Effective date: 1 August 2026
1. Who is responsible for your data
StrategicRX FZ-LLC is a company registered in the United Arab Emirates and is the controller of personal data collected for its own Website and business purposes. In this policy, “StrategicRX”, “we”, “us”, and “our” refer to StrategicRX FZ-LLC.
Privacy questions and rights requests may be sent to info@strategic-rx.com. This policy is intended to support compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where their territorial rules apply, other privacy laws such as the EU General Data Protection Regulation.
2. Scope
This policy applies to personal data connected with:
- visits to www.strategic-rx.com;
- contact and consulting enquiry forms;
- the 4-Minute Business Scan;
- Executive Decision Support purchases;
- email and professional communications;
- prospective and current client relationships; and
- content or updates requested separately from StrategicRX.
This policy does not control an external website or service that determines its own purposes for processing. Review the provider’s privacy notice when you leave this Website or use an external service.
3. Personal data we collect
Depending on how you interact with StrategicRX, we may collect:
- Identity and professional data: name, business email, company, role, and professional contact details you provide;
- Enquiry data: your business situation, commercial goals, message, correspondence, requested service, and information you choose to share;
- Business Scan data: answers, calculated score, five area scores, indicated priorities, confidence, critical exposure, and submission details;
- Purchase data: service purchased, transaction amount, date, status, customer contact details, invoice or receipt information, and related communications;
- Client data: business records, stakeholder information, meeting notes, deliverables, decisions, and communications supplied or created during an engagement; and
- Technical and security data: IP address, browser, device, operating system, request time, referring page, requested page, form-security metadata, and service or error logs processed by Website and service providers.
Stripe collects complete payment-card or payment-account details when you use its checkout. StrategicRX does not receive or store your complete payment-card number. StrategicRX may receive transaction and customer details needed to confirm and administer the purchase.
4. Sensitive data and confidential information
Website forms are not designed to collect passwords, complete payment-card details, government identifiers, health data, biometric data, or other sensitive personal data. Do not submit that information through a Website form. Do not include trade secrets or highly confidential business information unless StrategicRX has asked for it through an appropriate channel.
5. How we collect data
We collect personal data:
- directly from you when you submit a form, complete the Business Scan, make a purchase, email us, or participate in an engagement;
- from your company or its authorized representatives when they include you in an enquiry or engagement;
- from payment, form, hosting, email, security, and other service providers used to operate the Website and business;
- from professional or public sources, such as LinkedIn or a company website, when relevant to a legitimate business conversation; and
- automatically through technical requests and logs needed to deliver and protect the Website.
6. Why we use personal data
We may use personal data to:
- receive, review, route, and respond to enquiries;
- provide and display a requested Business Scan result;
- provide access to Plans and Pricing after an eligible submission;
- assess a possible engagement and take requested steps before a contract;
- process, confirm, schedule, administer, and support a purchase;
- deliver and manage contracted client services;
- keep business, accounting, contractual, and legal records;
- operate, secure, troubleshoot, and protect the Website, forms, transactions, and communications;
- protect legal rights, prevent misuse, and respond to lawful requests; and
- send marketing only where you have separately requested it or another lawful basis permits it, with an available opt-out.
7. Legal bases
The legal basis depends on the activity and the law that applies. StrategicRX may rely on:
- Consent where you freely agree to a specific use, including optional marketing or non-essential technology where required;
- Steps before a contract and performance of a contract when responding to a service request, administering a purchase, or delivering an engagement;
- Legitimate interests in responding to business enquiries, operating and securing the Website, managing professional relationships, preventing misuse, and protecting legal rights, balanced against your rights; and
- Legal obligations involving accounting, tax, corporate, regulatory, court, or law-enforcement duties.
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal.
8. Business Scan scoring and automated processing
The Business Scan calculates a result from the answers you select using fixed, rule-based scoring. It does not use artificial intelligence. The result provides an indicative self-assessment and does not make a decision that produces a legal or similarly significant effect.
A successful Business Scan submission places a short access value in browser session storage so that you may choose to open the private Plans and Pricing page. The access value contains no name, email, company, answers, or score and normally ends when the browser session closes.
9. Formspree form processing
Contact forms and the Business Scan are processed by Formspree, Inc. When you submit a form, the form fields and limited technical information may be sent to and processed by Formspree in the United States. Formspree uses this information to accept and deliver the submission, operate its service, prevent fraud and abuse, and maintain security and service quality.
