Privacy & Cookie Policy
Last Updated: 14 September 2026 • Effective in the United Kingdom, European Union & Globally
1. Data Controller Information
This Privacy Policy outlines how Solathat Limited ("we", "us", or "our") collects, uses, and safeguards personal data obtained through our corporate website (solathat.com) and commercial engagements.
2. Information We Collect
We only collect personal information that you voluntarily provide to us or that is automatically recorded in an anonymized format when interacting with our digital services:
- Voluntary Inquiries & RFP Submissions: Contact Name, Corporate Email Address, Company/Organization Name, Target Budget, Project Timeline, and technical scope notes submitted through our RFP consultation forms or direct email correspondence.
- Technical & Usage Data (Subject to Consent): Device type, browser user agent, operating system preference, generalized geographic region (city/country level), referring URL, and visited pages. All IP addresses are automatically anonymized before processing.
3. Legal Bases for Processing (UK GDPR / EU GDPR)
Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process your information under the following legal bases:
Consent (Article 6(1)(a))
When you explicitly accept optional analytics cookies or provide details via our RFP consultation form.
Contractual Necessity (Article 6(1)(b))
To prepare architectural bids, Statements of Work (SOW), and deliver engineering consultancy agreements.
Legitimate Interests (Article 6(1)(f))
To defend against malicious cyber threats, secure our cloud endpoints, and ensure reliable website uptime.
Legal Obligation (Article 6(1)(c))
For compliance with UK corporate taxation, HMRC records, and statutory financial reporting.
4. Cookies & Web Analytics
We operate a strict Privacy-First cookie policy. Non-essential cookies and analytics scripts are blocked by default until you grant explicit consent via our cookie consent banner.
| Cookie / Storage Key | Category | Purpose | Duration |
|---|---|---|---|
| solathat_cookie_consent | Strictly Necessary | Remembers your GDPR cookie consent preference. | Persistent (localStorage) |
| _ga / _ga_* | Performance & Analytics | Google Analytics 4 with IP anonymization (Blocked by default until consent). | Up to 2 years |
5. Third-Party Data Processors
We do not sell, rent, or trade your personal information. We only share data with vetted sub-processors essential for service operations:
- Cloudflare, Inc. (Cloudflare Pages): High-performance static web hosting, DDoS protection, and SSL termination.
- Google Ireland Limited / Google LLC (Google Analytics): Privacy-mode aggregate traffic analytics, configured with Google Consent Mode v2 and IP anonymization.
6. Your Rights Under GDPR
Under the UK and EU GDPR, you retain the following statutory rights regarding your personal data:
To exercise any of these rights, submit a request via our Contact & Consultation Form. We will respond within one calendar month.
7. Contact Us & Supervisory Authority
If you have questions about this Privacy Policy or wish to lodge a complaint, you may contact our practice directly: