Privacy Policy

Entity: Stratition Sub-Brand: Markexta (a Stratition brand) Contact: contact@stratition.com Jurisdiction: India Effective Date: [9 May 2026] Last Updated: [9 May 2026]

 

This Privacy Policy governs all matters relating to personal data, data processing, and the use of cookies in connection with Stratition's services and website, including all services offered by Stratition and its associated brands. It consolidates Stratition's Privacy Policy, Data Processing Agreement, and Cookie Policy into a single binding document. By accessing stratition.com or engaging any Stratition or Markexta service, you unconditionally accept this Policy in its entirety.

Part 1 — Privacy Policy

1.1 Preamble

This Privacy Policy is published by Stratition, a company incorporated under the laws of the Republic of India and the parent entity of Markexta, in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, the General Data Protection Regulation (EU) 2016/679 applicable to data subjects in the European Economic Area and the United Kingdom, and the California Consumer Privacy Act, 2018 applicable to California residents.

Stratition operates stratition.com and is the parent company of Markexta, a sub-brand through which a distinct portfolio of digital services is offered. This Policy applies to all services offered by Stratition directly and to all services offered by Markexta as a brand under Stratition's ownership. References to "Stratition" in this Policy include, where contextually applicable, its sub-brand Markexta and any other brand operating under Stratition's corporate umbrella.

This Policy governs the collection, storage, processing, transfer, and deletion of personal data by Stratition in connection with stratition.com and all associated services. By accessing stratition.com or engaging any service offered by Stratition or Markexta, you acknowledge that you have read, understood, and unconditionally consented to this Policy in its entirety.

Stratition reserves the right to amend this Policy at any time and without prior notice. Amendments take effect immediately upon publication at stratition.com. Continued use of stratition.com or any Stratition or Markexta service following publication of any amendment constitutes irrevocable acceptance of the amended Policy.

1.2 Identity of the Data Fiduciary

Stratition is the Data Fiduciary for the purposes of the Digital Personal Data Protection Act, 2023 and the Data Controller for the purposes of the General Data Protection Regulation. Stratition operates from India and is the ultimate data controller for all personal data collected through stratition.com and through any service offered under the Markexta brand. All privacy-related communications must be directed exclusively to contact@stratition.com. Stratition does not accept physical correspondence for privacy matters.

1.3 Scope of This Policy

This Policy applies to all visitors to stratition.com and associated subdomains, all prospective clients who submit inquiry forms or request any service offered by Stratition or Markexta, all active and past clients who have purchased or are currently accessing any service offered by Stratition or Markexta, and all individuals whose personal data is shared with Stratition in the course of any service engagement. This Policy does not govern the data practices of any third-party website or platform linked from stratition.com. Stratition bears no responsibility for the data practices of third parties.

1.4 Personal Data Collected

Stratition collects identity data comprising full name and designation through all contact and onboarding forms. Business data comprising company name, website URL, and revenue information is collected during service intake and engagement onboarding. Contact data comprising email address and phone number is collected through all forms and service communications. Commercial data comprising service selections, payment references, and invoice history is maintained for service delivery and billing purposes. Engagement content comprising business information, brand data, and other materials shared during intake is provided voluntarily by the client to enable delivery of the relevant service.

Upon visiting stratition.com, Stratition or its authorised technology partners may automatically collect technical data including IP address anonymised to region level, browser type and version, operating system, and device type. Usage data including pages visited, session duration, and referral source may also be collected. Cookie data is collected and governed as described in Part 3 of this Policy.

For the purpose of producing services, Stratition operators may collect publicly available information about the client's business including public website content, public social media profiles, press mentions, and publicly available market and competitor data. Such research is conducted exclusively for the purpose of producing the applicable service.

1.5 Purposes of Processing and Legal Bases

For Indian clients under the Digital Personal Data Protection Act, 2023, Stratition processes personal data for service delivery on the basis of consent and performance of lawful contract, for invoicing and financial records on the basis of legal obligation, for service communication on the basis of legitimate use, for regulatory compliance on the basis of legal obligation, for service improvement using anonymised data on the basis of legitimate use, and for marketing communications exclusively on the basis of express and freely given consent.

For EEA and UK clients under the General Data Protection Regulation, service delivery is processed under Article 6(1)(b) as necessary for the performance of a contract, invoicing and legal records under Articles 6(1)(b) and 6(1)(c), marketing communications under Article 6(1)(a) on the basis of explicit consent, service improvement using anonymised data under Article 6(1)(f) on the basis of legitimate interests, and security measures under Article 6(1)(f).

For California residents under the California Consumer Privacy Act, 2018, Stratition collects and uses personal information for business purposes as defined under the CCPA. Stratition does not sell personal information. California residents have the right to know, to delete, to correct inaccurate information, to opt out of sale of personal information which is inapplicable to Stratition's practices, and to non-discrimination for exercising privacy rights.