Form submissions may include your name, business email, company, role, message, Business Scan answers and result, source page, IP address, browser type, access time, referring page, and security metadata. Do not submit sensitive personal data. Review Formspree’s Privacy Policy for more information.
10. Stripe payment processing
Executive Decision Support purchases use Stripe. Stripe may collect and process contact, device, browser, payment method, transaction, authentication, fraud-prevention, tax, dispute, and support information. Depending on the activity, Stripe may act as a processor for StrategicRX and as an independent controller for its own legal, security, fraud-prevention, and service purposes.
StrategicRX may receive your name, email, transaction amount, purchase description, payment status, invoice or receipt details, and information needed to provide the purchased service. Review the Stripe Privacy Policy and Stripe Cookie Policy.
11. Other recipients and disclosures
Personal data may be shared with:
- Website hosting, content-delivery, email, storage, security, and technical-support providers;
- professional advisers such as legal, accounting, tax, audit, insurance, or information-security advisers where needed;
- selected consultants or specialists working under suitable confidentiality and data-protection duties for an agreed engagement;
- regulators, courts, law-enforcement bodies, or other authorities where disclosure is required or legally permitted; and
- a buyer, successor, investor, or adviser involved in a merger, acquisition, restructuring, financing, or sale, subject to appropriate confidentiality and legal safeguards.
The Insights page loads thumbnail images from YouTube. That request may disclose IP address, browser, device, and referring page information to Google or YouTube. The Website does not embed or autoplay YouTube players on the Insights page.
StrategicRX does not sell personal data and does not exchange personal data for money. StrategicRX does not use Website form data for third-party advertising.
12. International transfers
StrategicRX is based in the United Arab Emirates and works internationally. Service providers and recipients may process personal data in the UAE, United States, European Economic Area, United Kingdom, or other countries where they operate. Those countries may have privacy laws different from those in your location.
Where applicable law requires transfer safeguards, StrategicRX uses an available lawful transfer mechanism, such as an adequacy decision, approved contractual clauses, a data processing agreement, consent where valid, or another lawful exception. You may contact us for information about safeguards relevant to your data.
13. Retention
StrategicRX keeps personal data only for as long as reasonably needed for the purpose collected, a continuing professional relationship, dispute handling, security, and legal, accounting, tax, or contractual obligations.
- Enquiry and Business Scan submissions are generally kept for up to 12 months after the last meaningful contact unless an engagement begins or a longer period is needed for a legal reason.
- Client, purchase, invoicing, and transaction records may be kept for up to seven years, or longer where applicable law, a dispute, or a contract requires it.
- Marketing contact data is kept until you unsubscribe, withdraw consent, or the information is no longer needed, subject to a limited suppression record used to respect an opt-out.
- Browser session storage for private offer access normally ends when the browser session closes.
Service providers may retain information under their own legal duties and retention policies. When data is no longer needed, StrategicRX deletes, anonymizes, or securely archives it as appropriate.
14. Security
StrategicRX uses reasonable technical and organizational measures suited to the nature of the data and the risks. These may include encrypted transmission, access controls, authentication, limited provider access, secure hosted systems, backups, and review of service-provider safeguards.
No Internet transmission or storage system is completely secure. If a personal-data breach requires notice under applicable law, StrategicRX will notify affected individuals and authorities as required.
15. Your privacy rights
Depending on the law that applies, you may have rights to:
- be informed about processing;
- request access to and a copy of personal data;
- correct incomplete or inaccurate data;
- request deletion in applicable circumstances;
- restrict or object to certain processing;
- receive or transfer data in a structured, commonly used format where the right applies;
- withdraw consent;
- object to direct marketing and opt out of marketing communications;
- obtain information about safeguards used for an international transfer; and
- complain to the competent privacy or data-protection authority.
To make a request, email info@strategic-rx.com. StrategicRX may ask for information needed to verify your identity and authority. Rights may be limited by applicable law, another person’s rights, legal privilege, contractual duties, or record-retention requirements. StrategicRX will respond within the period required by applicable law.
16. Children, external links, updates, and contact
The Website and services are intended for business users and are not directed to children under 18. StrategicRX does not knowingly collect personal data from children through the Website. If you believe a child has submitted personal data, contact us so it can be reviewed and deleted where appropriate.
External links are governed by the external provider’s privacy practices. StrategicRX may update this policy when the Website, services, providers, or law changes. The effective date shows when the current version took effect. Material changes will be communicated where required.
Contact StrategicRX FZ-LLC at info@strategic-rx.com or through www.strategic-rx.com.