Website privacy statement.
How inadvia.com handles information about people who visit the site.
This covers how inadvia.com handles information about people who visit the site. It describes what the site does today rather than what it might do later. When that changes, this statement changes with it and the date at the foot moves.
It sits alongside the supply partner privacy notice, which covers the data collected through the register form in its own right. This statement covers the website; that notice covers the partner relationship.
1 · Who is responsible
Inadvia Limited, registered in England and Wales, company number 10392596. Registered address: Chancery House, 30 St Johns Road, Woking, Surrey, GU21 7SA, United Kingdom.
For anything in this statement, write to info@inadvia.com.
We completed the ICO fee self-assessment for this processing and the result was that no registration or fee is required. We will revisit that if what we do changes.
2 · What the site collects
Registering your interest
If you complete the register form we receive what you put into it: your name, role and work email, your organisation and where it operates, the scale of your estate, the channels you would consider monetising, how you sell today, and anything you choose to add, together with the two consent choices at the end. It goes to a Microsoft Power Automate flow which writes it into a spreadsheet on Microsoft OneDrive.
Contacting us
The contact page has no form. It opens an email to info@inadvia.com, so we receive what you write and whatever your own email account sends with it.
Platform access
The platform demonstration is behind an access code. When a valid code is entered we record the date, the time and the organisation the code was issued to. We do not record IP addresses in that log. Entering a code sets a session cookie so you are not asked again on every page; it is deleted when you close your browser.
Analytics
If, and only if, you accept analytics on the cookie banner, we use Google Analytics 4 to understand how the site is used: pages viewed, how you arrived, roughly where in the world you are, and what kind of device you are on. It is used to understand the site in aggregate. We do not use it to identify you and we do not combine it with anything you have told us through the register form.
If you press Reject, no analytics is loaded, on that visit or any later one. If you make no choice at all, none is loaded either.
Hosting
Our website is hosted by GoDaddy. When you visit the website, GoDaddy may automatically collect technical information, including your IP address, device identifier and information about the pages you visit. GoDaddy retains personal data for its business needs and to comply with legal requirements. When it no longer requires the data, GoDaddy may delete it or de-identify it so that it no longer identifies an individual. GoDaddy does not publish a specific retention period for website server logs.
3 · Cookies and similar storage
Nothing is stored on your device for analytics until you accept. Before that, the only thing stored is the record of the choice itself.
| What | Set by | Why | How long |
|---|---|---|---|
| Consent record | Inadvia | Remembers whether you accepted or rejected analytics | 12 months, then we ask again |
| Platform session | Inadvia | Keeps you signed in to the demonstration | Deleted when you close the browser |
| _ga | Distinguishes one visitor from another | 2 years | |
| _ga_<id> | Keeps the analytics session going | 2 years |
The first two are strictly necessary and need no consent: one exists only to record your decision, the other only to deliver a feature you asked for. The Google cookies are set only after you accept.
You can change your mind at any time using the Cookie settings link in the footer of every page. That clears the record and lets you choose again. Any analytics already loaded on the page you are looking at cannot be recalled, but nothing further is collected from the next page load onwards.
4 · Why we are allowed to hold it
| What | Lawful basis |
|---|---|
| Analytics | Consent, given on the banner and withdrawable at any time. |
| Register form submissions | Consent, given by the tick box on the form. |
| Emails you send us | Legitimate interests: responding to someone who has contacted us. |
| Platform access records | Legitimate interests: knowing who we have shown the platform to. |
| Strictly necessary storage | No consent needed; it delivers a feature you asked for. |
5 · Who else sees it
- Microsoft, for the Power Automate flow and the OneDrive spreadsheet the register data is written into.
- Google, for analytics, and only where you have accepted it.
- GoDaddy, for hosting the website.
We share personal information with nobody else, and we do not sell, rent or trade it. Separately, the second tick box on the register form asks whether we may name your organisation to our partners and advisers. That is a distinct permission, it is optional, and it never includes your contact details.
6 · Where the information goes
Our principal Microsoft 365 customer data, including data held in Exchange Online, SharePoint, OneDrive and Microsoft Teams, is stored at rest in Microsoft's United Kingdom data-centre geography. Microsoft may undertake limited processing outside the United Kingdom in providing support, security and related services. Where such processing constitutes a restricted international transfer and no adequacy regulations apply, Microsoft uses the contractual safeguards incorporated into its Data Protection Addendum, including the applicable Standard Contractual Clauses and UK International Data Transfer Addendum.
We use Google Analytics to understand how visitors use our website. For visitors in the United Kingdom, Google Analytics does not log or store individual IP addresses. An IP address is used briefly to derive approximate geographical information and is then discarded. Google Analytics retains user-level and event-level data for 14 months, after which it is automatically deleted. This retention setting does not affect aggregated information contained in standard Google Analytics reports, which cannot be used by us to identify individual visitors.
7 · How long we keep it
- Register form submissions: 36 months from the date you register, unless you ask us to remove them sooner, or the relationship becomes an active one, in which case it is governed by our agreement with you.
- Platform access records: 36 months, on the same basis.
- Analytics: user-level and event-level data retained by Google for 14 months, then automatically deleted.
- Emails: for as long as the correspondence is live, and then in the ordinary course of our mailbox.
8 · Your rights
You can ask for a copy of what we hold about you, ask us to correct it, delete it, stop using it, or object to our using it. Where we rely on your consent you can withdraw it at any time, and that does not affect anything done before you withdrew it.
Write to info@inadvia.com. We will respond within one month.
If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we have the chance to put it right.
9 · Changes
When what we do changes, this statement changes before the new thing goes live rather than after.