Privacy Policy

This Privacy Policy explains how Idea2Delivery (“Idea2Delivery”, “we”, “us” or “our”) handles personal information. It applies to the idea2delivery.com website, to inquiries you send us, and to the way we handle personal information while delivering software development services.

For personal information collected through our website and inquiries, we are the controller. For personal information we process on behalf of clients while delivering a project, we act as a processor (or service provider) and follow the client’s instructions. You can reach us at hello@idea2delivery.com.

• Contact details and message content when you use our contact form or email us: your name, email address, optional mobile number and the contents of your message
• Business and project information you share during scoping and delivery, such as requirements, constraints and technical details
• Billing and contract details if you become a client, such as company name, address, tax details and payment records

• Basic technical data that web servers record to run and protect the website, such as IP address, browser type, device type, pages requested and timestamps
• A privacy-friendly proof-of-work challenge (ALTCHA) on our contact form to prevent spam. It does not track you across sites or build a profile

• We do not use advertising cookies, cross-site tracking or behavioural profiling
• We do not knowingly collect sensitive personal information through the website
• If we introduce analytics, we will use privacy-respecting, aggregated measurement and update this policy first

• To read and reply to your inquiry and, if it is a good fit, to propose next steps or a call
• To scope, quote, deliver, support and invoice the services you request
• To communicate with you about your project, including service and security notices
• To keep the website and our systems secure and to prevent spam, fraud and abuse
• To meet legal, accounting and tax obligations and to establish or defend legal claims

We do not use contact information for marketing lists, we do not sell personal information, and we do not share it for advertising.

Where data protection law such as the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent: when you submit the contact form and ask us to respond. You can withdraw consent at any time
• Contract: to take steps at your request before a contract and to perform a contract with you
• Legitimate interests: to run and secure our business, respond to inquiries and prevent abuse, where this is not overridden by your rights
• Legal obligation: to comply with accounting, tax and other legal requirements

• When we build or operate systems for you, we may process personal information held in your systems, such as user records, transactions or CRM contacts. In that case you decide why and how it is used, and we process it only on your documented instructions.
• Access is limited to the people who need it for the project and is granted on a need-to-know basis. We can sign a data processing agreement on request.
• Where project information is shown publicly, such as in case studies, it is anonymised.
• When the engagement ends, we return or delete client data as agreed in the contract, unless the law requires us to keep it.

We share personal information only where necessary and with:

• Service providers that help us run our business, such as email, hosting, project management, accounting and payment providers, who are bound by confidentiality and data protection obligations
• Professional advisers such as lawyers, accountants and insurers
• Authorities, courts or other parties where required by law or to protect rights and safety
• A successor, in the event of a merger, acquisition or sale of assets, subject to this policy

We do not sell personal information and we do not share it with third parties for their own marketing.

We and our service providers may process information in countries other than your own. Where personal information is transferred out of the European Economic Area or the United Kingdom to a country without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses.

• Website inquiries: messages are kept only as long as needed to respond and follow up, and normally no longer than 12 months unless they lead to an engagement.
• Contracts and financial records: kept for the period required by tax and accounting law, which is typically up to seven years.
• Project and client data: kept for the duration of the engagement and then returned or deleted within the period set in the contract, typically 30 to 90 days.
• Server logs: kept for a short period for security and troubleshooting.

We use measures appropriate to the risk, including access control, least-privilege and need-to-know access, encryption in transit, and separation of environments. We choose service providers with care and require them to protect personal information.

No method of transmission or storage is completely secure. If a personal data breach occurs that affects you, we will notify you and the relevant authorities as required by law.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy
• Correct inaccurate or incomplete information
• Request deletion of your information
• Restrict or object to certain processing
• Receive your information in a portable format
• Withdraw consent at any time, without affecting earlier processing
• Not be discriminated against for exercising privacy rights, and, for California residents, to know and to opt out of the sale or sharing of personal information. We do not sell or share personal information

To exercise a right, email hello@idea2delivery.com. We may need to verify your identity, and we will respond within 30 days, or sooner where the law requires. You also have the right to complain to your local data protection authority. If we process your data on behalf of a client, we may direct your request to that client.

We do not use advertising or cross-site tracking cookies. The website may use strictly necessary technologies, for example to keep it working and secure, which do not require consent. If we add non-essential cookies or analytics in future, we will ask for your consent where the law requires it and update this policy.

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

The website may link to third-party sites, for example for sources, tools or platforms. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

We may update this policy to reflect changes in our practices or the law. We will post the updated version on this page and change the “Last updated” date. If changes are significant, we will take reasonable steps to tell you.

For privacy questions or requests, email hello@idea2delivery.com. Please include enough detail for us to understand and respond to your request.