Privacy Policy

1.1 Information You Provide Directly

When you contact us, book a consultation, or submit an enquiry through our Site, we may collect:

• Your name
• Email address
• Phone number (if provided)
• Company or project information (if provided)
• Any other information you voluntarily share in messages or forms

1.2 Information Collected Automatically

When you visit our Site, we or our third-party service providers may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and screen resolution
• Cookies and similar tracking technologies

We use the information we collect for the following purposes:

• To respond to your enquiries — when you contact us through our booking or contact forms, we use your information to reply and follow up.
• To provide our services — including onboarding, project management, and ongoing communication for engagements you enter into with us.
• To improve our Site — we analyse usage data to understand how visitors interact with the Site and to enhance user experience.
• To send relevant communications — with your consent, we may send project updates, newsletters, or promotional information. You may opt out at any time.
• To comply with legal obligations — we may process or disclose information where required by law or to protect our legal rights.

We may use cookies and similar technologies (such as local storage and pixels) to enhance your experience on our Site. Cookies are small data files stored on your device.

We use the following categories of cookies:

• Essential cookies — required for the Site to function properly.
• Analytics cookies — help us understand how visitors use the Site so we can improve it (e.g., via Google Analytics).
• Functional cookies — remember your preferences and settings for a better experience.

You can control or disable cookies through your browser settings. Please note that disabling some cookies may affect the functionality of our Site.

We use the following reputable third-party services that may collect or process data on our behalf. Each operates under its own privacy policy:

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers — trusted third-party vendors who help us operate our Site and deliver services (see Section 4 above), bound by data processing agreements.
• Legal requirements — when disclosure is required by law, court order, or governmental authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Protection of rights — to enforce our Terms and Conditions, protect the security of our Site, or prevent harm.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. When personal information is no longer needed, we securely delete or anonymise it. Contact details and consultation records are typically retained for the duration of the business relationship and for a reasonable period thereafter.

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request that we delete your personal data, subject to any legal obligations to retain it.
• Objection — object to or restrict certain processing of your personal data.
• Portability — request a portable copy of your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@spikey.tech.

We take the security of your personal information seriously. We implement industry-standard technical and organisational safeguards — including HTTPS encryption, secure cloud infrastructure (Google Cloud Platform / Firebase), and access controls — to protect your data from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable standards to protect your personal information.

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@spikey.tech and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will indicate the "Last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify you. We encourage you to review this policy periodically. Your continued use of our Site after changes are posted constitutes your acceptance of the updated policy.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights regarding your personal information.

Your California Rights

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties with whom it is shared.
• Right to Delete — request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt-Out of Sale / Sharing — we do not sell your personal information for monetary consideration. However, sharing data with analytics providers (such as Google Analytics) for cross-context behavioural advertising may be considered "sharing" under CPRA. You may opt out by rejecting analytics cookies in our cookie consent banner or by emailing privacy@spikey.tech.
• Right to Limit Use of Sensitive Personal Information — we do not collect sensitive personal information (as defined by CPRA) through this Site.
• Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA rights.

How to Submit a Request

To exercise any of the above rights, please contact us at privacy@spikey.tech with the subject line "California Privacy Request." We will verify your identity and respond within 45 days as required by law.

You may also designate an authorised agent to make a request on your behalf, subject to identity verification.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

We aim to respond to all requests within 30 days.