Privacy Policy

1. Who we are

The SITP Ltd is operated by SITP Limited, registered in England and Wales (Company No. 17134978). For data protection enquiries, contact john@sitp.london.

2. What data we collect

Contact form submissions — name, organisation, email address, and message content.

Market assessment registrations — name, organisation, email address, and role.

Report downloads — email address and the report accessed.

Email engagement — open and click events from outreach emails.

LinkedIn authentication — name, email, and LinkedIn member identifier. We do not access connections, messages, or private profile data.

Website analytics — anonymised page views, referral sources, and device information. No third-party advertising trackers.

3. How we use your data

We use collected data to respond to enquiries, deliver reports and assessments, manage client engagements, distribute thought leadership content, measure campaign effectiveness, and improve our services.

4. Legal basis

We process personal data under the UK General Data Protection Regulation on the following bases: legitimate interest (professional business communications and client relationship management), consent (contact form submissions, assessment registrations, LinkedIn connection), and contractual necessity (engagement and subscription delivery).

5. Data storage and security

Data is stored securely using industry-standard encryption. We use Supabase (hosted in the EU) for operational data and our Knowledge Graph infrastructure for analytical intelligence. Access is restricted to authorised principals. We do not sell, rent, or share personal data with third parties for marketing purposes.

6. Third-party services

We use Netlify (hosting), Supabase (database), Resend (email delivery), LinkedIn (authentication and content distribution), Stripe (payments), and Anthropic (AI-assisted analysis). Each processes data in accordance with their own privacy policies.

7. Your rights

Under UK data protection law, you have the right to access, correct, or delete your personal data, object to processing based on legitimate interest, and withdraw consent at any time. Contact john@sitp.london to exercise these rights. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management only. We do not use advertising or behavioural tracking cookies.

9. LinkedIn integration

SITP operates a LinkedIn company page and uses LinkedIn's Community Management API to publish content to that page, to retrieve engagement measurements on our own posts, and to reply to comments left on them.

What we process. The content we ourselves publish; aggregate engagement measurements for our own posts, such as impressions, reactions, comments, shares and video views; and the text of public comments left on our posts, so that we can respond to them.

What we do not do. We do not scrape member profiles. We do not build profiles of individuals from LinkedIn data. We do not use LinkedIn data to target advertising outside LinkedIn. We do not sell LinkedIn data or transfer it to third parties.

Storage and retention. Engagement measurements are held in aggregate in our governed intelligence estate, for the sole purpose of understanding which subjects are useful to our audience. Personal data obtained through the LinkedIn APIs is not retained beyond what LinkedIn's terms permit, and is deleted on request or when the integration ends. Access tokens are stored encrypted and used only for the purposes described here.

10. Changes to this policy

We may update this policy from time to time. The date at the top indicates the most recent revision.