Privacy Policy

What we collect

When you submit an intake form, we collect the information you provide: your name, email address, company or context, phone number (if given), and the text of your enquiry. We also record technical metadata required to ensure the security, reliability, and auditability of submissions — including timestamps, originating pages, and trace identifiers.

How we use it

We use this information solely to respond to your request and route it to the appropriate system or team within the GlafyCo group. If you separately opt in to marketing updates, we may use your email to send relevant information. We do not sell your information.

Legal basis

We process enquiry data on the basis of legitimate interest (to respond to requests) and, where applicable, consent.

Data retention

We retain submitted data for up to 3 years where necessary for operational and record-keeping purposes. Data is actively managed throughout its lifecycle:

• Active phase: up to 33 months
• Archive phase: restricted access, up to 3 months
• Deletion phase: secure removal at 36 months unless consent is renewed

Before deletion, we may request your explicit consent to retain your data for a further period. If no consent is provided, your data is securely deleted.

Data processing and storage

Data is securely stored and processed using Supabase and other trusted infrastructure providers operating under appropriate data processing agreements. Access to personal data is restricted and operational views are designed to minimise exposure of sensitive information.

Your rights

You have the right to access, correct, or delete your data, as well as the right to restrict or object to processing, and the right to request data portability where applicable.

Your consent

Operational consent (processing your enquiry so we can respond) is required to submit a form. Marketing consent is optional and separate.

Where retention beyond the initial period is required, explicit consent will be requested. If consent is not provided, data will be deleted in line with this policy.

Contact

For privacy-related questions or to request access, correction, or deletion of your data, contact us via any GlafyCo intake form or email privacy@glafy.com.