How Inverisla handles your data.

Who we are

This site is operated by Inverisla Ltd, a company registered in Scotland (company number SC888874). For the purposes of UK GDPR and the Data Protection Act 2018, Inverisla Ltd is the data controller for personal information you provide through this website.

If you have any questions about this notice or about how Inverisla handles your data, you can reach Colin directly at hello@inverisla.com.

What we collect

When you submit the contact form on this site, we collect:

• Your name
• Your email address
• Your organisation (optional)
• The enquiry type you select
• The message you write

With a form submission we also receive the source code or campaign tags from the link that brought you here, such as src=li-2026-09-30 on our own links or utm_source=linkedin on others. If you arrived with them, they are kept in the addresses of this site's links as you move between pages, so you will see them in your browser's address bar. If you send the form from the page you arrived on, we also receive that page's address and the site that sent you (if your browser shares it). Nothing is stored on your device for this.

When you book a call, the booking page is run by HubSpot. You give your name, email address and a meeting time directly to HubSpot, along with the same source as campaign tags if your visit had one.

If you sign up for new writing by email, we collect your email address, which page you signed up from (the home page, the writing page or a particular article) and the source information described above. HubSpot holds your address and sends the emails.

We also collect a small amount of technical data as a routine part of running the site. Our hosting provider, Cloudflare, logs IP addresses and request information for security and abuse prevention. Cloudflare Turnstile (the spam-protection check on the contact and signup forms) processes your IP address briefly to determine whether you're a human visitor. We use Cloudflare Web Analytics here and on briefings.inverisla.com. It counts page views without cookies and without identifying you, and we count clicks on our own short links (the ones starting inverisla.com/go/) by link, date and source code or campaign tag only. Signups for new writing are counted the same way, by the page they came from only. We do not run advertising trackers or follow you across other sites.

Why we collect it

The form data exists so we can read your enquiry and respond to it. The information on where your visit started tells us which of our writing and links bring enquiries, so we can do more of what works. Once you and Colin are in conversation by email, that conversation continues outside the form's lifecycle.

The legal basis for processing this data is legitimate interest: you've contacted us because you want to be in touch, and we're processing your information to provide that response. We don't use contact form enquiries or bookings for marketing, we don't add you to a mailing list unless you sign up for new writing yourself, and we don't share your contact details with anyone else.

For the writing emails the legal basis is consent. Every email has an unsubscribe link, and unsubscribing withdraws your consent and stops the emails.

Who has access

Form submissions are delivered through a small number of technical providers. Each of these is a data processor for Inverisla under UK GDPR:

• Cloudflare: hosts the website, runs the contact form's submission handler, and handles email delivery and routing. Privacy policy: cloudflare.com/privacypolicy
• Google (Gmail): our destination inbox provider. Privacy policy: policies.google.com/privacy
• HubSpot: holds enquiries from the contact form in our customer records, runs the booking page for calls, and holds the addresses of people who sign up for new writing and sends those emails. Privacy policy: legal.hubspot.com/privacy-policy

We don't sell, rent, or share your data with anyone else. We don't use it for anything beyond responding to your enquiry and any subsequent commercial relationship.

How long we keep it

Form submissions and the email conversations that follow are retained for up to 24 months from your last contact with us. This is standard for B2B sales and advisory pipelines and gives both parties time to follow up if circumstances change.

If you become a client, the engagement record is retained for longer, usually for six years from the end of the engagement, in line with standard UK practice for business records and tax purposes.

If you sign up for new writing, your address is kept until you unsubscribe. After that we keep only a record that you unsubscribed, so you are not emailed again.

You can ask us to delete your data at any time before these retention periods expire (see "Your rights" below).

Cookies

This site uses a small number of essential cookies set by Cloudflare for security and performance reasons. Turnstile, the spam-protection widget on the contact and signup forms, sets a short-lived cookie as part of its verification process. None of these are advertising or analytics cookies, and we don't track you across other sites.

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you (right of access)
• Ask us to correct anything that's inaccurate (right of rectification)
• Ask us to delete your data (right of erasure)
• Ask us to restrict or stop processing it (right to restriction and objection)
• Ask us to provide your data in a portable format (right to data portability)

To exercise any of these rights, email hello@inverisla.com. We aim to respond within five working days and to action any request within 30 days, as required by UK GDPR.

If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. They're at ico.org.uk.

Changes to this notice

If we make material changes to how we handle data, we'll update this page and change the "last updated" date at the top. The current version is what applies; we don't operate by silent rolling updates.