Legal

Privacy Policy

Effective date: 10 October 2026

This policy explains how we handle personal data collected through the public Stellon marketing website at stellon.com, and personal data we use when we contact professionals directly about Stellon (see Business outreach). If you are a client using the authenticated Stellon platform, your organisation's tenant terms and data processing arrangements govern that use, not this policy.

Who we are

Stellon is a governed wealth operating platform. Stellon is the data controller responsible for personal data collected through this website and used for our business outreach. Where this policy refers to "we", "us" or "our", it means Stellon, which operates this website.

For any question about this policy or your personal data, contact us at privacy@stellon.com.

What we collect

We keep data collection on this website to a minimum. We collect:

  • Enquiry details you choose to submit through the contact form or by email, typically your name, work email address, firm, and the content of your message.
  • A functional session cookie, set only within a password-gated area of the site to keep you signed in during your visit. We do not use marketing, advertising, or analytics cookies.
  • Standard server and CDN logs generated by our hosting provider, such as IP address and browser user-agent, retained for security and reliability.

We do not currently load any analytics or advertising trackers on our pages.

How we use it

We use the information above only for limited, clearly defined purposes:

  • To respond to and manage your enquiry, and to carry on any resulting correspondence or business relationship.
  • To keep you signed in within a password-gated area of the site during your session.
  • To maintain the security, integrity, and reliable operation of the website.

We do not sell or share personal data for advertising, and we do not carry out automated decision-making or profiling.

Business outreach

We also contact professionals at wealth managers, family offices and other financial firms whose role makes Stellon relevant to their work, by email and on LinkedIn. This section explains how we handle the personal data we use for that outreach.

  • What we use: your name, job title, employer, work email address, LinkedIn profile URL and the country your firm operates in, together with a record of our messages to you and any replies.
  • Where it comes from: professional networking sites such as LinkedIn, business-contact data providers, public company websites and registers, and business contacts introduced to us through our partners.
  • Why we use it: to introduce Stellon to firms it may help, and to manage any conversation that follows.
  • Legal basis: our legitimate interest in promoting Stellon to relevant businesses. We contact people only in their professional capacity and keep outreach to a small number of messages.
  • Who helps us: an outreach platform and an email provider that send and log our messages on our instructions, under appropriate data protection terms.
  • How long we keep it: while outreach is active and for up to 24 months after our last contact, unless a business relationship follows. If you object, we keep only the minimum needed to make sure we do not contact you again.

You can opt out at any time. Reply “no” to any of our messages, or email privacy@stellon.com, and we will stop contacting you. Your right to object to direct marketing is absolute.

Cookies

This website uses a single functional session cookie, and only within a password-gated area of the site, to preserve your login for the duration of your visit. It is strictly necessary for that area to work. We do not set marketing, advertising, or analytics cookies anywhere on the site.

Legal basis

We process personal data under the UK GDPR and the EU GDPR. Our legal bases are:

  • Legitimate interests, where you have contacted us and we respond to and manage your enquiry, and where we keep the website secure and reliable. Our interest is balanced against your rights and expectations.
  • Legitimate interests in promoting Stellon to relevant businesses, where we contact professionals directly (see Business outreach).
  • Consent, where you voluntarily provide your details to make an enquiry. You may withdraw consent at any time.

Sharing and sub-processors

We do not sell your personal data or share it for advertising. We share limited data only with the service providers that help us operate the website, acting on our instructions under appropriate data protection terms. These are:

  • Our hosting and content-delivery provider, which serves the website and generates server logs.
  • Our email provider, used to deliver and manage correspondence relating to your enquiry.
  • Our storage provider, used to hold related records securely.

We may also disclose personal data where required by law or to establish, exercise, or defend legal claims.

International transfers

Our hosting, email, and storage providers process data within the European Union. Where any transfer of personal data outside the UK or EEA occurs, we rely on appropriate safeguards recognised under the UK and EU GDPR, such as adequacy decisions or standard contractual clauses.

Retention

We keep enquiry data only for as long as needed to respond to your enquiry and to manage any resulting relationship, after which it is deleted. Server and CDN logs are retained for a short period for security and reliability, then removed in the ordinary course. We do not keep personal data longer than necessary for the purpose for which it was collected.

Your rights

Subject to the UK and EU GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected (rectification).
  • Have your data erased.
  • Restrict how we process your data.
  • Object to processing based on legitimate interests.
  • Receive your data in a portable format (portability).

To exercise any of these rights, email privacy@stellon.com. You also have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office or your local EU data protection authority.

Security

We apply appropriate technical and organisational measures to protect personal data collected through this website, including encrypted transport and access controls at our providers. If you believe you have found a security issue affecting our website, please report it to security@stellon.com.

Changes

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will revise the effective date above when we do, and material changes will be reflected on this page.

Contact

For privacy matters, contact privacy@stellon.com. For general enquiries, contact start@stellon.com. For security disclosures, contact security@stellon.com.

This policy and any dispute relating to it are governed by the laws of England and Wales.