Privacy Policy

Who we are

Innovly AI is operated by Taha Anver, an individual based in Portugal, EU. We provide AI governance and GDPR compliance advisory services.

For the purposes of the EU General Data Protection Regulation (GDPR), Taha Anver is the data controller for personal data collected through this website.

What data we collect and why

We collect the minimum data necessary to operate this website and respond to enquiries. Here is exactly what we collect:

• Email address — only if you voluntarily submit it in the AI quiz or contact form. Used solely to respond to your enquiry or send your quiz results. We do not add you to any mailing list without your explicit consent.
• Quiz responses — anonymous scores and poll answers are stored locally in your browser (localStorage) to show aggregate statistics. No personal data is attached to these unless you provide your email.
• Contact form submissions — your name, email, and message if you reach out directly. Used only to respond to your enquiry.

Cookies

This website uses a minimal number of cookies. Here is exactly what is set and why:

• innovly_consent — remembers your cookie preference. Expires after 12 months. Strictly necessary.
• innovly_stats — stores anonymous quiz attempt counts and poll results in your browser. No personal data. Strictly necessary for the quiz to function.
• innovly_streak — remembers how many days in a row you have visited. No personal data. Strictly necessary for quiz functionality.

We do not set any third-party cookies. We do not use Google Analytics, Meta Pixel, or any advertising technology.

Legal basis for processing

Under the GDPR, we rely on the following legal bases:

• Consent (Article 6(1)(a)) — when you voluntarily submit your email address. You can withdraw consent at any time by contacting us.
• Legitimate interests (Article 6(1)(f)) — for anonymous website analytics to understand how visitors use this site. These interests do not override your rights because no personal data is involved.
• Contract (Article 6(1)(b)) — when processing your data to respond to a services enquiry or deliver a service you have requested.

How long we keep your data

• Email addresses from the quiz — retained for up to 12 months, or until you request deletion.
• Enquiry emails — retained for up to 3 years for legitimate business purposes, or until you request deletion.
• Anonymous quiz statistics — stored in your browser indefinitely until you clear your browser data. We hold no copy server-side.

Your rights under the GDPR

As an EU resident you have the following rights regarding your personal data. To exercise any of these rights, contact us at taha.anver@innovly.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

Third parties and data transfers

We use the following third-party services that may process data on our behalf:

• Cloudflare — hosts this website and provides cookieless analytics. Cloudflare is a US company operating under EU Standard Contractual Clauses. Privacy policy: cloudflare.com/privacypolicy
• Calendly — used for booking calls. If you book a call, Calendly processes your name and email. Privacy policy: calendly.com/privacy
• Microsoft — we use Microsoft 365 for email. Your emails to us are processed by Microsoft. Privacy policy: privacy.microsoft.com

We do not sell, rent, or share your personal data with any third party for marketing purposes. Ever.

Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. If changes are significant, we will make reasonable efforts to notify you.

This policy was written by us, not generated from a template. It reflects how we actually operate this website.

Contact us

If you have any questions about this privacy policy or how we handle your data, please get in touch.