Privacy Policy
Last updated: 22 June 2026
This Privacy Policy explains how Granite Strata Corp (“Granite”, “we”) handles personal data in connection with our public marketing website at granitestrata.com. It does not cover the Granite product platform, which is governed by a separate agreement and Data Processing Addendum entered into with each customer.
Who we are
Granite Strata Corp is the controller of the personal data described in this policy. We are an EU-focused company building transaction infrastructure for enterprise commercial real estate. For any privacy question, contact us at privacy@granitestrata.com.
What we collect, and why
This website is a static site. We use only privacy-friendly, cookieless analytics and run no advertising or cross-site tracking, and it has no on-site forms. As a result we collect very little personal data:
- Technical access data — when your browser requests a page, our hosting provider records standard server log data (IP address, user agent, the page requested, and a timestamp) to deliver the site and protect it against abuse and attacks.
- Aggregate analytics — we use Plausible, a cookieless, EU-based analytics tool, to count visits and see which pages and referrers are popular. It sets no cookies and does not store your IP address or any data that identifies you; the statistics it produces are aggregate and anonymous.
- Information you send us — the contact and careers pages link to email addresses (mailto). If you email us, we receive your email address and whatever you choose to include, and we use it solely to respond to and manage your inquiry.
Legal basis (GDPR)
We process the technical access data, the cookieless analytics, and any inquiry you send us on the basis of our legitimate interests (Article 6(1)(f) GDPR) in operating and securing the website, understanding aggregate usage, and responding to people who contact us. Where you email us, processing is also necessary to take steps at your request.
Service providers (sub-processors)
We host this website on Firebase Hosting (provided by Google), which serves the site from a content delivery network and processes the technical access data described above on our behalf. We use Plausible Analytics, an EU-based cookieless analytics provider, to produce aggregate usage statistics on our behalf — without cookies and without storing personal data. Both are sub-processors for the marketing website only. See our DPA & sub-processors page for the current list.
Retention
Server access logs are retained for a short operational period and then deleted. Emails you send us are kept only as long as needed to handle your inquiry and any follow-up, after which they are deleted in line with our internal retention practices.
International transfers
Granite is EU-first: customer data in our product platform is stored in EU regions. The public marketing website is served from a global content delivery network so that pages load quickly worldwide; where the host processes technical access data outside the EU, that transfer is covered by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).
Your rights
Subject to applicable law, you have the right to access the personal data we hold about you, and to request its rectification, erasure, restriction, or portability, and to object to processing based on legitimate interests. To exercise any of these rights, email privacy@granitestrata.com. You also have the right to lodge a complaint with your data protection authority.
Children
This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time; the effective date above reflects the latest version. Material changes will be reflected here.
This English version is the authoritative text. Any translation is provided for convenience only; if there is a conflict, the English version governs.