How Inverisla handles your data.
Who we are
This site is operated by Inverisla Ltd, a company registered in Scotland (company number SC888874). For the purposes of UK GDPR and the Data Protection Act 2018, Inverisla Ltd is the data controller for personal information you provide through this website.
If you have any questions about this notice or about how Inverisla handles your data, you can reach Colin directly at hello@inverisla.com.
What we collect
When you submit the contact form on this site, we collect:
- Your name
- Your email address
- Your organisation (optional)
- The enquiry type you select
- The message you write
When you book a discovery call via Cal.com, you provide the same information directly to Cal.com plus a meeting time. We see this information when the booking confirmation arrives in our inbox.
We also collect a small amount of technical data as a routine part of running the site. Our hosting provider, Cloudflare, logs IP addresses and request information for security and abuse prevention. Cloudflare Turnstile (the spam-protection check on the contact form) processes your IP address briefly to determine whether you're a human visitor. Beyond this, we do not run analytics, advertising trackers, or any other behavioural monitoring on this site.
Why we collect it
The form data exists for one reason: so we can read your enquiry and respond to it. Once you and Colin are in conversation by email, that conversation continues outside the form's lifecycle.
The legal basis for processing this data is legitimate interest — you've contacted us because you want to be in touch, and we're processing your information to provide that response. We don't use form submissions for marketing, we don't add you to mailing lists, and we don't share your contact details with anyone else.
Who has access
Form submissions are delivered through a small number of technical providers. Each of these is a data processor for Inverisla under UK GDPR:
- Cloudflare — hosts the website, runs the contact form's submission handler, and handles email delivery and routing. Privacy policy: cloudflare.com/privacypolicy
- Google (Gmail) — our destination inbox provider. Privacy policy: policies.google.com/privacy
- Cal.com — handles audit discovery call bookings, if you use that route. Privacy policy: cal.com/privacy
We don't sell, rent, or share your data with anyone else. We don't use it for anything beyond responding to your enquiry and any subsequent commercial relationship.
How long we keep it
Form submissions and the email conversations that follow are retained for up to 24 months from your last contact with us. This is standard for B2B sales and advisory pipelines and gives both parties time to follow up if circumstances change.
If you become a client, the engagement record is retained for longer — usually for six years from the end of the engagement, in line with standard UK practice for business records and tax purposes.
You can ask us to delete your data at any time before these retention periods expire (see "Your rights" below).
Cookies
This site uses a small number of essential cookies set by Cloudflare for security and performance reasons. Turnstile, the spam-protection widget on the contact form, sets a short-lived cookie as part of its verification process. None of these are advertising or analytics cookies, and we don't track you across other sites.
Your rights
Under UK GDPR you have the right to:
- Ask for a copy of the personal data we hold about you (right of access)
- Ask us to correct anything that's inaccurate (right of rectification)
- Ask us to delete your data (right of erasure)
- Ask us to restrict or stop processing it (right to restriction and objection)
- Ask us to provide your data in a portable format (right to data portability)
To exercise any of these rights, email hello@inverisla.com. We aim to respond within five working days and to action any request within 30 days, as required by UK GDPR.
If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. They're at ico.org.uk.
Changes to this notice
If we make material changes to how we handle data, we'll update this page and change the "last updated" date at the top. The current version is what applies; we don't operate by silent rolling updates.