1.6 Disclosure of Personal Data

Stratition does not sell, rent, or trade personal data to any third party under any circumstances. Personal data is disclosed only to trusted technology partners who process data exclusively on Stratition's behalf, including cloud hosting providers for service delivery and hosting, communication platforms for client engagement, payment processors for invoice handling, analytics tools for website performance, and artificial intelligence platforms used during service production. All such partners are bound by data processing terms requiring security standards equivalent to those maintained by Stratition.

Stratition may disclose personal data to government authorities, courts, or regulators where required by applicable Indian law or a lawful governmental order, and only to the minimum extent required by such obligation. In the event of a business restructuring, acquisition, or asset sale involving Stratition or any of its sub-brands including Markexta, personal data may be transferred as part of that transaction with advance notice to affected clients where legally practicable.

1.7 Confidentiality of Engagement Data

Stratition maintains strict confidentiality with respect to all business data, customer information, financial information, strategic content, and service deliverables shared during any engagement under Stratition or Markexta. Confidentiality obligations survive the termination of any engagement for a minimum of two (2) years, with trade secret obligations surviving indefinitely.

1.8 Cross-Border Data Transfers

Stratition serves clients across India, the Asia-Pacific region, the United States, the United Kingdom, the European Union, Australia, and Canada. Where personal data is transferred across national borders, Stratition ensures compliance with applicable law. For transfers involving EEA or UK data subjects, Stratition relies on Standard Contractual Clauses as required under GDPR Chapter V. For transfers involving Indian data principals, Stratition ensures compliance with cross-border transfer provisions of the DPDP Act, 2023. All sub-processors are bound by data processing agreements mandating equivalent levels of protection.

1.9 Data Retention

Engagement and delivery data is retained for the duration of the service access period plus twelve (12) months. Financial and invoice records are retained for seven (7) years in compliance with applicable Indian statutory obligations. Diagnostic and report data is retained for a period not exceeding six (6) months from the date of delivery. Website analytics data in anonymised form is retained on a rolling twelve (12) month basis. Marketing consent records are retained until withdrawal of consent plus twelve (12) months. Upon a verified written request submitted to contact@stratition.com, Stratition will delete personal data within thirty (30) days, subject to statutory obligations that cannot be waived.

1.10 Security

Stratition implements technical and organisational security measures in compliance with the IT (SPDI) Rules, 2011 and the Digital Personal Data Protection Act, 2023. These measures include role-based access controls ensuring engagement data is accessible only to authorised personnel, HTTPS encryption for all hosted digital services and file transfers, data minimisation practices, certified third-party payment gateways with no card data stored directly by Stratition, and binding confidentiality obligations executed by all personnel. In the event of a personal data breach materially affecting data principals, Stratition will notify affected individuals and relevant authorities within seventy-two (72) hours of becoming aware of the breach.

1.11 Rights of Data Principals

Indian data principals under the DPDP Act, 2023 have the right to access a summary of personal data processed by Stratition and the purposes of processing, the right to correction and erasure of inaccurate or outdated personal data, the right to grievance redressal by contacting contact@stratition.com, the right to nominate another individual to exercise rights on their behalf, and the right to withdraw consent at any time without affecting the lawfulness of prior processing.

EEA and UK data subjects under the GDPR have the right of access, the right to rectification, the right to erasure subject to applicable retention obligations, the right to restriction of processing, the right to data portability in a structured machine-readable format, the right to object to processing, the right to withdraw consent, and the right to lodge a complaint with the relevant national supervisory authority.

California residents have the right to know what personal information is collected, to delete personal information, to correct inaccurate personal information, to opt out of the sale of personal information which is not applicable to Stratition's practices, and to non-discrimination for exercising these rights.

All rights requests must be submitted in writing to contact@stratition.com. Stratition will acknowledge all verified requests within five (5) business days and resolve them within thirty (30) days.

1.12 Marketing Communications

Stratition will send promotional communications only upon receipt of express, freely given, specific, and informed consent. Every marketing communication includes an unsubscribe mechanism. Withdrawal of consent from marketing communications does not affect operational communications related to active engagements.

1.13 Children

Stratition's services, including all services offered under the Markexta brand, are intended exclusively for use by registered businesses and individuals who are eighteen (18) years of age or older. Stratition does not knowingly collect personal data from individuals below the age of eighteen. Where Stratition becomes aware that such data has been inadvertently collected, it will be deleted without delay.

Part 2 — Data Processing Agreement

2.1 Preamble

This Data Processing Agreement supplements the Privacy Policy set out in Part 1 and governs the processing of personal data by Stratition in connection with the delivery of all services offered by Stratition and its sub-brands including Markexta. This Agreement is entered into in accordance with the Digital Personal Data Protection Act, 2023, the General Data Protection Regulation (EU) 2016/679 for engagements involving EEA or UK data subjects, and all other applicable data protection laws of the Republic of India.

