Privacy Policy

We collect information you provide directly and information generated by your use of our services:

• Contact data — name, email address, phone number, company name, and job title when you fill out a contact or booking form.
• Communication data — messages, emails, and meeting notes when you correspond with us.
• Usage data — pages visited, time on site, browser type, IP address, and referring URL collected automatically via analytics tools.
• Cookie data — preference and session information stored in browser cookies (see Cookies section below).
• Project data — technical or business information you share during an engagement, governed separately by our client agreement.

We do not collect sensitive personal data (health, financial, biometric) through this website.

We use the information we collect to:

• Respond to enquiries and book strategy sessions
• Deliver and improve our AI consulting services
• Send service updates, newsletters, and relevant content (with your consent)
• Analyse website performance and optimise user experience
• Comply with legal obligations and enforce our agreements
• Prevent fraud and maintain the security of our systems

We rely on the following legal bases: contract performance (to fulfil an engagement), legitimate interests (analytics and marketing improvement), and consent (email communications you opt into).

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers — trusted third parties who help us operate our business (CRM, email, analytics, cloud hosting) under strict data-processing agreements.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• Your consent — in any other circumstance, only with your explicit consent.

We use cookies and similar tracking technologies to enhance your experience:

• Essential cookies — required for the website to function (session management, security, theme preference).
• Analytics cookies — Google Analytics 4 to understand traffic patterns and page performance. IP addresses are anonymised.
• Marketing cookies — only set if you opt into marketing communications.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect core website functionality. We also store your light/dark theme preference in localStorage; this is not transmitted to our servers.

We implement industry-standard technical and organisational measures to protect your data:

• TLS/SSL encryption for all data in transit
• Access controls and role-based permissions for internal systems
• Regular security audits and vulnerability assessments
• Data minimisation — we collect only what is necessary

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you become aware of any security concern, please contact us immediately.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your data where we have no legal basis to retain it
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Restriction — request that we limit processing in certain circumstances
• Withdraw consent — at any time, for processing based on consent (e.g., marketing emails)

To exercise any of these rights, contact us at privacy@thinklar.com. We will respond within 30 days.

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

• Contact form submissions — 3 years from last interaction
• Client engagement data — 7 years (for legal and accounting purposes)
• Analytics data — 26 months (Google Analytics default)
• Marketing preferences — until you unsubscribe or request deletion

Our website may link to third-party websites or use services including:

• Google Analytics 4 — website analytics (Google Privacy Policy)
• Sanity.io — content management system
• Vercel — website hosting and edge infrastructure

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify registered users by email. We encourage you to review this policy regularly.

For privacy-related questions, requests, or complaints, please contact our Data Protection contact: