We believe in plain language. This notice explains what data we collect, why we collect it, and what rights you have — without the usual wall of legal boilerplate.
The data controller for all personal data processed through this website and its associated tools is:
InnovateInDigital is operated as a sole trader registered in Switzerland. As a sole trader with no employees and no office open to the public, Swiss law does not require appointment of a Data Protection Officer. You may direct any privacy-related questions directly to the contact above.
We collect only what is necessary to provide our services and respond to enquiries. The table below sets out each data type, the reason we collect it, and the legal basis under the Swiss nFADP and EU GDPR.
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name, work email, organisation | Submitted voluntarily via our AI assessment tools (Readiness Scorecard, Process Cost Calculator, Business Case Builder, and others). Used to deliver results and follow up if requested. | Legitimate interest / consent |
| Roundtable enquiry details | Contact information submitted when expressing interest in the InnovateInDigital Roundtable series. Used solely to follow up on that interest. | Consent |
| Assessment responses | Process or organisational information entered into our tools. Sent to an AI model to generate a personalised output. Not linked to your identity and not stored beyond the session. | Legitimate interest |
| IP address and browser metadata | Collected automatically by our hosting provider (Vercel) and form processor (Formspree) as part of standard web infrastructure. We do not use this data for tracking or profiling. | Legitimate interest |
We do not use advertising trackers, third-party analytics platforms, or behavioural profiling of any kind. We do not use cookies beyond those strictly necessary for tool functionality (e.g. remembering your language preference).
We use a small number of trusted third-party services to operate this website. Each processes your data only as necessary for the stated purpose.
| Service | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website and tool hosting. Processes server logs and IP data as part of standard hosting infrastructure. | USA (SCCs applied) |
| Formspree Inc. | Form submission processing. Receives and forwards contact form data to us by email. Data is not retained beyond delivery. | USA (SCCs applied) |
| Anthropic PBC | AI model provider. Assessment responses (not personal data) are sent to the Claude API to generate tool outputs. Anthropic does not use submitted data to train models. | USA (SCCs applied) |
| Google Fonts | Typography delivery. Your IP address is transmitted to Google servers when the page loads. No personal data is stored by us as a result. | USA |
We do not sell, rent, or share your personal data with any third party for their own purposes. Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) recognised under both Swiss nFADP and EU GDPR.
We retain contact data (name, email, organisation) submitted through our tools or enquiry forms for up to 24 months from the date of submission, or until you request deletion — whichever comes first. This period allows us to maintain a record of interactions and respond to follow-up enquiries.
Assessment responses entered into our tools are processed in real time to generate your output and are not stored by us beyond that session. They are transmitted to Anthropic's API and subject to Anthropic's own data retention policy, which does not include training use.
Server and access logs held by Vercel are retained in accordance with Vercel's standard data retention policy (typically 30 days).
Under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
To exercise any of these rights, contact us at mark.ross@innovateindigital.com. We will respond within 30 days.
If you are located in the EU/EEA and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local supervisory authority. Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.
All data in transit is encrypted via TLS. Access to our tools is protected by access codes. We do not store payment data of any kind — no transactions are processed through this website.
While we apply appropriate technical and organisational measures to protect your data, no system is entirely immune to risk. We will notify affected individuals and, where required, the relevant supervisory authority without undue delay in the event of a data breach.
We may update this notice as our services evolve or as legal requirements change. The date at the top of this page reflects when it was last revised. For material changes, we will take reasonable steps to inform those who have previously submitted their contact details.
Contact Mark Ross directly — we aim to respond within two business days.