Privacy policy

1. Scope and data controller

This policy applies to personal data processed through iveon.ai and its public website forms. The data controller for this website is IVEON LTD, company number 17204352, with registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

IVEON operates internationally, but IVEON LTD — United Kingdom is the public corporate reference for this website. Separate privacy terms, contractual data-processing terms or notices may apply to customer projects, recruitment processes, employees, suppliers or other relationships outside the public website.

For privacy questions, rights requests or complaints, contact contact@iveon.ai or use our contact page.

2. Our international operating context

IVEON's operating model supports work across Europe, Africa, the Middle East, Asia, North America and South America, with IVEON LTD — United Kingdom as the corporate reference, Middle East operations in Dubai, United Arab Emirates, and engineering operations in Morocco.

Depending on the purpose of an enquiry or engagement, authorised IVEON personnel supporting international operations may need access to relevant business information. Access is limited according to role, purpose and applicable security and legal requirements.

3. Personal data we may process

• Contact enquiries: name, company, business email address, enquiry type and the content of your message.
• Project briefs and Get Started submissions: company, name, role, business email address, country, industry, area of interest, challenge, project stage, timeline and any context you choose to provide.
• Technical and security data: IP address, request metadata, timestamps and technical information required to deliver, secure, monitor and troubleshoot the website and its forms.
• Consent data: your Necessary, Analytics and Advertising choices, consent-policy version, decision time, locale and related technical identifiers needed to record or enforce those choices.
• Analytics data, only where the applicable Analytics choice permits it: approved website events such as page views, landing views, CTA clicks and outbound clicks, with restricted contextual parameters.
• Advertising-related data, only where the applicable Advertising choice permits it and an advertising integration is actually configured.
• Correspondence and business records created when we respond to your enquiry or continue a business discussion.

4. Why we use personal data and our lawful bases

• To respond to enquiries, understand requirements and discuss potential services: legitimate interests in operating and developing our business and, where relevant, steps requested before entering into a contract.
• To administer business relationships and maintain appropriate records: performance of a contract, steps before contract, legitimate interests and legal obligations as applicable.
• To operate, secure, defend and troubleshoot the website, forms and infrastructure: legitimate interests in service reliability, fraud and abuse prevention, cybersecurity and protection of our systems and users, together with legal obligations where applicable.
• To record, demonstrate and enforce privacy choices: compliance with applicable privacy and electronic-communications requirements and legitimate interests in maintaining auditable consent controls.
• To perform optional Analytics under IVEON's current website consent model: consent.
• To perform Advertising measurement, audience or related advertising activities where configured: consent.
• To establish, exercise or defend legal claims and comply with lawful requests: legitimate interests and legal obligations as applicable.

5. Information you choose to provide

Please provide only information that is relevant to your enquiry. Public website forms are not intended for passwords, authentication secrets, private keys, payment-card details, medical information or other highly sensitive material.

IVEON does not ask visitors to submit special-category personal data through its general website forms. If an engagement requires sensitive information, the appropriate secure and contractual channel should be agreed separately.

6. Forms, security and anti-abuse controls

Contact and Get Started forms use Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. The server validates the Turnstile response before accepting a submission.

Submitted form content is transmitted to IVEON through the website's server-side form workflow and email delivery functions. Form-field content is not used as Analytics or Advertising event data under IVEON's tracking policy.

Security logs and technical records may be processed where reasonably necessary to detect abuse, investigate incidents, protect infrastructure and maintain service integrity.

7. Analytics, Advertising and consent separation

Necessary, Analytics and Advertising are separate purposes. Necessary technologies support essential website, security and consent functions. Under IVEON's current website policy, non-essential Analytics and Advertising are not activated merely because you visit the site.

Analytics consent does not imply Advertising consent, and Advertising consent does not alter your Analytics choice. Where an external Analytics or Advertising integration is configured, it must remain subject to the consent category that applies to it.

