This policy describes how XYZ (“we”, “us”, “our”) collects, uses, and protects information about visitors to our website and clients of our services. We try to keep this short and direct.
Information we collect
- Information you give us. Names, email addresses, phone numbers, company details, and project descriptions you submit through our contact form, newsletter signup, or pricing flow.
- Information collected automatically. Standard server logs (IP address, user agent, referrer, timestamp). If you accept analytics cookies, we also use Google Analytics to see which public pages are visited and how visitors found the site. Analytics never runs in client accounts or the dashboard.
- Information from active engagements. During projects we may process data on behalf of clients under a separate Data Processing Agreement. That data is governed by the engagement's contract, not by this policy.
How we use information
- To respond to your enquiries and deliver services you've engaged us for.
- To send transactional communications related to active engagements (project updates, invoices, support).
- To send the quarterly newsletter — only if you've subscribed, and only until you unsubscribe.
- To improve our website and services.
Sharing
We don't sell your information. We share data only with vetted service providers (e.g. email delivery, payment processors, hosting) under appropriate contractual safeguards, and only as necessary to operate the service or fulfil an engagement.
Your rights
You may request access to, correction of, or deletion of your personal information at any time by contacting us. We respond within 30 days. Where applicable laws give you additional rights (such as data portability or objection to certain processing), we honour those rights.
Cookies
- Essential cookies. Session cookies that keep you signed in to client accounts and the dashboard. These are always on.
- Analytics cookies. Google Analytics sets the
_gaand_ga_<id>cookies, but only after you click Accept on the cookie banner. Until then, and if you decline, no analytics cookies are set; Google Analytics receives only cookieless page signals, with no cookie or visitor identifier. Google processes this data under its own privacy policy. - Your choice. We remember your Accept or Decline in a cookie named
xyz_consentfor 180 days. You can change it at any time with the Cookie settings link in the footer. Withdrawing consent stops analytics and removes its cookies.
We don't use advertising or cross-site tracking cookies, and we never allow Google to use analytics data for advertising or ad personalisation.
Retention
We retain enquiry and communication records for as long as needed to respond to your request, deliver active services, and meet our legal obligations. Newsletter subscriptions are retained until you unsubscribe.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent change. Material updates will be communicated to active clients.
Contact
Questions about this policy or how we handle your data? Reach us through our contact page.