Privacy Policy
How we collect, use and protect your personal information.
Last updated: 10 October 2026
This policy explains what personal information Innavera collects through innavera.com, why we collect it, who we share it with, and the choices and rights you have. We have written it to be read, not just agreed to.
The Short Version
- We only collect what you choose to send us through our forms, plus limited technical and usage data needed to run, secure and improve the website.
- We use your information to reply to you, to consider job applications, and to send insights if you ask for them.
- We do not sell your personal information, and we do not use it for advertising.
- We share it only with the service providers that help us run the website and handle email, and only for those purposes.
- You can ask us to access, correct or delete your information at any time by writing to [email protected].
Who We Are
Innavera is a consulting, AI, and venture building firm with offices in Toronto, Canada; Dubai, United Arab Emirates; Cairo, Egypt; and Amman, Jordan. Innavera is responsible for the personal information described in this policy. In this policy, "we", "us" and "our" mean Innavera.
We have designated a Privacy Officer who is accountable for how we handle personal information. You can reach the Privacy Officer at [email protected].
Information You Give Us
We collect information when you fill in a form on this website. What we collect depends on the form:
- Contact form: your name, email address, company, phone number (optional), the service you are interested in, and your message.
- Growth Diagnostic request: your name, email address, company, and the area where you need the most help.
- Job applications: your name, email address, phone number, country, LinkedIn profile and website (optional), the position you are applying for, any note you add, and your CV.
- Newsletter sign-up: your email address.
Please do not include sensitive information, such as health information, government identification numbers or financial account details, in your messages or CV. We do not need it to respond to you.
Information Collected Automatically
When you visit the website, some information is collected automatically:
- Technical data, such as your IP address, browser type, device type and the pages you request. Our hosting and network providers process this to deliver the website, keep it secure and prevent abuse. We also use your IP address briefly to limit how many times a form can be submitted, which protects against spam.
- Usage data through Google Analytics, such as the pages you visit, how long you stay, how you arrived at the site, and your approximate location at country or city level. This helps us understand which content is useful and improve the website.
- Spam protection signals through Cloudflare Turnstile, which checks that forms are being submitted by a person rather than an automated program.
How We Use Your Information
We use personal information only for the purposes below:
- To respond to your enquiry and, where you ask us to, to prepare a proposal or begin working together.
- To consider your job application, assess your fit for the role, and contact you about it.
- To send you insights and updates, if you have signed up. Every email includes a way to unsubscribe.
- To operate, secure and improve the website, including preventing spam and abuse and understanding how the site is used.
- To meet our legal obligations and to establish or defend legal claims.
We do not use your information to make decisions about you based solely on automated processing.
Our Legal Basis
Where data protection laws require a legal basis for using personal information, such as the EU and UK General Data Protection Regulation (GDPR) or the UAE Personal Data Protection Law, we rely on:
- Your consent, for example when you sign up for our newsletter or where consent is required for analytics. You can withdraw consent at any time.
- Steps you ask us to take before entering a contract, for example when you request a proposal.
- Our legitimate interests in responding to enquiries, recruiting, running a secure website and understanding how it is used, balanced against your rights.
- Legal obligations that apply to us.
In Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). By submitting a form, you consent to us using your information for the purpose of that form, as described in this policy.
Who We Share It With
We do not sell, rent or trade personal information. We share it only with service providers who help us run our business, and only as needed for the purposes in this policy:
- Resend, which delivers the information you submit through our forms to our team by email.
- Cloudflare, which provides network delivery, security and the Turnstile spam check.
- Google, which provides Google Analytics.
- Our email and hosting providers, which store our email and run the website.
These providers may only use the information to provide their services to us. Within Innavera, information is available only to the team members who need it, for example the people handling your enquiry or reviewing applications for a role.
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of all or part of our business, in which case the information would remain subject to this policy.
International Transfers
We work across Canada, the United States and the United Arab Emirates, and some of our service providers process information in other countries, including the United States. This means your information may be stored or processed outside your home country, where data protection laws may differ. When we transfer personal information, we take steps to protect it, including relying on our providers' contractual commitments and, where applicable, recognised safeguards such as standard contractual clauses.
How Long We Keep It
We keep personal information only for as long as we need it for the purposes in this policy:
- Enquiries and Growth Diagnostic requests: for up to 24 months after our last contact with you, unless we begin working together, in which case we keep it for the length of our relationship and any period required by law.
- Job applications: for up to 12 months after the role is filled, so we can consider you for similar roles, unless you ask us to delete it sooner. If you join Innavera, your application becomes part of your employment record.
- Newsletter: until you unsubscribe.
- Analytics data: for the retention period set in our Google Analytics account, after which it is deleted automatically.
When we no longer need information, we delete it or make it anonymous.
Cookies and Analytics
The website uses a small number of cookies and similar technologies:
- Analytics cookies set by Google Analytics, such as "_ga", which help us count visits and understand how the site is used. They do not identify you by name.
- Security technologies used by Cloudflare and Turnstile to protect the site and our forms from abuse.
We do not use advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings, and you can opt out of Google Analytics on all websites by installing the Google Analytics opt-out browser add-on. Blocking cookies will not stop the website from working.
Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct information that is inaccurate or incomplete.
- Delete your information.
- Withdraw consent where we rely on it, without affecting anything we did before.
- Object to or restrict how we use your information.
- Receive your information in a portable format.
- Unsubscribe from our emails at any time, using the link in any email.
To make a request, email [email protected]. We may need to confirm your identity before acting on it. We will respond within 30 days, and we do not charge for reasonable requests.
If you are not satisfied with our response, you can complain to a data protection authority, such as the Office of the Privacy Commissioner of Canada, the UAE Data Office, or the supervisory authority in your country if you are in the European Union or the United Kingdom. We would appreciate the chance to address your concern first.
How We Protect It
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) for the entire website, spam and abuse protection on our forms, and access limited to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take the protection of your information seriously and review our measures regularly.
Children
This website is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.
Links to Other Websites
The website links to other sites, such as research sources, client websites and social media. Those sites have their own privacy practices, and this policy does not cover them.
Changes to This Policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and for significant changes we will make that clear on the website.
Contact Us
For any question about this policy or your personal information, contact our Privacy Officer:
- Email: [email protected]
- Toronto: 401 Bay St, Toronto, ON M5H 2Y4, Canada
- Dubai: Meydan Grandstand, 6th Floor, P.O. Box 95195, Dubai, UAE
- Cairo: Floor 7, Building C, Nasr Road Square, Cairo, Egypt
- Amman: 249 Wasfi Al Tal Street, Midas Building, 3rd Floor, Amman, Jordan