Privacy Policy

Privacy is not a feature we added

• • We treat privacy as something you are owed, not something you unlock
• • Your trust is the only thing here we cannot rebuild
• • We protect your data with technical measures and with rules about who may touch it
• • It shapes how the products are designed, not only how they are described

The law is the floor, not the target

• • We comply with GDPR, CCPA and the regional laws that apply to you
• • Protection is built in from the start rather than added at the end
• • The strictest settings are the defaults; you do not have to find them
• • Where the architecture can prevent a problem, we prefer that to a policy about it

You can tell what we collect

• • We say what we collect and why, in the same words we would use out loud
• • No vague clauses, no legal padding
• • We tell you before a policy change takes effect, not after
• • Written so you can decide, not so we are covered

We collect as little as we can

• • Only what the work actually requires
• • Nothing gathered because it might be useful one day
• • Every field we hold has a reason we can state
• • Deleted once the reason no longer applies

The data stays yours

• • Ask what we hold about you, at any time
• • Have anything wrong corrected
• • Have it deleted when you want it gone
• • Take it away in a format another system can read
• • Object to a particular use without losing the rest

How it is kept safe

• • Encrypted where it is stored and while it moves
• • Two factors to sign in, for everyone with access
• • Regular security reviews of our systems
• • Access granted by role, only where the work requires it
• • Everyone who works here is trained on this

Who else touches it

• • Every supplier is checked before we use them
• • Each one is bound by contract to the same obligations
• • They get the minimum needed to do their part, and no more
• • We keep checking that they still comply

When data crosses a border

• • Standard contractual clauses where they are required
• • We rely on adequacy decisions where they exist
• • We will tell you where your data physically sits
• • The same protection applies wherever it is

Children

• • These services are built for adults
• • We do not knowingly collect anything from a child
• • If we find we have, we delete it straight away
• • Where a service could reach younger users, we add protections for it

When something goes wrong

• • There is a written procedure, and it has been rehearsed
• • The first job is to detect it and stop it spreading
• • Anyone affected hears from us, promptly and in plain terms
• • Afterwards we work out why and change what allowed it

If you want to ask something

There is a person responsible for this, and they answer.

• • Requests about your data are handled promptly
• • You can ask a follow-up; we would rather you did
• • What people tell us changes how we do this
• • Write to info@inite.solutions and say what you need