, report bodies, attachments, custom fields, account assignments, stealth URLs, request statuses and account-specific metadata. Depending on the nature of the report or request, this content may include confidential information and may sometimes include personal data.

We may provide dashboard requests, report statuses, internal account notices or member notifications inside the member area. These records may include titles, messages, statuses, visibility rules, account IDs, member IDs, tier IDs, linked order or product references, read timestamps and dismissed timestamps. These records are used to show account updates, report progress, access notices or service information to the correct users.

We may send service emails needed to operate your account or provide requested services. These may include password setup links, access links, invitation messages, account notices, order-related emails, subscription emails, report status emails, dashboard notices, security notices and other service messages. These are separate from marketing communications.

If you consent to marketing, or where the law otherwise permits us to contact you, we may send updates, commentary, invitations, reports, offers or other communications that may interest you. You can unsubscribe from marketing communications where an unsubscribe option is provided, or by contacting us. We will not treat a service email, password setup email or account access email as consent to receive unrelated marketing.

We automatically collect some technical information when you use the website. This may include your IP address, browser type, device information, operating system, referring pages, pages visited, date and time of access, approximate location derived from technical data, cookie identifiers, login/session data, security logs, checkout/session data and similar usage information. This information helps us operate, secure, improve and understand the website.

We may keep activity and audit logs connected with accounts, gated access, invitations, report access, dashboard use, licensing, system events, support and security. These logs may include user ID, account ID, event type, reference ID, timestamp and operational details. Where a log identifies a user or account, we treat it as personal data.

If plugin licensing or terms acceptance systems are used by website administrators, licensing data may be processed. This may include plugin source, source URL, purchase email, license key, signed payload, public key cache, site URL, home URL, administrator email, plugin version and terms acceptance data. This information may be sent to a licensing server, such as VibeLicenseMe, to activate software, verify entitlement, bind a licence to a site and record accepted terms.

We use personal data to provide and administer the website, respond to enquiries, create and manage user accounts, provide free access, provide paid access, manage gated content, manage private reports, manage memberships, manage subscriptions, manage invitations and seats, process orders, process payments, maintain security, prevent fraud or misuse, send administrative and service messages, maintain business records, improve our services, analyse website performance, comply with legal obligations, and where permitted, send relevant updates or marketing communications.

Our lawful bases for processing personal data may include contract, where processing is needed to provide an account, paid access, subscriptions, private reports, consulting services, gated content or other requested services. We may rely on legitimate interests to operate and secure the website, manage access rights, prevent misuse, keep business records, respond to enquiries, support users, troubleshoot issues, manage dashboards and communicate with existing clients or users in a proportionate way. We may rely on consent for optional marketing emails, non-essential cookies, analytics or similar tracking where consent is required. We may rely on legal obligation where we need to keep financial records, comply with tax/accounting duties, respond to lawful requests, or comply with applicable law.

We may share personal data with trusted service providers who help us operate the website and deliver our services. These may include website hosting providers, WordPress and plugin service providers, WooCommerce-related services, Stripe, payment processors, security and backup providers, email delivery providers, analytics providers, licensing systems, professional advisers, accountants, legal advisers and IT support providers.

Authorised website administrators may access member, account, order, report, dashboard and access data where needed to operate the website, provide services, manage subscriptions, support users, investigate problems or protect the website. Administrative access should be limited to people who need it.

Stripe processes payment information as a payment gateway and may act as an independent controller for some payment-related processing. WooCommerce stores order and customer data within the website environment. Other third-party providers may act as processors or independent controllers depending on their role and terms.

We may also disclose personal data where required by law, regulation, court order, law enforcement request, tax authority request, or where necessary to protect our rights, users, website, services, payment systems or third parties.

Some service providers may process data outside the United Kingdom. Where this happens, we will take reasonable steps to ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, data processing terms, or other lawful transfer mechanisms where required.

We keep personal data only for as long as reasonably necessary for the purposes described in this policy. Account and gated access records are usually kept for the life of the account and for a reasonable period afterwards so we can administer access, provide support, resolve disputes, prevent fraud and maintain business records. Order, payment, tax and accounting records may be kept for up to six years or longer where required by law. Enquiry records are usually kept for up to twenty-four months unless they become part of an ongoing client relationship.

Free access records may be kept while the free account remains active and for a reasonable period afterwards for account management, support, fraud prevention and reporting. If a free account remains inactive for an extended period, we may delete, anonymise or suppress the account where appropriate.

Invite, claim and password setup tokens are intended to expire. We may keep related records for a limited period for audit, troubleshooting, security and dispute purposes. Activity and audit logs are kept for a defined security and support period, then deleted or anonymised where appropriate, unless we need to retain them for legal, contractual, fraud prevention or dispute reasons.

Private reports, account-specific content and report request records may be retained while the account requires access and for any contractual, legal, support or dispute period afterwards. Licensing and terms acceptance records may be retained for the life of the licence, binding or account and for any dispute period afterwards.

Backups may retain personal data for a limited period after deletion from the live website. We do not usually extract individual records from backups unless required for security, continuity, legal or technical reasons.

We use reasonable technical and organisational measures to protect personal data. These may include access controls, password protection, secure hosting, software updates, security monitoring, backups, encryption in transit, token expiry, token hashing, admin-only access to sensitive areas, server-side access checks and limiting access to people or providers who need it. No website or online service can be guaranteed to be completely secure, and you are responsible for keeping your own login details confidential.

Gated content access is controlled through account, member, tier and access-plan checks. Display conditions or personalised content blocks are used to improve the user experience, but protected content should not be treated as public simply because a page layout exists. We take reasonable steps to avoid sending protected private content to unauthorised users.

You have rights under data protection law. These may include the right to request access to your personal data, correction of inaccurate data, deletion of data, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent. These rights are not absolute and may depend on the circumstances.

To exercise your rights, email barak.seener@gmail.com. We may need to verify your identity before responding. When handling a request, we may need to search WordPress user records, WooCommerce records, VibeGatePro member and account records, private content assignments, dashboard notifications, activity logs, email records, licensing records, backups and related systems.

Where you request deletion, we may delete or anonymise personal data where appropriate, but we may need to retain some information for legal, contractual, accounting, fraud prevention, security or dispute reasons. Deleting an account may also remove access to gated content, private reports, dashboards and subscriptions.

VibeGatePro and our gated content environment perform rule-based access checks to decide whether a user can see particular content, account areas, reports, notices or calls to action. These checks are used to provide account functionality and are not intended to make legally significant automated decisions about you.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your personal data is handled. The ICO is the UK supervisory authority for data protection matters.

Our website and services are intended for adults and business users. We do not knowingly collect personal data from children under 18. If you believe a child has provided personal data to us, please contact us.

Our website may contain links to third-party websites, platforms or embedded content, including media, social media and payment services. We are not responsible for the privacy practices of those third parties. You should read their privacy notices before providing information to them.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Significant changes may also be notified by email or website notice where appropriate.

For questions about this Privacy Policy or your personal data, contact-us