Privacy Policy

Last updated: February 2026

1. Who We Are

invosis Ltd ("we", "us", "our") is a company registered in England and Wales (Company Number: 6968604). We are committed to protecting your privacy and handling your personal data responsibly.

For any privacy-related queries, please contact us at [email protected].

2. What Data We Collect

We collect personal data when you:

• Use our contact form: name, email address, phone number (optional), and your message. We also collect your IP address for security purposes.
• Book a discovery call: name, email address, phone number, preferred contact time, preferred contact method, and a description of your needs. We also collect your IP address for security purposes.
• Contact us via WhatsApp: your phone number, message content, and any metadata processed by WhatsApp (operated by Meta Platforms Ireland Ltd)

3. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and messages
• Arrange and conduct discovery calls
• Provide the services you have requested
• Protect against spam and abuse (IP address logging)
• Comply with legal obligations

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following bases:

• Legitimate interest: when you submit a form or contact us, we process your data to respond to your enquiry (Article 6(1)(f)). Our legitimate interest is responding to business enquiries initiated by you.
• Contract: to provide services you have engaged us for, or to take steps at your request prior to entering into a contract (Article 6(1)(b))
• Legal obligation: where we are required to retain data by law

5. How We Store and Protect Your Data

Your form submissions are sent to us via email using Mailgun (our email delivery provider). Your IP address is included in the email for security and anti-abuse purposes. We do not store form submissions in a database on our website.

We take appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption on all pages
• Secure email delivery via Mailgun (EU endpoint)
• Bot protection via Cloudflare Turnstile on all forms
• Access to personal data restricted to authorised personnel only

6. Third-Party Services

We use the following third-party services that may process your data:

• Mailgun (Sinch AB): email delivery for form submissions. Data is processed via Mailgun's EU API endpoint under a Data Processing Agreement (DPA) with Standard Contractual Clauses (SCCs) for international transfers. See Mailgun's Privacy Policy
• Cloudflare: website hosting, security, and content delivery. See Cloudflare's Privacy Policy
• Cloudflare Turnstile: bot protection on form submissions, replacing traditional CAPTCHAs. Turnstile may set cookies and use browser storage for verification purposes
• WhatsApp (Meta Platforms Ireland Ltd): we provide a WhatsApp contact link as an alternative way to reach us. If you choose to contact us via WhatsApp, your data will be processed by Meta in accordance with WhatsApp's Privacy Policy. We have no control over data processed by Meta

We do not sell, trade, or rent your personal data to any third party.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form enquiries: retained for up to 12 months after our last communication
• Discovery call requests: retained for up to 12 months after our last communication

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interest

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.