Privacy Policy

This Privacy Policy describes how INNOVA MARKETING LTD (“we”, “us”) handles personal data in connection with this marketing website, including inquiry and proposal-request forms.

This document describes current technical behaviour. It is not a substitute for professional legal advice. Professional privacy and data-retention review is required before treating this policy as final for any specific jurisdiction.

This website is hosted on infrastructure operated by our hosting or deployment provider. Hosting providers may process technical data such as request metadata, IP addresses, and server logs as part of delivering and securing the service.

The specific hosting provider depends on the deployment environment configured for production.

Servers and application platforms generate technical and security logs for availability, abuse prevention, debugging, and operational monitoring. Those logs may include IP addresses, user-agent strings, timestamps, requested URLs, and error diagnostics.

Security logs are distinct from inquiry-form business records, but both may contain personal data depending on what is submitted or transmitted.

When you submit the contact form or the proposal-request form, we collect the fields you provide (for example name, email, company, budget range, project details, and related commercial context) together with your privacy consent confirmation.

Forms include a honeypot field used only to detect automated abuse. Honeypot contents are not used as business contact data.

Submissions are validated on the server and transmitted to our business email and CRM systems so our team can receive, review, and respond to your inquiry.

IMPORTANT: By project-owner decision, submitted inquiry and proposal personal data may be recorded in server-side technical and operational logs in production.

PERSONAL DATA PRODUCTION LOGGING RETAINED BY PROJECT-OWNER DECISION.

We do not claim that form submissions are never logged. We do not claim that production logs contain no personal data.

Logged categories for contact inquiries typically include name, email, company, optional website, budget selection, optional services of interest, message length or content as implemented by the server action, privacy consent status, form mode, and a received timestamp.

Logged categories for proposal requests typically include company, company website, name, email, optional phone, industry, services, channels, budget, markets, objective length, tracking notes, launch period, context length, privacy consent status, form mode, and a received timestamp.

We do not intentionally log passwords, payment-card data, bank details, government identity documents, authentication tokens, cookies, CSRF tokens, API keys, or complete raw HTTP request objects through these forms.

We process inquiry and proposal data to receive and evaluate commercial enquiries, respond when operationally possible, improve form reliability, prevent spam, and maintain operational records of submissions.

Production logging may also support technical operations, abuse review, and continuity alongside email and CRM delivery.

Retention periods for application logs depend on hosting-provider defaults and internal operational policy. Exact retention windows require professional legal and operational review.

Until that review is complete, treat log retention as governed by provider defaults plus any internal access-control procedures documented for the production environment.

Access to production logs that may contain personal data should be limited to authorized operators who need them for support, security, or engineering duties.

Hosting-provider staff may also access infrastructure logs under their own terms and access controls.

Personal data may be processed by hosting, deployment, logging, DNS, and related infrastructure providers that support this website.

Email delivery and CRM providers that receive inquiry data are part of our service-provider stack and are configured under appropriate contracts.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or objection regarding personal data we hold about you.

We do not claim automatic GDPR (or other regime) compliance solely because this policy exists. Jurisdictional applicability and response procedures require professional legal review.

We do not currently appoint or publicly name a Data Protection Officer (DPO).

To request deletion or correction of inquiry data you believe we hold, contact us using the details on the Company details page or via the contact form.

Deletion from application logs may be limited by technical retention windows, backups, and provider capabilities. We will explain practical limits honestly when responding.

Hosting and logging infrastructure may process data in regions outside your country of residence, depending on provider configuration. Cross-border transfer mechanisms require legal review for the production deployment.

See our Cookie Policy for details of necessary storage and how analytics or marketing technologies are applied based on your cookie preferences.

Inquiry and proposal submissions are delivered to our business email and CRM systems so our team can receive, review, and respond to your request.

Form success messaging reflects this delivery behaviour. Operational logs may still be generated for security, troubleshooting, and record-keeping.

For privacy questions, use the contact details published on the Company details page.

LEGAL REVIEW REQUIRED — production logging of inquiry personal data.

Production inquiry logging requires professional privacy and data-retention review.