Privacy Policy

Andiamo is a marketing website, not a service platform, and we collect very little information about our visitors. This policy explains what we collect, how we use it, and what choices you have.

1. Introduction

Andiamo Technology Partners ("Andiamo," "we," "us") operates the website at andiamotech.com. This Privacy Policy explains what information we collect when you visit the site, how we use it, and what choices you have. We keep this simple because our data practices are simple: the site is a marketing website, not a service platform, and we collect very little.

If you have questions about this policy or want to exercise any of the rights described below, contact us at privacy@andiamotech.com.

2. Information we collect

Contact form submissions

When you submit the contact form on this site, we collect your name, email address, and the message you write. We use this information solely to respond to your inquiry. Submitting the form is voluntary.

Analytics data

If you consent to analytics cookies when you visit the site, we collect anonymized analytics data through Google Analytics 4 (GA4). This includes pages you visit, how long you spend on the site, the general region you are visiting from (country or state, not precise location), and the type of device and browser you are using. GA4 does not collect your name or email address. If you decline analytics cookies, no analytics data is collected or transmitted.

Information we do not collect

We do not collect payment information, account credentials, or any special categories of sensitive personal data. The site has no user accounts and no login functionality.

3. How we use the information

We use contact form submissions to respond to business inquiries and to follow up with prospects who have expressed interest in working with Andiamo. We do not use your contact information for advertising, we do not add you to mailing lists without your explicit consent, and we do not sell or rent your data to anyone.

We use analytics data (when consent is granted) to understand how visitors use the site so we can improve it. This data is aggregated and is not used to identify individuals.

4. Who we share your information with

We do not sell personal data. We share it only with the following service providers, and only for the purposes described above.

HubSpot. Contact form submissions are stored in HubSpot, which we use as our customer relationship management system. HubSpot processes this data as a data processor on our behalf under its Data Processing Agreement. You can review HubSpot's privacy practices at hubspot.com/legal/privacy-policy.

Google. When analytics consent is granted, analytics data is transmitted to Google's GA4 service. Google processes this data as a data processor under its measurement terms. You can review Google's privacy practices at policies.google.com/privacy.

No other third parties receive your personal data from this site.

5. Data retention

Contact form data is retained in HubSpot for as long as it is relevant to potential or ongoing business engagement. If you ask us to delete your data, we will do so and confirm completion within a reasonable timeframe.

Analytics data is retained according to Google Analytics 4's default retention settings, currently 14 months. You can review and adjust this through Google's account tools if you have a Google account.

Server logs generated by our hosting infrastructure do not contain personally identifiable information and are retained for 30 to 90 days for operational and security purposes only.

6. Your rights

Regardless of where you live, you can request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your data (we will delete your contact information from HubSpot and confirm), object to processing if you believe we are using your data in a way that is not described in this policy, or withdraw analytics consent at any time by adjusting your cookie preferences using the consent banner on this site.

To exercise any of these rights, email us at privacy@andiamotech.com. We will respond within a reasonable timeframe, generally within 30 days.

We do not have a self-serve privacy portal at this stage. All requests are handled manually.

7. Cookies

This site uses a small number of cookies.

The consent preference cookie is a first-party cookie that stores your answer to the consent banner so you are not asked again on subsequent visits. This cookie contains no personal data and is set regardless of your consent choice (it simply records your preference).

Google Analytics cookies are set by GA4 only if you consent to analytics. They help Google Analytics distinguish between sessions and measure engagement. They are not set if you decline analytics.

No advertising cookies, no cross-site tracking cookies, and no cookies from social networks are set by this site.

To manage or withdraw cookie consent, use the consent banner on this site. You can also manage cookies through your browser settings.

8. Security

We host this site on Amazon Web Services (AWS). Transit is encrypted using TLS. We follow security practices aligned with ISO 27001 and NIST Cybersecurity Framework principles, including access controls, encryption at rest, and audit logging. No security measures are perfect, but we take this seriously because our clients in the mission-driven sector expect it.

9. International transfers

Andiamo is based in the United States. If you are visiting from the European Union or another jurisdiction with data transfer restrictions, be aware that your data may be processed in the United States. For EU visitors, Andiamo relies on HubSpot's and Google's Standard Contractual Clauses for international data transfers.

We have no current EU clients and no active EU marketing efforts. If that changes, we will update this policy to address the transfer mechanisms more specifically.

10. Children

This site is directed at business professionals and is not intended for individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as our data practices change or as laws require. When we do, we will update the "Last updated" date at the top of this page. Material changes will be announced on the site for a reasonable period before they take effect.

12. Contact

For privacy questions, data access or deletion requests, or anything else related to this policy, email us at privacy@andiamotech.com. Our mailing address is available upon request.

---

This is a template-adapted first-pass draft intended for legal review before publication. It is not legal advice. Counsel review is required before this document goes live.