Privacy Policy

Who is responsible

InsightAnvil is the controller for the personal data it uses to run this website, handle inquiries and conduct its own research. Our address is Korinthou 22, 71409 Heraklion, Crete, Greece. For privacy questions or requests, email hello@insightanvil.com.

Website visits

Our web server may record technical information such as your IP address, browser information, the page requested and the time of the request. We use this information to deliver the site, diagnose errors and protect it against abuse. Our legal basis is our legitimate interest in operating a reliable and secure website. The public website does not set cookies or use analytics or advertising trackers.

Inquiries and research

If you contact us, we receive your email address, any name or business details you provide, and the contents of your message. We use this information to respond and follow up. When you ask about engaging us, we may process the information needed to take steps at your request before entering into an agreement. For general inquiries, our legal basis is our legitimate interest in responding and managing correspondence.

For exploratory business research, we may hold professional contact details, including your name, business email address, organisation, role and industry. We may obtain these directly from you, from a public business website or professional listing, or from an existing business relationship. We use relevant professional details to identify suitable participants and, where electronic communications rules permit it, invite them to take part. Our legitimate interest is to understand how businesses work and identify questions worth investigating. Where consent is required, we ask for it before the relevant processing or communication.

If you take part, we use the information you choose to share to understand the topic, compare experiences and identify follow-up questions. Exploratory research may inform future commercial ideas. Participation is voluntary and you can decline any question or follow-up. Please leave out confidential information and details that identify other people. We seek permission before publishing an identifiable quotation. A client study may have its own notice explaining who is responsible for the data and who will receive it.

Contact preferences and unsubscribe

We record campaign membership, send attempts and their status. If you use an unsubscribe link or ask us to stop, we keep the email address and the date of your request on a suppression list so we can respect that choice. The personal link identifies the address to remove and requires confirmation. Our legal bases are compliance with applicable obligations and our legitimate interest in preventing unwanted repeat contact.

You can object to direct marketing at any time, free of charge. Use the unsubscribe link in the email or write to hello@insightanvil.com. We will stop using your details for direct marketing. You can also use that address to decline future research invitations.

Who receives the data

We use Hetzner to host the site and its campaign records, Zoho Mail to send and receive email, and GitHub Actions to operate the site and start email workflows. GitHub may process the inputs and logs associated with a workflow, which can include a recipient address in a test run. We may disclose information where required by law. If a project involves sharing identifiable responses with a client, the notice for that project explains the arrangement before you participate.

Some providers may process or access data outside the European Economic Area. Where GDPR transfer rules apply, we rely on an applicable adequacy decision or safeguards such as the European Commission’s Standard Contractual Clauses. Contact us for details of the safeguards that apply or to request a copy.

How long we keep information

We retain website logs while they are needed for security and troubleshooting. We keep inquiries while handling the request and for as long as reasonably necessary for follow-up, record-keeping or resolving a dispute. We retain identifiable research replies and campaign records while needed to carry out the study, interpret its results and manage related contact. We keep the minimum information needed to honour an opt-out for as long as we may otherwise contact that address again. Legal obligations or an active dispute may require us to keep relevant records longer.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests and withdraw consent where we rely on it. Withdrawal does not affect processing that was lawful before you withdrew. We do not use this website or its research outreach to make solely automated decisions with legal or similarly significant effects.

To exercise a right, email hello@insightanvil.com. You can also complain to the Hellenic Data Protection Authority or another competent supervisory authority.