Privacy policy

1. Who we are

Innoligo Ltd ("Innoligo", "we", "us") is a company registered in England and Wales, company number 15571813. Our registered office is Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset BH16 6FA. We are registered with the Information Commissioner's Office (ICO), registration number ZC174567.

We are the "controller" of the personal data described in this policy, which means we decide how and why it is used. This policy covers this website and our self-serve tool. If you have any question about it, email support@innoligo.com.

2. What we collect, why, and for how long

If you send us an enquiry

• What: your name, work email address, company, phone number (optional), the topic you chose, your message, and your confirmation that we may use your details to reply.
• Why: to reply, and to agree scope and price if you are interested in our services.
• Security check: the form uses Cloudflare Turnstile to tell people from automated bots. When it runs, Cloudflare receives technical information such as your IP address and browser details to make that decision. Our legal basis is our legitimate interests in preventing spam and abuse.
• Our legal basis: our legitimate interests in responding to business enquiries and, where you ask about a service, steps you ask us to take before a contract.
• How long: up to 24 months after our last contact with you, unless we go on to work together.

If you buy an assessment or use the self-serve tool

• What: your name, email address, company and billing details, your VAT number if you give one, and what you bought and when. Assessments are invoiced and paid by bank transfer, so we also see the payment details that appear on your transfer. For the self-serve tool, you enter your card details on Stripe's secure page, and we never see or store your full card number.
• Why: to take payment, issue VAT invoices, start the work, and keep the records the law requires.
• Our legal basis: performing our contract with you, and our legal obligation to keep tax and accounting records.
• How long: at least six years, as tax and company law require.

If we do an assessment or other work for you

• What: with the read-only access you give us, we may see personal data about your organisation's staff and systems, for example user names, email addresses, and licence and usage information.
• Why: only to deliver the work you have asked for. In this case we act on your instructions and on the terms we agree with you.
• How long: only as long as needed to deliver the work and answer your questions afterwards, as set out in our agreement with you. We then delete or return it.

Our self-serve tool

The tool analyses the licence information you give it in your own browser. We do not receive or store the files you analyse. We do receive the payment details described above. If this ever changes, we will update this policy before it does.

Our free tools

The free tools on this website (the report finder, the security checklist and the AI policy generator) work out your result in your own browser. Nothing you enter is sent to us or stored, and they set no cookies. If you choose to book a free call from a result, a short summary of that result is placed in the enquiry form for you to keep, edit or delete before sending.

When you visit this website

• What: like every website, our hosting provider sees technical data such as your IP address, browser type, the pages requested and the time. It uses this to deliver the site and protect it from attack.
• Analytics: we use Cloudflare Web Analytics and Ahrefs Web Analytics to see how many people visit, where they come from and which pages are popular. Both are cookie-free: they use no cookies or persistent identifiers, cannot identify you individually and cannot track you across other websites. We do not use advertising or marketing tools on this website. See our cookie policy.
• Our legal basis: our legitimate interests in running a secure website and understanding how it is used.

If we correspond or work together

We keep the contact details and correspondence needed to run the relationship, on the basis of our contract or our legitimate interests. We keep contract records for six years after the relationship ends, then delete them.

3. Who we share your data with

We do not sell personal data. We use trusted providers who handle it only for the purposes described here:

• Cloudflare hosts this website, protects it from attack, runs the security check (Turnstile) on our enquiry form, and provides cookie-free visitor analytics (Web Analytics) so we can see how the site is used.
• Ahrefs provides a second cookie-free visitor analytics tool (Ahrefs Web Analytics) and checks the site for technical search problems.
• Resend delivers the email that is created when you send an enquiry through our form.
• Microsoft provides our email and office tools, which is where enquiries and correspondence are received and kept.
• Stripe will take card payments for our self-serve tool when it launches. Assessments are invoiced and paid by bank transfer, not through Stripe. Stripe also uses some data for its own purposes, such as preventing fraud, under its own privacy policy.
• Trusted partners and subcontractors who may help us deliver assessments. Where they handle personal data they do so under written agreements and only for that purpose.
• Professional advisers and authorities such as our accountants, lawyers and insurers, and public bodies where the law requires it.

You can read how Stripe uses data in its privacy policy.

4. Transfers outside the UK

Some of our providers are based outside the UK, or handle data outside it, for example in the European Economic Area or the United States. Where that happens we rely on safeguards recognised under UK law, such as UK adequacy regulations (including the UK–US data bridge for certified providers), or approved contract terms such as the ICO's International Data Transfer Agreement or Addendum.

5. Keeping your data safe

We use measures such as encrypted connections, access controls and limiting who can see data. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the Information Commissioner's Office as the law requires.

6. Your rights

Under UK data protection law you can ask to see, correct, delete or limit the personal data we hold about you, and object to how we use it. To do so, email support@innoligo.com and we'll sort it out, usually within a month.

7. Complaints

We'd like the chance to put things right first: email support@innoligo.com. You can also complain to the ICO, the UK regulator, at ico.org.uk.

8. Marketing

We do not currently send marketing emails. If we start, we will do it lawfully, ask for your consent where the law requires it, and make it easy to opt out.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make an important change, we will make it clear on this page.