Privacy policy
Last updated:
DRAFT FOR LEGAL REVIEW. This policy is a template prepared for review by qualified counsel in each jurisdiction where you operate. Replace every [BRACKETED] item and confirm each processor listed below before publishing.
1. Who we are
This website is operated by [LEGAL ENTITY NAME] ("Tech Insane", "we", "us"), registration number [COMPANY REG. NO.], registered at [REGISTERED OFFICE ADDRESS]. We are the controller of the personal data described in this policy. Contact: hello@techinsane.com. [DATA PROTECTION CONTACT / EU OR UK REPRESENTATIVE, IF REQUIRED]
2. Personal data we collect
- Project brief form: name, work email, company, role, country, website, project details, budget range, and how you heard about us.
- Call booking: name, email, time zone, and any notes you add, processed by our scheduling provider Cal.com.
- Email and WhatsApp: the content and metadata of messages you send us.
- Site assistant: the questions you type and the answers generated (see section 7).
- Analytics (only with consent): pages viewed, clicks on key buttons, approximate location (country/city derived from IP), device and browser data, via Google Analytics 4 and Microsoft Clarity.
- Technical logs: IP address and request data processed by our hosting and security provider (Cloudflare) to deliver and protect the site.
3. Why we use it, and legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Responding to enquiries and briefs; arranging calls | Steps prior to a contract, and legitimate interests |
| Site assistant answers | Legitimate interests (answering your questions) |
| Analytics and marketing measurement | Consent, which you can withdraw at any time |
| Security, fraud and abuse prevention | Legitimate interests |
| Legal and tax obligations | Legal obligation |
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process personal data with your consent or where another lawful ground applies, such as taking steps at your request before entering into a contract. [COUNSEL TO CONFIRM PDPL GROUNDS AND ANY FREE-ZONE REGIME, e.g. DIFC or ADGM, THAT APPLIES]
4. Who we share it with
We use service providers (processors) that act on our instructions:
- Cloudflare (hosting, content delivery, security)
- Cal.com (call scheduling)
- Anthropic (AI model powering the site assistant)
- Google (Google Analytics 4, Tag Manager), with consent only
- Microsoft (Clarity), with consent only
- [CRM / EMAIL / FORM DELIVERY PROVIDER, e.g. HubSpot, Google Workspace]
- Meta (WhatsApp), when you choose to message us there
We do not sell personal information, and we do not share it for cross-context behavioral advertising unless you have opted in to marketing cookies.
5. International transfers
Our team and providers may process data outside your country, including in [TEAM COUNTRY], the United States, and the European Union. Where required, we rely on safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms. [COUNSEL TO CONFIRM]
6. How long we keep it
Enquiries and briefs that do not lead to an engagement: [24 months]. Client records: for the duration of the engagement plus [X years] for legal and tax purposes. Assistant conversations: [30 days] unless linked to an enquiry. Analytics data: [14 months] in Google Analytics. [TODO(verify)]
7. The site assistant
The assistant on this site is powered by an AI model provided by Anthropic. The text you type is sent to Anthropic to generate an answer and is subject to Anthropic's commercial terms, under which it is not used to train models. [VERIFY AGAINST YOUR API TERMS AND RETENTION SETTINGS] Answers are generated automatically and may contain mistakes; they are not a contractual offer. Please do not share confidential or sensitive personal information in the assistant.
8. Cookies and similar technologies
We use essential storage to operate the site and remember your consent choice. Analytics and marketing tags load only after you opt in through the cookie banner, and you can change your choice at any time via "Cookie settings" in the footer. We honor the Global Privacy Control (GPC) signal as an opt-out of marketing cookies and of any "sale" or "sharing" of personal information.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| ti-consent (local storage) | Tech Insane | Stores your consent choice | Essential | 12 months |
| _ga, _ga_* | Distinguishes visitors for statistics | Analytics | Up to 13 months | |
| _clck, _clsk, CLID | Microsoft Clarity | Session insights | Analytics | Up to 13 months |
| [MARKETING TAGS, if enabled] | [e.g. LinkedIn] | Campaign measurement | Marketing | [ ] |
| Cal.com embed | Cal.com | Displays the booking calendar | Functional (on the booking page) | Session |
9. Your rights
EU, EEA and UK: you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time and complain to your local data protection authority.
California (CCPA/CPRA) and other US states: you have the right to know, access, correct and delete personal information, to opt out of its sale or sharing and of targeted advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Use "Your privacy choices" in the footer or email us. Authorized agents may submit requests on your behalf. We collect the categories described in section 2 for the purposes in section 3, and we do not sell personal information.
UAE: under the PDPL you may request information about processing, access, correction, erasure, restriction, and object to processing, subject to the law's conditions.
To exercise any right, email hello@techinsane.com. We will verify your request and respond within the time required by applicable law.
10. Security
We use encryption in transit, access controls, multi-factor authentication, and least-privilege access to protect personal data. No method of transmission or storage is completely secure.
11. Children
This site is intended for business users and is not directed to children under 16.
12. Changes
We will update this policy when our practices change and revise the date above.