Privacy policy

Who we are

The data controller is [COMPANY LEGAL NAME, REGISTERED ADDRESS]. Contact: [SALES EMAIL]. This policy covers the EU GDPR (Ireland) and the Swiss Federal Act on Data Protection (FADP).

What we collect

• Audit and contact forms: name, business email, company website, industry, country, optional service, region and message.
• Marketing consent, only if you tick the box. It is never pre-ticked.
• The page you came from and campaign tags (utm_*), so we know which pages help.
• Cookieless analytics (Plausible): aggregated page views, no personal profiles.
• Google Analytics and LinkedIn Insight, only if you click "Accept all".

Why we use it (legal basis)

• To prepare your audit and reply to you: steps you asked for before a contract (Art. 6(1)(b) GDPR).
• Marketing emails: your consent (Art. 6(1)(a) GDPR). Withdraw any time.
• Basic analytics and security: our legitimate interest (Art. 6(1)(f) GDPR).

Processors

Vercel (hosting), Supabase (lead storage, EU region), Resend (email), Cal.com (booking), Plausible (analytics), Cloudflare (bot protection) and AI model providers [CONFIRM]. Each works under a data processing agreement.

How long we keep it

Leads that don't become clients: [CONFIRM] months. Client data: for the contract plus legal retention periods.

Your rights

You can ask to access, correct, delete, restrict or export your data, and object to processing. Email [SALES EMAIL]. You can complain to the Data Protection Commission (Ireland) or the FDPIC (Switzerland).

International transfers

We store leads in the EU. Where a processor transfers data outside the EU/EEA or Switzerland, we rely on adequacy decisions or standard contractual clauses.