2.2 Scope and Nature of Processing

Stratition processes identity and contact data provided by clients during inquiry, intake, onboarding, and service delivery communications. Stratition processes business and commercial data provided by clients to enable the production and delivery of services. Stratition processes technical data collected automatically through stratition.com as described in Part 1 and Part 3 of this Policy. Stratition processes publicly available data about client businesses during service production as described in Part 1. All processing is carried out exclusively for the purposes of service delivery, management of the commercial relationship, and compliance with applicable legal and regulatory obligations.

2.3 Stratition's Obligations as Data Fiduciary

Stratition shall process personal data only for the purposes described in this Policy and only to the extent necessary for those purposes. Stratition shall implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Stratition shall not process personal data for any purpose incompatible with those described without prior consent of the Data Principal. Stratition shall ensure that all personnel with access to personal data are bound by confidentiality obligations. Stratition shall maintain records of processing activities to the extent required by applicable law. Stratition shall notify affected Data Principals and relevant regulatory authorities of any personal data breach within seventy-two (72) hours of becoming aware, where required by applicable law.

2.4 Sub-Processors

Stratition engages sub-processors in the following categories: cloud hosting and storage providers, communication and project management platforms, payment processing services, analytics and website optimisation services, and artificial intelligence production platforms. All sub-processors are bound by data processing agreements requiring equivalent security and confidentiality standards. Stratition may engage new sub-processors or replace existing ones at any time without prior notice. Clients with specific sub-processor requirements applicable to their jurisdiction should communicate these to contact@stratition.com before engaging any Stratition or Markexta service.

2.5 Data Retention Under This Agreement

Upon expiry of the applicable access period for any service, Stratition's obligation to retain service output data ceases. Client data used during service production may be retained for up to twelve (12) months beyond the end of the engagement for quality assurance and dispute resolution purposes, after which it will be deleted unless statutory obligations require longer retention.

2.6 Limitation of Liability

Stratition's liability under this Data Processing Agreement in respect of any data processing matter is subject to the limitation of liability provisions set out in the Terms & Conditions published at stratition.com. Stratition shall not be liable for any indirect, consequential, or punitive damages arising from any data processing matter to the maximum extent permitted by applicable law.

Part 3 — Cookie Policy

3.1 What Cookies Are

Cookies are small text files placed on your device by a website when you visit it. They are used to make websites function efficiently, to remember user preferences, to understand how visitors interact with a website, and to enable certain marketing and advertising functions. Cookies may be set by the website you are visiting or by third parties whose services are integrated into that website. References to cookies in this Policy include all similar tracking technologies including web beacons, pixel tags, local storage objects, and session storage unless otherwise stated.

3.2 Categories of Cookies Used

Strictly necessary cookies are essential for the operation of stratition.com. Without them, core website functions including page navigation, form submission, and access to platform features cannot be provided. These cookies do not collect personal information for marketing purposes and cannot be disabled without affecting core website functionality.

Performance and analytics cookies collect information about how visitors use stratition.com, including which pages are visited most frequently, how long visitors remain on each page, and how visitors arrived at the site. This information is used in aggregated and anonymised form to improve website performance. Stratition may use third-party analytics platforms including Google Analytics for this purpose.

Functional cookies allow stratition.com to remember choices you make and provide enhanced features. This may include remembering your language preferences, your region, or previously entered information in inquiry forms.

Marketing and targeting cookies are used to deliver promotional content relevant to your interests. These cookies track browsing behaviour across stratition.com and in some cases across other websites. They may be placed by Stratition or by third-party advertising partners including Meta, Google Ads, and LinkedIn. Third-party advertising cookies are governed by the privacy and cookie policies of the respective third parties.

3.3 Cookie Consent and Control

Where required by applicable law, Stratition will seek your consent before placing non-essential cookies on your device through a consent banner displayed on first visit to stratition.com. Strictly necessary cookies do not require consent. You may withdraw or modify your cookie preferences at any time through the cookie settings panel accessible on stratition.com. You may also manage and delete cookies through your web browser settings. Disabling certain cookies may affect the functionality of stratition.com and may prevent you from accessing some features or services. You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

3.4 Third-Party Cookies

Some cookies on stratition.com are placed by third parties whose services are embedded in or linked from the website. Stratition does not control third-party cookies and is not responsible for the data practices of third parties. You should review the privacy and cookie policies of any third-party platform whose services you interact with through stratition.com.

3.5 Duration of Cookies

Cookies may be either session cookies, which are temporary and deleted when you close your browser, or persistent cookies, which remain on your device for a set period or until you delete them. You may view and manage cookie duration through your browser settings.

Governing Law and Dispute Resolution

This Privacy Policy is governed exclusively by the laws of the Republic of India. Any dispute arising under or in connection with this Policy shall be resolved exclusively through binding arbitration under the Arbitration and Conciliation Act, 1996, seated in India. The language of arbitration shall be English. The arbitrator's award shall be final and binding on all parties.

Contact

All privacy, data protection, and cookie-related enquiries must be directed to contact@stratition.com. Stratition does not accept verbal or in-person communications in connection with these matters.