Privacy and data handling

Website Privacy Notice

Last updated: 9 August 2026

This notice explains how StraitForward handles personal data when you visit straitforward.io, contact us or evaluate an engagement. Client claim-file processing is governed separately by the applicable service agreement, data-processing terms and completed data schedule.

1. Who is responsible

StraitForward is the controller for personal data used to operate this public website and manage business correspondence. The contracting legal entity and address are identified in the engagement agreement before paid work or client-file transfer. Privacy questions can be sent to hello@straitforward.io.

2. Personal data we collect

When you contact StraitForward, we may receive your name, business contact details, employer, role and the information in your message. Website infrastructure may process technical request data such as an IP address, browser or device information, requested pages, timestamps and security events. The public site does not contain a claim-file upload form or customer portal.

3. Why we use it and our lawful basis

We use correspondence data to answer questions, arrange meetings, evaluate and prepare an engagement, maintain business records, protect the website and comply with legal obligations. Depending on the purpose, the lawful basis is StraitForward's legitimate interest in operating and securing the business, taking steps requested before a contract, performing a contract or complying with law.

4. Website providers and cookies

The public website is delivered through Cloudflare, which may process technical request and security data. Business correspondence is handled through an email-service provider. The website does not intentionally set analytics or advertising cookies. A hosting or security provider may use strictly necessary technology to deliver and protect the site.

5. Sharing and international processing

Website and correspondence data may be shared with infrastructure, security, email and professional-service providers where needed for the purposes above, or with authorities where required by law. A provider may process data outside your country. Where applicable, StraitForward relies on the provider's contractual transfer safeguards and will provide available information on request.

6. Client claim files

When StraitForward processes a claim file for a client, the client normally determines the purpose of that processing and StraitForward acts under the signed engagement terms. No live or unredacted claim file is accepted until the processor list, region, access roster, retention period, deletion process, incident contacts and approved transfer route are recorded as ready. Do not email a confidential claim file before that route is confirmed.

7. Retention

Website inquiries and business correspondence are retained only for as long as needed to respond, manage the prospective or active relationship, maintain necessary business records and meet legal obligations. Client-file retention, backup expiry, deletion evidence and any authorized legal hold are set in the completed engagement data schedule.

8. Your rights

Depending on the law that applies, you may have rights to access, correct or delete personal data; restrict or object to processing; receive portable data; or withdraw consent where consent is used. To make a request, email hello@straitforward.io. StraitForward may need to verify your identity and may retain information where law permits or requires it.

9. Children and automated decisions

The website is intended for business users and is not directed to children under 16. StraitForward does not use website or inquiry data to make solely automated decisions that produce legal or similarly significant effects.

10. Changes

This notice may be updated as the website, service providers or legal requirements change. Material changes will be shown by updating the date at the top of this page.

11. Questions, requests and complaints

Email hello@straitforward.io for a privacy request or to ask for the applicable provider and transfer information. You may also complain to the data-protection authority with jurisdiction where you live or work.