Privacy Policy

Personally identifiable information is information that can identify you directly or through available means. At the moment, the personally identifiable information that we collect about you includes:

• Email. When you sign up to our newsletter or contact us through our form, we store your email address. We want to have a way to connect with you. If you sign up to the newsletter, you will receive a monthly email when we publish our monthly blog article. We might send you important updates about our work once in a while, but we will never send you more than 3 emails within 30 days including the monthly update. We will also notify you when we change this privacy policy. If you contact us through the form, we will only use your email to answer your query.
• Name. When you sign up to our newsletter or contact us through our form, we store your name. We want to address you in a personal way. One of our core values is to be accessible, and we think that approaching people by their name increases accessibility. We will use your name when we send you an email.
• Messages. When you contact us through our form you are asked to write a bit about you and how you think we could work together, we store this message. This message is stored with your email address and name. We use this message to start a conversation with you. We use Google Analytics G4 on our website. Among other things, we want to know how many people visit our website, where they come from, and what pages they visit while on our website. We use this information to optimise our marketing campaigns. We encourage you to read Google’s documentation about Google Analytics G4 if you want to understand what and how they collect your information.

Non-personally identifiable information is data that would not, by itself, allow us or anyone else to single you out or trace back to you. We do not directly collect any non-personally identifiable information. When you navigate our website, Google Analytics G4 collects some non-personally identifiable information about you. We encourage you to read Google’s documentation about Google Analytics G4 if you want to understand what and how they collect your information. There are links to other websites on ours. Those websites do not operate under this privacy policy, including those within Substancy’s portfolio. We encourage you to examine their privacy policies to understand how they collect, use and share your personal information. Once you leave our website, our privacy policy will no longer apply.

At the moment, we are the only data controllers of your email, name, and message. Our third-party cloud service is MongoDB. MongoDB uses AWS’ servers in the US. AWS is the most used cloud service provider and it supports more security standards and compliance certifications than any other cloud provider. When you use our website, Google Analytics G4 stores and processes some information about you. We encourage you to read Google’s documentation about Google Analytics G4 if you want to understand where and how they store and process your information. How long will we keep your information? Your email, name, and message is stored in our third-party cloud service from the day you sign up to our newsletter or you contact us through the form. If you would like to know more how long is the information collected by Google Analytics G4 stored for, we encourage you to read Google’s documentation about Google Analytics G4

At any time, you can email us and we will delete your email, name and/or message(s) from our servers.

Our service is not intended for individuals below the age of 18, and we do not knowingly collect or solicit personal information from anyone under 18. If we become aware that a user is under 18 and has provided us with personally identifiable information, we will take steps to remove such information.

In the event of a data breach where user information might be compromised, we will take the following steps:

1. Immediate Containment: Our team will work promptly to contain the breach and prevent any further unauthorized data access.
2. Investigation: We'll launch a comprehensive internal investigation to determine the extent of the breach, the data compromised, and the root cause of the breach.
3. Notification: Affected users will be informed about the breach via the email address they provided. This notification will detail what information was potentially compromised and provide guidance on protective measures they can take.
4. Report: In compliance with applicable laws, we will report significant data breaches to relevant data protection authorities.
5. Review & Prevention: Following a breach, we will review our policies and practices to prevent any future breaches, updating our systems and security measures as necessary.

We reserve the right to modify this privacy policy. If you sign up to our newsletter, we will let you know when we make relevant changes by sending you an email. However, it is your responsibility to understand the details of this privacy policy at the time you are using our website. Changes to this privacy policy become effective a week after our privacy policy is updated so you have time to decide whether to continue using our website under the new policy terms. The latest version of this privacy policy dictates how we collect, use and share your information. By using our website, you agree to be bound by any updates to our policy and practice. You also agree to receive updates about the privacy policy to the email you provide when signing up to our newsletter.