Cookie Policy

1. Information Collection & Processing

We collect personal data only when voluntarily submitted through our contact forms, newsletter signups, or service engagements. This includes name, email, phone, company affiliation, and agile maturity assessment responses. Processing is lawful under GDPR Art.6(1)(b) (contractual necessity) and Art.6(1)(f) (legitimate interest in business communication).

• Automatically collected data: IP address, browser fingerprinting, and page interaction events (Hotjar), stored for 26 months per GDPR Art.5(1)(e).
• Session recordings are anonymized and used solely for UX optimization of our assessment tools.

2. Data Sharing & Third-Party Processors

We engage sub-processors under DPA agreements: HubSpot (CRM), Stripe (payment processing for paid assessments), and Google Workspace (email infrastructure). No data is sold or used for automated decision-making. International transfers rely on Standard Contractual Clauses (SCCs) under GDPR Art.46.

3. Your Rights & Retention

Data subjects may request rectification, erasure, or portability under GDPR Art.15-21. We retain client project data for 7 years post-engagement for legal compliance (Limitation Act). Marketing data is purged after 24 months of inactivity. To exercise rights, contact [email protected] with subject line “DSAR”.