Privacy Policy

Who We Are

SCITAS Ltd (St Clair Integrated Technology Architecture Solutions) is the data controller responsible for your personal data. We are a registered company in England & Wales (Company No. 17238034), with our registered office at:

For all data protection enquiries, please contact us at .

Data We Collect

We collect personal data only when you actively provide it or when it is generated automatically by standard server infrastructure. This includes:

• Enquiry form submissions: your name, email address, company name, and the content of your message when you use our contact form.
• Standard server logs: IP address, browser type, referring URL, and page-request timestamps, retained for security and diagnostic purposes.

We do not collect sensitive personal data, and we do not use third-party tracking pixels or behavioural advertising technologies.

How We Use Your Data

We process your personal data for the following purposes:

• Business-to-business communication: responding to enquiries and scoping potential engagements.
• Contract fulfilment: managing Statement of Work (SOW) agreements and associated project correspondence.
• Legal and compliance obligations: retaining records as required by UK law.

Our lawful basis for processing is either legitimate interests (responding to B2B enquiries) or contract performance (where an engagement is in progress).

Cookies & Tracking

This website currently uses no third-party analytics cookies and no advertising trackers. If privacy-first analytics are introduced in a future release (e.g. Plausible or a consent-gated solution), this policy will be updated prior to deployment and a consent mechanism will be provided in accordance with PECR.

Standard session and security cookies necessary for website operation may be set by the hosting infrastructure. These are strictly necessary and do not require explicit consent under PECR Regulation 6(4).

International Data Transfers

This website is hosted on Cloudflare Pages (Cloudflare, Inc., a company incorporated in the United States). Standard server logs and request-routing metadata may be processed on infrastructure outside the UK and European Economic Area (EEA).

Cloudflare participates in the UK Extension to the EU–US Data Privacy Framework and processes personal data under Standard Contractual Clauses (SCCs) together with a UK International Data Transfer Addendum (IDTA), providing appropriate safeguards for international transfers under UK GDPR Chapter V.

For full details of Cloudflare's data transfer mechanisms and sub-processors, see their Privacy Policy .

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data where no legal obligation requires us to retain it.
• Right to restrict processing — to request that we limit how we use your data.
• Right to object — to object to processing based on legitimate interests.
• Right to data portability — to receive your data in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month of receiving your request. Where requests are complex or numerous, we may extend this period by a further two months and will inform you within the first calendar month if this applies. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk .

Contact Us

For any questions or requests relating to this Privacy Policy or your personal data, please contact our data controller directly:

Email:

SCITAS Ltd · Company No. 17238034 · Registered in England & Wales