Privacy Policy — 1Strategist

1) Controller / who we are

The controller for personal data is [1Strategist Sàrl, 177 rue de Luxembourg, L-8077 Bertrange, Luxembourg, LU36324637] (“we”). Contact for privacy requests: contact@1strategist.eu or via the contact form at /#contact.

2) What data we process

We aim to minimize data collection. We do not use any client-side analytics or tracking scripts. Depending on how you use the site, we may process:

• Technical logs from our hosting provider (e.g., IP address, requested URL, user agent, timestamps) for security and reliability.
• Information you submit through the contact form: name, email, optional company, optional sector, the topic you are exploring, and your message. We forward submissions via our forms processor to our inbox.

If we later add accounts or newsletters, we will process additional data such as login metadata and support messages, and will update this policy accordingly.

3) Why we process it (purposes)

• To respond to enquiries you submit via the contact form.
• To maintain security, prevent abuse, and ensure reliability (logs).

4) Legal basis

We process contact-form submissions on the basis of taking steps at your request (or your consent, where applicable). We process essential technical logs on the basis of legitimate interests (securing our website), balanced against your rights. (You can object — see section 7). Legitimate interest is a recognized GDPR basis but requires a balancing approach.

5) Sharing / recipients

We share data only with:

• Hosting / infrastructure providers that run the website, and
• Our forms processor (Web3Forms) for delivering contact-form submissions to our inbox.

6) International transfers

We aim to keep processing within the EEA. If any provider transfers data outside the EEA, we will use appropriate safeguards (e.g., Standard Contractual Clauses).

7) Your rights

You may have rights to access, rectify, erase, restrict, object, and data portability depending on the context. You also have the right to lodge a complaint with the Luxembourg supervisory authority (CNPD).

8) Data retention

We keep logs and contact-form submissions only as long as needed for the purposes above, then delete or anonymize them.

9) Security

We implement appropriate technical and organizational measures to protect data.

10) Changes

We may update this policy and will adjust the “Last updated” date.