Privacy Policy
Innovite (“we”, “us”) is the data controller for personal information collected through innovite.io. We’re a UK-based business and we comply with the UK GDPR and the Data Protection Act 2018.
What we collect
Through the strategy-call form on the site, we collect:
- Your name
- Company name
- Work email address
- Industry, deal-value range, lead-generation method, and target client volume (the form’s qualifying questions)
- Browser user-agent and IP address (for spam triage and analytics)
Through the AI Qualifier widget, we may also collect: business model, deal value, decision-making authority, and timeline.
If you reply to or initiate any email correspondence with us, we retain that correspondence as long as the conversation is active.
What we do with it
- Respond to enquiries. We use your contact details and form answers to reply to your enquiry, schedule a strategy call, and tailor the conversation to your business.
- Auto-response. When you submit the form, an automated email is sent to your address using the answers you provided. The copy is generated by an AI (Anthropic Claude) and reviewed before delivery.
- Pipeline management. We retain qualified-prospect data in our customer-relationship database (Supabase, EU region) to track our own sales pipeline.
- Service delivery. If you become a client, we use the data to deliver agreed services under our engagement agreement.
If you received an outbound email from us or one of our clients
We also send cold B2B email to decision-makers at UK limited companies, LLPs and PLCs — either directly from Innovite or on behalf of an agency client. If you received such an email, here’s what we want you to know:
- How we found you. Your name, role and work email were sourced from public company records (Companies House) combined with a B2B contact-data provider (Apollo). We did not buy your contact from a consumer marketing list.
- Our lawful basis. UK GDPR Article 6(1)(f) — legitimate interests. We’re emailing your work address in your professional capacity, and we’ve documented an assessment that balances our interest in commercial outreach against your right to privacy.
- Who we don’t email. Sole traders and ordinary partnerships are filtered out at source — they require consent under PECR, which we don’t have, so we don’t contact them.
- How to opt out. Click the “Unsubscribe” link or button in any email we send (the native Gmail / Outlook button works too). Or reply with any variation of “remove me” and we’ll suppress your address within 24 hours. We keep a permanent record of suppressions so we can prove we don’t re-contact you.
- How long we keep your data. If you don’t reply, we delete your record six months after the last contact attempt. If you reply (in any form — even “not interested”), we keep the correspondence for the duration of any active conversation plus six years (the UK contract limitation period).
Legal basis
We process personal data on the basis of:
- Legitimate interests — for responding to enquiries you initiate and for following up where we believe doing so is reasonable.
- Contract — once you become a client, to deliver the services you’ve engaged us for.
- Consent — where required (e.g. marketing communications), we’ll ask first.
Who else handles your data
We use the following third-party providers, each acting as a data processor on our behalf:
- Vercel — website hosting and serverless functions (data may transit US infrastructure)
- Supabase — primary database (EU region)
- Resend — transactional email delivery
- Anthropic — AI auto-response copy generation
- Slack — internal new-lead notifications
- Plausible — cookieless web analytics (EU-hosted)
- Wistia — embedded video player on the showcase section
- Google Fonts — web font delivery
Where any of these providers transfer data outside the UK or EEA, we rely on their published Standard Contractual Clauses or equivalent safeguards.
How long we keep it
- Form submissions and qualifier answers: up to 12 months from submission, then deleted unless you become a client.
- Outbound prospects who never replied: 6 months from last contact attempt, then deleted.
- Outbound prospects who replied: as long as the conversation is active, plus 6 years.
- Suppression list (people who opted out): kept indefinitely — required to prove we honoured your opt-out.
- Client records: for the duration of the engagement plus 7 years for accounting and legal compliance.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct anything that’s inaccurate
- Ask us to delete your data
- Restrict or object to our processing
- Withdraw consent where we’ve relied on it
- Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, email sammy@innoviteai.com. We’ll respond within 30 days.
Cookies
The site itself does not set cookies. Embedded third-party services (Wistia, Google Fonts) may set cookies when you load their content. We use Plausible Analytics, which is cookieless by design.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the most recent change. Material changes will be highlighted on the site.
Contact
Questions about this policy or how we handle your data: sammy@innoviteai.com.