Your privacy, handled with care.

01Who we are

Gnanum Enterprises (“Gnanum”, “we”, “us”, “our”) provides technology services, consulting and the InfraSight360 product. We are the controller of the personal information described in this policy, which means we decide how and why it is used.

Registered address: [Registered company name and address]
Company registration number: [Number]

02Information we collect

Information you give us

• Contact and enquiry details — name, work email, phone number, company, role and the details of your enquiry.
• Briefing and meeting requests — scheduling details and the topics you want to discuss.
• Newsletter sign-ups — your email address and subscription preferences.
• Job applications — CV, work history and other information you choose to share. [Editable — remove if not applicable.]

Information collected automatically

• Device and usage data — IP address, browser type, device type, pages visited, referring pages and time spent on the site.
• Cookies and similar technologies — see Cookies below.

Information from other sources

We may receive business contact details from event organizers, professional networks or publicly available sources, where the law allows.

03How we use your information

• To respond to enquiries and arrange briefings or meetings.
• To plan, deliver and support the services and products you engage us for.
• To send newsletters and insights you have asked for — you can unsubscribe at any time.
• To understand how our website is used and improve its content, performance and accessibility.
• To keep our website, systems and information secure, and to prevent fraud or misuse.
• To meet our legal, regulatory and contractual obligations.

04Legal bases for processing

Where data protection laws such as the EU and UK General Data Protection Regulation (GDPR) apply, we rely on these legal bases:

• Consent — for example, newsletters and non-essential cookies. You can withdraw consent at any time.
• Contract — to take steps at your request before entering into a contract, or to perform one.
• Legitimate interests — such as responding to business enquiries, improving our services and keeping our systems secure, balanced against your rights.
• Legal obligation — where we must process information to comply with the law.

05Cookies and similar technologies

Cookies are small files stored on your device. We use them in the following categories:

You can change your choices at any time through Cookie preferences in the website footer, or through your browser settings. [Editable — list the specific cookies and providers used.]

06How we share information

We do not sell personal information. We share it only where needed:

• Service providers who host, secure, analyse or support our website and communications, under contracts that require them to protect it.
• Professional advisers such as lawyers, auditors and insurers.
• Authorities where required by law or to protect rights, property or safety.
• Business transfers — as part of a merger, acquisition or reorganization, subject to equivalent protections.

07International transfers

Because we work with clients internationally, your information may be processed in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards — such as Standard Contractual Clauses or adequacy decisions — so that it stays protected to the standard required by law.

08How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law. Enquiry records are typically kept for [period]; newsletter details are kept until you unsubscribe. When information is no longer needed, we delete or anonymize it securely.

09How we protect information

We use technical and organizational measures appropriate to the risk, including access controls, encryption in transit, secure hosting and staff confidentiality obligations. No system can be guaranteed completely secure, but we work continuously to protect your information and to respond quickly if an issue occurs.

10Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your information, or restrict how we use it.
• Object to processing based on legitimate interests, including direct marketing.
• Receive your information in a portable format.
• Withdraw consent at any time, without affecting earlier processing.

Residents of some regions, such as California, may have additional rights, including the right to know what we collect and to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any right, contact us at [privacy contact email]. We will respond within the time required by law. You also have the right to complain to your local data protection authority.

11Client data and InfraSight360

When we deliver services or provide InfraSight360 to a client, we may process information on that client’s behalf. In those cases the client is the controller and we act as a processor, following the client’s instructions under a separate agreement, such as a data processing agreement. This policy does not cover that processing.

12Children’s privacy

Our website and services are intended for businesses and professionals. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

13Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page and, where the changes are significant, let you know through the website or by email.

14Contact us

For questions about this policy or how we handle personal information, contact our privacy team:

Email: [privacy contact email]
Post: [Registered company name and address]