Privacy policy.

Who we are

STU ("STU", "we", "us") provides HR software for growing teams. For data you give us through this website (for example when you book a demo or subscribe to our newsletter), we are the data controller. For data our customers store in the STU platform about their own people, the customer is the controller and we act as their processor.

Questions about this policy or your data are always welcome at privacy@stu.solutions.

What we collect

We collect three kinds of information:

• Information you give us: your name, work email, company, and anything you add to a demo request, partner application, or newsletter signup.
• Information collected automatically: page views, approximate location from your IP address, device and browser type, and how you move through the site. We use this to understand what content helps and what doesn't.
• Platform data: the people records our customers store in STU. We process this only on our customers' instructions, under our data processing agreement.

How we use your information

• To respond when you ask us something: demo requests, partner applications, and support questions.
• To send you content you have asked for, like our newsletter. Every email includes one-click unsubscribe.
• To run, secure, and improve the website and the platform.
• To meet our legal obligations, including accounting and tax rules.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Our legal bases

Where UK and EU data protection law applies, we rely on: consent (newsletter and marketing), contract (providing the platform and responding to your requests), legitimate interests (site analytics, service improvement, and fraud prevention), and legal obligation (records we must keep).

Who we share data with

We use a small number of carefully chosen service providers to run STU: cloud hosting (EU or UK regions), email delivery, and analytics. Each is bound by a contract that limits what they can do with your data. We list our platform sub-processors on the GDPR page and give customers notice before the list changes.

We will disclose data if the law requires it, and we will tell you first unless we are legally prevented from doing so.

How long we keep data

We keep website enquiry data for as long as we are talking to you, and for up to 24 months after our last contact. Newsletter data is kept until you unsubscribe. Platform data belongs to our customers: when a customer leaves, they can export everything in one click, and we delete their data from live systems within 30 days.

Your rights

You can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time. Email privacy@stu.solutions and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Cookies & analytics

This website uses a privacy-respecting analytics setup: we count page views and understand journeys without building advertising profiles. Bot traffic is filtered out and IP addresses are not stored in raw form.

Changes to this policy

When we change this policy we will update the date at the top of this page, and for significant changes we will tell you by email or in the product. The current version always lives at this address.