Infoality Ltd - Website Privacy Notice
1. Who we are and what this notice covers
Infoality Ltd (company number 09431601, registered office 3rd Floor, 86-90 Paul Street, London, EC2A 4NE) is the controller of the personal data described in this notice. It covers the personal data we collect through our website, infoality.com, including the contact form. It is provided under Article 13 of the UK GDPR.
Questions about this notice or about your personal data should be sent to hello@infoality.com, marked for the attention of the Data Protection Lead.
2. The personal data we collect
- Contact form: your name, company, email address and the message you write. Please do not include sensitive personal data in your message.
- Technical data: when you visit the website, our hosting provider processes your IP address and basic request information (such as browser type and the page requested) in order to deliver the website and keep it secure.
- Visit statistics: we count visits with our own analytics system, hosted in the UK. For each visit it records the pages viewed, the referring website, your browser, operating system, device type, screen size and language, and an approximate location (country, region and city) derived from your IP address. Your IP address itself is not stored. Visits are grouped using a one-way code that cannot be reversed and that changes every month, so we cannot follow you from one month to the next, and the statistics are not used to identify you.
The website does not use cookies or advertising trackers, and stores nothing on your device.
3. Purposes and lawful bases
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Responding to your enquiry and any follow-up conversation | Legitimate interests (6(1)(f)): responding to people who contact us about our services |
| Delivering the website and protecting it from misuse | Legitimate interests (6(1)(f)): operating a secure website |
| Understanding how the website is used, in aggregate, to improve it | Legitimate interests (6(1)(f)): running and improving our website |
| Entering into a contract with you or your organisation, where your enquiry leads to one | Contract (6(1)(b)) |
We do not use your data for automated decision-making, and we do not add you to marketing lists.
4. Who we share your data with
- Microsoft Ireland Operations Limited - hosting of the website and of our analytics system (Azure), and delivery and storage of enquiries in our email system (Microsoft 365).
- Our professional advisers - where necessary in connection with legal or regulatory matters.
We do not sell personal data.
5. International transfers
Enquiries are stored in Microsoft 365 data centres in the UK and EEA. Visit statistics are stored in the UK. The website is delivered through Microsoft’s global hosting network, which may serve pages from locations outside the UK. Where any processing takes place outside the UK, Microsoft’s data processing agreement provides safeguards, including the UK International Data Transfer Addendum.
6. How long we keep your data
Enquiries that lead to a business relationship are kept in line with our Data Retention and Disposal Policy: for the duration of the relationship plus six years. Enquiries that do not lead to a relationship are deleted within two years of our last contact with you. Visit statistics are deleted automatically after 24 months. Technical data is retained by our hosting provider for a short period in line with its standard operational logging.
7. Your rights
You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and to object to processing based on legitimate interests. To exercise any right, email hello@infoality.com. We respond within one month. If you are dissatisfied with how we handle your data, you may complain to the Information Commissioner’s Office (ico.org.uk), although we would welcome the chance to address your concerns first.
8. Changes to this notice
The current version of this notice is always available at infoality.com/privacy.
9. Related policies
- Data Protection Policy
- Data Retention and Disposal Policy