Privacy Policy

This Privacy Policy explains how ∞ALTA collects, uses, stores, and protects information submitted through our website, assessments, forms, workshops, and related advisory services.

1. Who we are

∞ALTA provides independent AI advisory, assessment, vendor-selection, and delivery-oversight services. Our role is to help leadership teams make structured, defensible AI decisions before committing capital, time, or organisational credibility.

2. Information we collect

We may collect information you provide directly to us, including:

• Name, role, organisation, email address, and contact details.
• Assessment responses submitted through ∞ALTA forms or diagnostic tools.
• Business, operational, technical, governance, or readiness information shared with us.
• Messages, enquiries, meeting notes, workshop outputs, and related communications.
• Basic website usage information, such as pages visited or form submission metadata, where applicable.

3. How we use information

We use submitted information for legitimate advisory and business purposes, including to:

• Review and assess AI readiness, opportunity, risk, and organisational fit.
• Prepare internal reports, recommendations, and follow-up materials.
• Contact you about your enquiry, assessment, workshop, or requested service.
• Support vendor evaluation, governance planning, and delivery oversight where requested.
• Improve our assessment tools, website, and advisory process.
• Meet legal, security, operational, or compliance obligations.

4. Assessment data

When you complete a ∞ALTA assessment, your responses may be saved to internal systems such as secure spreadsheets, internal reports, Google Drive folders, or other business tools used by the ∞ALTA team.

Assessment results are intended for internal review and follow-up unless otherwise agreed. We do not use assessment submissions to automatically make binding decisions about your organisation.

Assessment data may be processed and stored using trusted third-party providers including Google Workspace and Google Cloud services.

5. Confidentiality

We treat client and assessment information as confidential business information. Access is limited to ∞ALTA team members, advisors, or technical resources who need the information to review, support, or deliver the relevant service.

6. Sharing information

We do not sell your personal information. We may share information only where necessary, including with:

• Internal ∞ALTA team members and authorised collaborators.
• Service providers used for hosting, email, forms, analytics, cloud storage, or document generation.
• Professional advisors, where needed for legal, accounting, compliance, or security purposes.
• Public authorities or regulators where required by law.

If vendor selection or technical review is part of an engagement, information may be shared with relevant third parties only as needed and, where appropriate, under confidentiality expectations or agreement.

7. Legal basis for processing

Depending on the context, ∞ALTA may process personal information based on one or more lawful bases, including:

• Consent, where you submit an assessment, enquiry, or form and agree to our processing notice.
• Legitimate interests, where we process information to respond to enquiries, improve our services, secure our systems, or manage client relationships.
• Contractual necessity, where processing is needed to provide requested advisory, assessment, vendor-selection, or oversight services.
• Legal obligations, where we are required to keep or disclose information by law.

8. Data storage and security

We use reasonable technical and organisational measures to protect information from unauthorised access, loss, misuse, or disclosure. No online system is completely risk-free, but we aim to limit access and use appropriate safeguards for the nature of the information submitted.

9. International processing

∞ALTA may work across jurisdictions and may use cloud-based services that process or store information in different countries. Where required, we aim to use appropriate safeguards for international transfers.

10. Retention

We retain assessment submissions, reports, and related communications only for as long as reasonably necessary for advisory follow-up, client engagement, internal record keeping, legal obligations, security, dispute resolution, or service improvement.

Unless a longer period is required for an active client relationship, legal obligation, or legitimate business reason, assessment data will generally be reviewed for deletion or anonymisation within 24 months.

11. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information. You may also request a copy of information you have provided or withdraw consent where processing is based on consent.

12. Cookies, analytics, and tracking technologies

Our website may use cookies, analytics, tag-management tools, or similar technologies to understand website performance, improve user experience, measure campaign effectiveness, and support business operations.

This may include tools such as Google Tag Manager, Google Analytics, or similar analytics providers.

Where required by applicable law, non-essential analytics or marketing cookies will only be used with appropriate consent. You can also control cookies through your browser settings.

13. Public-sector and sensitive information

Please do not submit classified, highly sensitive, legally privileged, regulated, or confidential third-party information through public website forms unless we have agreed an appropriate secure process with your organisation.

14. Google Workspace and third-party processors

∞ALTA may use trusted third-party service providers to process, store, or manage information, including Google Workspace, Google Drive, Google Sheets, email systems, website hosting providers, analytics tools, and document-generation tools.

Access to internal documents, folders, and spreadsheets is restricted according to company policy and is not made public or openly shared.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date shown above.

16. Your Rights

You may request access, correction, or deletion of your submitted information at any time by contacting:

welcome@novatioai.com