Privacy Policy

What we collect

We keep data collection deliberately minimal. Depending on how you use the site, we may collect:

• Information you submit through our contact form — your email address and the contents of your enquiry, plus any name or company you choose to include.
• Information you submit through an assessment — your email address, your answers and the resulting score, so we can send you the result and follow up if you ask us to.
• Technical logs — your IP address, browser type and pages requested, collected by our hosting and security provider to keep the site available and secure.
• Privacy-first usage analytics — aggregated, non-identifying measures of how the site is used. Our first-party analytics are cookieless and store transient state only for the duration of your browser session (see our Cookie Policy).

How we use it

• To respond to your enquiry and provide the services or information you ask for.
• To deliver assessment results and, where you have asked us to, to follow up about them.
• To operate, secure and improve the website.

Lawful basis

Where the law requires a lawful basis to process your data, we rely on your consent (for example, when you choose to contact us or request an assessment result) and on our legitimate interests in operating a secure, useful website and responding to genuine enquiries. We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

Who we share it with

We share personal data only with service providers who process it on our behalf, under contract, and only as needed to provide the site and respond to you. These currently include:

• Our cloud hosting, content-delivery and analytics provider, which serves the site and provides privacy-first traffic analytics.
• Our transactional email provider, used to deliver notifications such as your enquiry or assessment result.

International transfers

Some of our providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as standard contractual clauses or an adequacy decision) so your data remains protected.

How long we keep it

We keep enquiry and assessment data only for as long as needed to deal with your request and for a reasonable period afterwards, then delete or anonymise it. Technical logs are kept for a short period for security and diagnostics.

Your rights

Subject to local law, you may have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Object to or restrict how we use it, and withdraw consent at any time.
• Ask for a copy of it in a portable format.
• Complain to the data-protection regulator in your jurisdiction.

Purchases and development engagements

If you buy through our online store or commission website development from us, additional processing applies — including payment handling. That is covered separately in our retained store and development terms.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised; material changes will be posted here.

Contact

Questions, requests or complaints about your data: hello@ivaaya.com.