Privacy Policy
Last updated: July 23, 2026
Data Controller
Thomas Hadden, operating as Industrial Analytics & Automation (IA&A), is the data controller for this site.
Contact: [email protected]
Location: Belfast, Northern Ireland, United Kingdom.
Data Collected
We only collect the data needed to run the site, provide the assessment, and respond to enquiries.
| Data | When | Stored Where |
|---|---|---|
| Email address | LinkedIn sign-in or magic link | Your account |
| Name, profile picture | LinkedIn sign-in | Your profile |
| LinkedIn headline, location | LinkedIn sign-in, best-effort | Your profile |
| Readiness check answers | During assessment | Assessment records |
| Readiness check result | On completion | Assessment records |
| LLM queries | When using the AI assistant | Query logs |
| Contact form submissions | When submitting the form | Enquiry records |
| Page views | Browsing the site | Plausible Analytics (no cookies, no personal data) |
Legal Basis
- Consent for sign-in and contact form submission
- Legitimate interest for analytics through Plausible, which is cookieless and privacy-respecting
Data Hosting
- Database: Supabase, configured in an EU region
- Application hosting: Microsoft Azure App Service, configured in West Europe
- AI assistant and embedding requests: processed by Microsoft Azure AI services; processing location depends on the configured deployment
- Analytics: Plausible Cloud, EU-hosted
- Email delivery: Resend
- Third-party providers may process data in locations described in their privacy terms and contractual arrangements
Data Retention
- User profiles: retained until account deletion
- Readiness check sessions: retained for 12 months, then anonymised
- LLM query logs: raw query and response records are retained for 90 days and then deleted; anonymised aggregate usage metrics may be retained for longer
- Contact submissions: retained for 24 months
- Plausible analytics: aggregated, with no personal data retained
Your Rights
- Right of access: request a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your account and data
- Right to restriction: limit processing
- Right to data portability: receive your data in a portable format
- Right to object: object to processing based on legitimate interest
- Right to lodge a complaint: contact the UK Information Commissioner's Office (ICO)
How to Exercise Your Rights
- Email [email protected]
- Account deletion is available via the site in V2 or by email request
- We aim to action requests within 30 days
Cookies
- This site does not use tracking cookies
- Supabase Auth uses HTTP-only session cookies for authentication only
- See the Cookies page for full details
Third-Party Services
- Supabase (auth + database) https://supabase.com/privacy
- Microsoft Azure (hosting) https://privacy.microsoft.com
- Plausible Analytics (page views) https://plausible.io/data-policy
- Resend (email delivery) https://resend.com/legal/privacy-policy
- LinkedIn (OAuth sign-in) https://www.linkedin.com/legal/privacy-policy
Changes to This Policy
This policy was last updated on July 23, 2026. Any changes will be posted on this page.