Privacy policy for the Timzy website

1. Data controller

The controller is INNOVARE GROUP LTD, company number 12878269, with its registered office at 7 Bell Yard, London, England, WC2A 2JR. Contact: hello@timzy.app. You can verify the company details in the Companies House register.

2. Data we process

When you use the contact form, we process the information you provide, including your name, company, email address, optional phone number, country, team size, preferred contact time, industry and message. The website infrastructure may also process technical data necessary for security and reliable delivery, such as IP address, browser information and request logs.

3. Purposes and legal bases

We use contact details to answer your enquiry and take steps at your request before entering into a contract (Article 6(1)(b) GDPR). We protect the form, prevent spam and maintain website security based on our legitimate interest (Article 6(1)(f) GDPR). Where the law requires it, we process data to comply with a legal obligation (Article 6(1)(c) GDPR). We do not use a contact enquiry for unrelated marketing without a separate legal basis.

4. Recipients and transfers

Data may be processed by providers supporting the website, security, analytics, IT and email. This includes Google Ireland Limited for Google Tag Manager operating with denied consent signals by default and, only after consent and tag configuration, for analytics. It also includes cyber_Folks for hosting and email. Google may process data outside the EEA using safeguards described in its privacy documentation.

5. Retention

We keep enquiry data for the time needed to answer and continue business discussions, and afterwards for the period necessary to establish, pursue or defend claims and to meet legal obligations. Data that is no longer needed is deleted or anonymised.

6. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing where applicable. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). Contact us at hello@timzy.app to exercise your rights.

7. Voluntary provision of data

Providing data is voluntary, but the required fields are necessary for us to receive and answer your enquiry. Please do not include sensitive or unnecessary personal information in the message.

8. Cookies and similar technologies

Necessary technologies support security, form operation and remember your privacy choice. Google Tag Manager uses Consent Mode v2 and loads with analytics_storage, ad_storage, ad_user_data and ad_personalization denied by default. Selecting “Accept analytics” grants only analytics_storage; advertising consent remains denied. Analytics can operate only after an analytics tag is separately configured and published in GTM. You can change or withdraw your choice at any time using “Cookie settings” at the bottom of the website.

9. Security and changes

We use organisational and technical safeguards appropriate to the risk, including encrypted connections, server-side form validation and anti-spam protection. We may update this policy when the website, providers or legal requirements change. The latest version is always published on this page.

10. Account and online agreements

Account information updated 17 September 2026. An account requires an email, password and mailbox verification. We store a protected password hash, verification status, and session and abuse-prevention data, never a readable password. These support the requested service and security on the applicable bases in section 3. Cloudflare Turnstile checks traffic and may process technical connection and browser data to prevent bots. Infrastructure and email providers support account operation and link delivery. Necessary cookies maintain a session for up to 8 hours, expiring after 30 minutes of inactivity. Activation links last 24 hours and reset links 30 minutes. We do not run marketing analytics on account and contract pages. Account data is retained for account operation and necessary duties or claims. You may request erasure using the contact above; contract evidence may need to be retained longer. Additional controller and seller-specific privacy information is provided before the agreement is concluded.

Cloudflare · Privacy