We collect information in three main categories:

• Contact & Identification: name, email, phone, organization — provided when you reach out or sign a contract.
• Project Details: brief descriptions, requirements, budgets, and assets you share to scope work.
• Usage & Technical: non-identifying analytics (page visits, referrers), and error logs necessary to maintain the website and improve services.

We do not collect payment details on this site — payments are handled through secure, PCI-compliant providers (Stripe, PayPal, or invoicing systems).

Primary uses include:

• Project Delivery: using project details and contact info to plan, build and launch digital products.
• Communication: proposals, scheduling, support, and follow-ups.
• Product Improvement: aggregated analytics and feedback to improve service quality and the website experience.

We never use your data for surprise marketing — promotional messages are opt-in and you can unsubscribe at any time.

Details:

• Essential Cookies: required for form submission, session stability and security.
• Analytics: anonymized metrics (pageviews, load times) to help us prioritise improvements. We prefer privacy-preserving analytics where possible.
• Third-party tools: integrations like Formspree for contact forms or analytics providers may set cookies — their use is governed by their own policies.

You can disable non-essential cookies in your browser. Doing so may limit some site features.

We may share data with:

• Service Providers: hosting, email, invoicing, and collaboration platforms that help run projects (e.g., Formspree for lead delivery, cloud providers for file storage).
• Legal & Safety: law enforcement or courts where required by law, or to protect the safety of our users or systems.

We never sell personal data. When a third-party processor is used we require appropriate safeguards and contracts.

Security measures:

• Encryption: TLS in transit for all communication; encrypted storage on supported providers.
• Access Controls: least-privilege access and multi-factor authentication for accounts that handle sensitive data.
• Retention Policy: we keep inquiry records for project lifecycle & legal obligations; you can request deletion (see controls below).

If you suspect an account breach, contact us immediately so we can act fast to secure your information.

How to exercise your rights:

• Access: request a copy of personal data we hold about you.
• Correction: ask us to correct inaccuracies or update information.
• Deletion: request removal of personal data (subject to legal retention obligations).
• Export: we can provide a machine-readable export of your data where feasible.

To submit a request, contact privacy@innovodesignlab.com. We respond within 30 days and may require identity verification for security.

When we update our policy we will:

• Post the revised policy on this page with the date of change.
• Notify active contacts by email for material changes that affect rights or data usage.

Check this page periodically for the latest version.