Privacy Policy

What we collect

We only collect what you choose to give us, plus a small amount of technical data that any website receives.

• Enquiry forms: your name, email address, and your message. A phone number if you choose to add one — it is optional on every form.
• Partner registration: additionally where you are based and a short description of your situation and network.
• BlogBERT early access: additionally your website address, if you give one, and the country the business operates in.
• Analytics: pages viewed, approximate location by country, device and browser type, and how you arrived. Collected only if you accept analytics cookies, and never tied to your name.
• Server logs: IP address, timestamp and requested URL, recorded automatically by our host for security and reliability.

Why we use it, and our lawful basis

• To reply to your enquiry and discuss a possible project — necessary to take steps at your request before entering a contract (UK/EU GDPR Article 6(1)(b)).
• To deliver and support work you have engaged us for — performance of a contract (Article 6(1)(b)).
• To keep the site secure and working — our legitimate interest in running a functioning website (Article 6(1)(f)).
• To measure how the site is used — your consent (Article 6(1)(a)), which you give or refuse through the cookie banner and can change at any time.
• To send you occasional updates about our work — your consent, given by ticking the optional box on a form. We never add you to anything by default, and every message has an unsubscribe link.

Who we share it with

We do not sell personal data and we do not share it for advertising. We use a small number of service providers who process data on our behalf:

• Formspree (United States) — receives and forwards what you type into any form on this site, so that it reaches our inbox.
• Google Analytics 4 (Google Ireland Limited / Google LLC) — measures how the site is used. Only loaded if you accept analytics cookies.
• Render (United States) — hosts this website and keeps standard server access logs.

International transfers

Some of those providers are based in the United States, so data you send us may be transferred outside the UK, the EEA and Pakistan. Where that happens we rely on the providers' Standard Contractual Clauses and their UK/EU Data Privacy Framework certifications, which are designed to give your data protection equivalent to that of your home jurisdiction.

How long we keep it

• Enquiries that do not become projects: up to 24 months, so we recognise you if you come back, then deleted.
• Client project records: for the duration of the engagement and 7 years afterwards, to meet tax and accounting obligations.
• Marketing list: until you unsubscribe.
• Analytics: 14 months, the retention period configured in Google Analytics.
• Server logs: typically 30 days, as set by our host.

Your rights

Depending on where you live, you have some or all of the following rights over your personal data. In the UK and EEA you have all of them:

• Access — ask for a copy of what we hold about you.
• Rectification — have anything inaccurate corrected.
• Erasure — ask us to delete it, where we have no overriding obligation to keep it.
• Restriction and objection — ask us to stop or limit a particular use, including any use based on legitimate interests.
• Portability — receive the data you gave us in a machine-readable format.
• Withdraw consent — at any time, without affecting anything done before you withdrew it.

How to exercise them

Email info@inferya.com and tell us what you want. We will respond within 30 days, and we will not charge you for it.

If you are in the UK you can complain to the Information Commissioner's Office (ico.org.uk). In the EEA you can complain to your national supervisory authority. We would rather you came to us first, but you do not have to.

Security

This site is served over HTTPS. Form submissions are encrypted in transit, and access to the inboxes and accounts that receive them is restricted to the people who need it and protected by two-factor authentication. No system is perfectly secure, but we take this seriously and would tell you promptly if something went wrong in a way that affected you.

Children

This site sells business services and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us their details, email us and we will delete them.

Changes to this policy

We will update this page when our practices change, and the date at the top will tell you when that last happened. Material changes affecting how we use data you already gave us will be notified to you directly where we have a way to reach you.