Privacy policy
Last updated
This page sets out how personal data is processed on soventia.com. Soventia Ltd is a company registered in the United Kingdom, so the UK General Data Protection Regulation and the Data Protection Act 2018 apply. Where we offer services to people in the European Union, the General Data Protection Regulation (EU) 2016/679 applies as well. The article numbers below are the same in both.
1. Controller
| Controller | Soventia Ltd |
| Company number | 17487783, registered in England and Wales |
| Registered office | Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom |
| Contact person | Tuomo Antikainen |
| [email protected] |
For all privacy-related enquiries, email [email protected].
2. Processing
2.1 Contact form
| Data | Name, email address, company if given, the topic you choose, and your message. |
| Purpose | Responding to your enquiry. |
| Basis | Article 6(1)(b) for enquiries about possible work; Article 6(1)(f) otherwise. |
| Provider | Resend delivers each message to our mailbox, which is hosted by Infomaniak in Switzerland. Nothing is stored on this website. |
2.2 Booking a call
| Data | Name, email address, time zone, the selected slot, and anything you enter in the booking form. A calendar entry and a confirmation email are created. |
| Purpose | Scheduling the call. |
| Basis | Article 6(1)(b). |
| Provider | Cal.com, which processes the booking under its own privacy policy. The booking calendar loads only when you choose to open it on the contact page. See section 4. |
2.3 Email
| Data | Email address, name and the content of your message. |
| Purpose | Responding. |
| Basis | Article 6(1)(f), or Article 6(1)(b) where the email concerns possible work. |
| Provider | Infomaniak, which hosts our mailbox in Switzerland. See section 5. |
2.4 Payments
| Data | Name, email address, billing address, amount and description. Card details are submitted directly to Stripe. |
| Purpose | Processing payment, issuing receipts and keeping the records tax law requires. |
| Basis | Article 6(1)(b) and Article 6(1)(c). |
2.5 Server logs
| Data | IP address, timestamp, requested path, response code and user agent. |
| Purpose | Operating the site, diagnosing faults and preventing abuse. |
| Basis | Article 6(1)(f). |
| Provider | Our web hosting provider, listed in section 5. |
2.6 Client and contract records
Where an enquiry results in a project: contact details, contract documentation and invoicing data, under Article 6(1)(b) and Article 6(1)(c).
2.7 Analytics
This site does not use analytics, advertising pixels or tracking tags. If that changes, this section and the cookies page will say so first.
3. Special category data and children
No special category data under Article 9 and no criminal offence data is collected. Please do not submit any through the contact form.
The site is not directed at children.
4. Cookies and device storage
This site sets no cookies of its own and stores nothing on your device.
The booking calendar on the contact page is provided by Cal.com. It loads only after you click to open it, and it then stores data on Cal.com's own domain. The details are on the cookies page.
5. Recipients
| Service | Function | Role | Location |
|---|---|---|---|
| Resend (Plus Five Five, Inc.) | Delivery of contact form messages, sent from its EU region (Ireland) | Processor | United States |
| Cal.com, Inc. | Bookings | Processor | United States |
| Stripe Payments Europe, Limited | Payments and invoicing | Processor, and controller for its own fraud prevention and legal obligations | Ireland |
| Web hosting provider | Hosting and server logs | Processor | European Union |
| Infomaniak Network SA | Email hosting for [email protected] | Processor | Switzerland |
Data may be disclosed to a public authority where the law requires it.
Links to other websites load nothing from them on this site and carry no tracking.
6. International transfers
Data processed by providers in the United States is transferred under the UK International Data Transfer Addendum or the EU standard contractual clauses, or, where the provider is certified, under the UK Extension to the EU-US Data Privacy Framework or the Data Privacy Framework itself.
Our mailbox is hosted in Switzerland, which both the UK and the EU recognise as providing an adequate level of protection, so no further safeguards are needed for it.
For people in the EU, transfers to Soventia Ltd in the United Kingdom rely on the European Commission's adequacy decision for the UK, renewed in December 2025.
A copy of the relevant safeguards is available on request from [email protected].
7. Retention
| Data | Period |
|---|---|
| Contact form messages and email | 24 months from the last contact, unless a project results. |
| Bookings and calendar entries | 24 months from the call. |
| Server logs | As retained by the hosting provider under the applicable plan. |
| Client and contract records | For the duration of the project and any subsequent limitation period. |
| Invoices and accounting records | As required by applicable accounting and tax law. |
8. Security
The site is served over HTTPS. Access to the services listed in section 5 is protected by two-factor authentication. API keys are held in server-side environment variables and are never sent to the browser.
9. Your rights
| Right | Article |
|---|---|
| Access, and a copy of your data | 15 |
| Rectification | 16 |
| Erasure | 17 |
| Restriction of processing | 18 |
| Data portability | 20 |
| Objection to processing based on legitimate interests | 21 |
| Withdrawal of consent, without affecting earlier processing | 7(3) |
Erasure does not extend to data we must keep by law or need for the establishment or defence of legal claims.
Making a request. Email [email protected]. We may ask you to verify your identity. We respond within one month of receipt, which can be extended by two further months for complex or numerous requests, with notice within the first month. Requests are free of charge.
10. Complaints
You can complain to a supervisory authority. In the United Kingdom this is the Information Commissioner's Office, ico.org.uk. In the European Union you may complain to the supervisory authority in the member state where you live, where you work, or where the alleged infringement took place.
We would appreciate the chance to deal with your concern first, so please contact us at [email protected].
11. Providing data
Providing data is not a statutory or contractual requirement. The contact form needs a name and an email address, and so does booking a call.
12. Changes
This page is updated when the processing or the providers change. The current version is at https://soventia.com/privacy, dated at the top.