Privacy Notice
Last reviewed: May 2026 Who we are
Sarria Limited ("Sarria", "we", "us") is the data controller for personal data collected through this website and our research services. We are registered in England and Wales.
What data we collect and why
We collect personal data you provide directly — such as your name, company, email address, and telephone number — when you contact us, register for our services, or correspond with us. We use this data to provide and administer our research subscription services, comply with our legal and regulatory obligations, and manage our client relationships.
Our lawful basis is Article 6(1)(b) UK GDPR (performance of a contract) and Article 6(1)(f) UK GDPR (legitimate interests in operating our business).
Sub-processors
- Amazon Web Services (AWS) — cloud infrastructure, hosted in the EU/UK
- Microsoft 365 — email services, hosted in the EU/UK
- Anthropic — AI processing for internal research workflows; no client personal data is used in model training
How long we keep your data
Client contact data is retained for the duration of the relationship and seven years thereafter. Enquiry data is retained for two years.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict, or object to our processing of your personal data, and the right to data portability. To exercise these rights, contact us at privacy@sarria.co.uk.
Cookies
We use cookies to analyse site traffic and to help our website run effectively. You can accept, decline, or manage your cookie preferences using the controls on this site. Essential cookies cannot be declined as they are necessary for the website to function.
Contact
For data protection queries: privacy@sarria.co.uk