Privacy Policy

Privacy Policy & Cookie Notice

Effective Date: 29 October 2026

1. Who We Are (Data Controller)

Indi Vision ("Indi", "we", "us", "our"), with UK contact address at 56 Arkwright Way, Peterborough, Cambridgeshire, PE4 7EE, United Kingdom and Kyiv office at 23A Yevhen Chykalenko St., Kyiv, 01024, Ukraine, is the Data Controller responsible for personal data collected through https://indi.vision and its official subdomains (including aicloud.indi.vision, fasttrack.indi.vision, withoutbitrix.indi.vision, dge.indi.vision, and youcontrol.indi.vision) in accordance with the UK GDPR and the Data Protection Act 2018.

2. Personal Data We Collect

We collect and process only the data necessary for B2B communication, service delivery, and website security:

  • Contact & Enquiry Data: your name, business email address, phone number, company name, job title, and message details when you submit a contact form, request migration instructions or consultations, register for webinars, or book an online meeting.
  • Technical & Security Data: IP address, browser type, device information, date/time stamps, and security logs (used exclusively to protect our websites against brute-force attempts and cyber threats).
  • Usage & Analytics Data (subject to cookie consent): anonymized or pseudonymized page views, session duration, referral sources, and interaction metrics collected via Google Analytics 4 and Microsoft Clarity.

3. Purposes and Lawful Bases for Processing (UK GDPR Art. 6)

Purpose of Processing Categories of Data Lawful Basis under UK GDPR
Responding to enquiries, providing migration resources, booking consultations, and performing B2B contracts Contact & Enquiry Data Contract / Pre-contractual steps (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f))
Securing our websites, preventing abuse, and maintaining IT infrastructure Technical & Security Data Legitimate Interests (Art. 6(1)(f) - network and information security)
Website analytics, UX optimization, and performance measurement Usage & Analytics Data, Cookies Consent (Art. 6(1)(a) & PECR - via our cookie banner for non-essential cookies)
B2B updates and direct marketing communications Business Contact Data Consent (Art. 6(1)(a)) or B2B Legitimate Interests with an easy opt-out in every message
Accounting, tax, compliance, and defending legal claims Contractual & Transaction Records Legal Obligation (Art. 6(1)(c)) and Legitimate Interests (Art. 6(1)(f))

4. Cookies and Analytics Technologies

We use strictly necessary cookies to ensure our website functions properly (such as language preference cookies pll_language and security/session cookies). Non-essential analytics cookies (Google Analytics 4 and Microsoft Clarity) are activated only with your consent via our cookie settings banner. You may withdraw or change your cookie preferences at any time via the cookie banner control on our website or through your browser settings.

5. Data Sharing and Processors

We never sell your personal data. We share data strictly with trusted infrastructure and software providers acting as Data Processors under binding data protection terms:

  • Microsoft Corporation (Microsoft 365 business email, Microsoft Teams, and Dynamics 365 CRM for managing client enquiries);
  • GoDaddy.com / Secureserver.net (European data center web hosting and transactional form delivery);
  • Google Ireland Ltd / Google LLC (Google Analytics 4);
  • Professional legal, audit, or regulatory authorities where disclosure is required by UK law.

6. International Data Transfers

Our primary web server is hosted in Europe, and our business cloud environment runs on Microsoft 365. Where personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we rely on UK Adequacy Regulations (including the UK Extension to the EU-US Data Privacy Framework for certified providers) or the UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses (SCCs).

7. Data Retention

  • Website enquiries without a subsequent contract: retained for up to 24 months from the last interaction.
  • Client & contract records: retained for the duration of the contract plus 6 years in accordance with UK statutory limitation and tax requirements.
  • Server security logs: rotated and purged automatically within 30 to 90 days.

8. Your Rights under UK GDPR

You have the right to:

  1. Access a copy of your personal data;
  2. Rectify inaccurate or incomplete data;
  3. Erase your personal data ("right to be forgotten") where no legal retention duty applies;
  4. Restrict or Object to processing based on legitimate interests or direct marketing;
  5. Data Portability for data provided under consent or contract;
  6. Withdraw Consent at any time without affecting prior lawful processing.

To exercise any of these rights, email us at sales@indi.vision. You also have the right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office (ICO) - https://ico.org.uk/ (+44 303 123 1113).