You can reopen Cookie settings at any time from the website footer to review or change your choices.

8. Recipients and service providers

Personal data may be accessed by authorised IVEON personnel who need it for the purposes described in this policy and by service providers acting for or supporting IVEON.

Relevant provider categories may include website hosting and delivery, cybersecurity and anti-abuse services, communications and email delivery, consent management, infrastructure, analytics and advertising services where those integrations are configured and permitted.

Cloudflare is used for website delivery and security functions, including Pages Functions and Turnstile. The IVEON Cookie Backend is used to record consent state and, where permitted, receive approved measurement events.

IVEON does not permit a provider to use website personal data for an unrelated purpose merely because that provider supplies technology to us.

9. International access and transfers

IVEON is an international organisation and some service providers also operate across multiple countries. Personal data may therefore be accessed or processed outside the United Kingdom where this is necessary for the relevant purpose.

Where UK data-protection law requires a safeguard for an international transfer, IVEON uses an available lawful transfer mechanism and appropriate contractual, technical or organisational protections. Depending on the destination and circumstances, this may include adequacy regulations, recognised contractual safeguards or another mechanism permitted by applicable law.

You may contact IVEON if you want more information about the safeguards relevant to a particular transfer.

10. How long we keep personal data

Your browser consent choice is stored for up to 180 days unless you change it earlier or a new consent-policy version requires a new decision.

Enquiries and related correspondence are retained for as long as reasonably necessary to respond, manage the business relationship, maintain appropriate records and meet legal, accounting, security or dispute-resolution needs.

Technical, security, consent and measurement records are retained according to their operational purpose, audit value, security requirements and applicable law. Records are deleted, anonymised or otherwise removed from active use when they are no longer required.

Where a legal hold, dispute, investigation or statutory obligation applies, relevant information may be retained for longer to the extent necessary.

11. Security

IVEON applies technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. Measures are selected according to the nature of the system, the data and the risk.

No internet transmission or information system can be guaranteed to be completely secure. If IVEON identifies a personal-data breach requiring notification under applicable law, it will follow the relevant notification and response obligations.

12. Your data-protection rights

Depending on the processing and the law that applies, you may have rights to access your personal data, correct inaccurate data, request erasure, restrict processing, object to processing, receive certain data in a portable format and withdraw consent.

These rights are not absolute in every circumstance. IVEON may need to verify your identity and may retain information where a legal exception, contractual requirement, security need or legal obligation applies.

To exercise a privacy right, contact contact@iveon.ai. We will respond in accordance with the requirements applicable to the request.

13. Right to object and withdrawal of consent

Where processing is based on legitimate interests, you may have a right to object to that processing based on your particular situation. Where personal data is processed for direct marketing, you may object to that use as provided by applicable law.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

For website Analytics and Advertising choices, use Cookie settings in the footer to change or withdraw consent.

14. Complaints

You can raise a privacy concern directly with IVEON using the contact details above. We encourage you to contact us first so that we can investigate and respond.

You also have the right to complain to the UK data-protection regulator, the Information Commissioner's Office, where UK data-protection law applies. If another supervisory authority is competent for your situation, you may also have the right to contact that authority.

15. AI and automated decision-making on this website

IVEON is an AI engineering company, but data collected through the public website is not used by IVEON to make solely automated decisions about website visitors that produce legal or similarly significant effects.

If a future website feature materially changes this position, IVEON will update the relevant privacy information before relying on that processing where required.

16. Children

This corporate website is directed to business and professional audiences and is not designed as a service for children. IVEON does not intentionally use the public website to collect children's personal data for marketing or profiling.

17. External websites

Links to third-party websites are governed by the third party's own privacy practices. IVEON's Privacy policy does not control how an independent third party processes personal data on its own service.

18. Changes to this policy

IVEON reviews this policy as the website, operating model, service providers and legal requirements evolve. Material changes may also require updates to the consent interface or other just-in-time information. The date shown at the top identifies the current published version.