Legal
Privacy Policy
Last updated 26 May 2026
This policy explains what personal data Innerflect collects, why we collect it, and the choices you have. It covers our website, our sales and onboarding process, and the operating systems we build and run on behalf of clients. We design for data minimisation: we collect only what an engagement genuinely needs, and we keep human accountability over every automated decision.
Who we are
Innerflect (“we”, “us”) is the data controller for personal data processed through this website and our commercial relationship with you. For data we process inside a client's operating system, the client is the controller and we act as their processor under a data processing agreement. Contact us at hello@innerflect.tech.
Information we collect
- Contact details you submit (name, work email, company, role).
- What you tell us about your operations during a diagnosis or call.
- Usage and device data from this website (via privacy-respecting analytics).
- Account and authentication data if you use the client portal.
How we use it
To respond to enquiries, scope and deliver engagements, operate the systems you ask us to run, secure and improve our services, and meet legal obligations. We do not sell personal data, and we do not use client operational data to train third-party models.
Legal basis
We rely on your consent (enquiries and marketing), the performance of a contract (delivering engagements), and our legitimate interests (securing and improving the service), as applicable under the GDPR and equivalent laws.
Sharing and processors
We use vetted infrastructure and tooling providers (hosting, database, email, analytics, and the AI providers behind the systems we build) under contract. Each is bound to process data only on our instructions. A current list is available on request.
Retention
We keep personal data only as long as needed for the purpose it was collected, or as required by law, and then delete or anonymise it.
Your rights
Subject to local law, you can request access, correction, deletion, restriction, or portability of your data, and object to certain processing. Email hello@innerflect.tech and we will respond within the statutory period.
Cookies
We use essential cookies to run the site and the portal, and limited analytics cookies to understand usage. You can control non-essential cookies through your browser settings.
A note on this template
This page is a working template aligned to GDPR principles. Before launch, have it reviewed by counsel and tailored to your final processor list, jurisdiction, and data-flow specifics.
Start here