This page explains what personal data Unvera collects, why we collect it, what we do with it, and what rights you have over it. We've tried to write it plainly. If anything is unclear, email us at info@unvera.ai.
Who we are
Unvera is a sole proprietorship operated by Gale Robins, based in Setúbal, Portugal. We are the data controller for the personal data described on this page. For privacy matters, you can reach us at info@unvera.ai.
What we collect, and why
We only collect personal data when you actively give it to us. We don't track you across the web, we don't fingerprint you, and we don't sell or share your data with anyone for marketing purposes.
The forms on this site are the main places where we collect data. Each form collects only what we need:
Handbook waitlist and training notifications
We collect your email address (and, for the handbook waitlist, your role) so we can let you know when the relevant offering is available.
Contact form
We collect your name, email, role, company, the topic of your enquiry, and your message so we can reply to you.
Discovery Practice Pulse Check
The Pulse Check (a twelve-question reflection tool) creates two separate submissions, and we never link them to each other:
- Your answers. The twelve responses and the result they point to are submitted anonymously the moment your reflection is generated. We don't ask for your name or email alongside them, and we don't attach any ID, cookie, or fingerprint that could tie them to you or to anything else you do on the site.
- Your email, if you choose to leave one. If you'd like a fuller written response, you can enter your email below your result. That submission contains only your email address and, if you tick it, the marketing opt-in. It contains no answers and no result.
Both submissions are timestamped by our form host (Netlify). We want to be accurate about what this does and doesn't achieve: because both land in the same system, someone with access to both form dashboards could in principle notice two submissions arriving close together and guess they came from the same visit. We don't collect anything designed to make that connection, and we don't do it ourselves, but we can't claim the two are technically impossible to associate.
Handbook purchase
When you buy the handbook bundle, the purchase is handled by Lemon Squeezy, our payment provider. Lemon Squeezy collects the information needed to process your order. We don't see or store your payment card details.
We don't collect special categories of personal data (such as health, religion, or political views), and we don't ask for them.
Marketing emails
If you opt in to occasional Unvera updates (by ticking an optional checkbox on one of our forms, or by replying to ask to be added to a list), we may send you a small number of emails per month covering things like new content, programme openings, or framework releases. Every marketing email includes a one-click unsubscribe link, and we honour unsubscribe requests promptly. You can also email info@unvera.ai at any time to be removed.
Legal basis (GDPR)
We rely on the following legal bases for processing your personal data:
- Consent, for sending you marketing emails, and for the optional email you can leave after the Pulse Check. You can withdraw this consent at any time.
- Contract, for delivering things you've asked for: your handbook purchase.
- Legitimate interest, for replying to your contact-form messages, for keeping records of who has bought what, for understanding how the site is used in aggregate, and for the anonymous Pulse Check answers, which help us understand where discovery practice commonly breaks down and aren't linked to an identifiable person. We've considered your interests and don't believe these activities override your rights.
Cookies and analytics
We use Netlify Analytics, which is a privacy-friendly, server-side analytics tool. It measures things like which pages are visited and how much bandwidth the site uses, but it doesn't set cookies in your browser, doesn't track you across sites, and doesn't collect personally identifiable information.
We also use Umami, a privacy-focused website analytics service, to understand aggregate traffic patterns such as which pages are visited and where visitors come from. Umami doesn't use cookies, doesn't track you across other websites, and doesn't build an advertising or personal profile of you. Because neither analytics tool uses cookies for tracking, we don't show a cookie consent banner.
Some pages embed third-party services (the Google Calendar booking widget and YouTube video players on the home page and in the Introductory Course) that may set their own cookies, including before you interact with them. These are functional cookies needed for the embedded service to work. We don't read or use them.
Processors
We use the following service providers to operate the site and deliver what you ask for. Each is a data processor acting on our behalf, under contract. Each has its own privacy policy.
- Netlify hosts the site and processes form submissions. Data may be stored on Netlify's servers, which include locations outside the EU; Netlify is committed to appropriate safeguards for international transfers.
- Umami provides privacy-focused website analytics. It doesn't use cookies and doesn't collect personally identifiable information.
- Lemon Squeezy processes handbook purchases. Lemon Squeezy is a US-based service operating under appropriate safeguards.
- Google Workspace runs our email (info@unvera.ai) and our calendar booking widget. Data may be stored on Google's servers, which include locations outside the EU, under appropriate safeguards.
- YouTube (Google) hosts and plays the videos embedded on the home page and throughout the Introductory Course. Loading a page with a YouTube player means your browser contacts Google's servers directly; Google may set cookies and process data (such as your IP address) as described in its own privacy policy. Data may be stored on Google's servers, which include locations outside the EU, under appropriate safeguards.
We don't share your data with anyone else for any other purpose.
How long we keep your data
We keep personal data only for as long as we need it.
- Handbook waitlist and training notification submissions: kept for up to 24 months from the date you submitted, unless you ask us to delete it sooner, or you remain actively engaged (in which case we may keep your record for as long as the relationship is active).
- Marketing list: kept for as long as you remain subscribed. If you unsubscribe, we remove your address from the list but retain a minimal record (your email, the fact you unsubscribed, and the date) so we don't accidentally re-add you.
- Contact form messages: kept for up to 24 months so we can reference earlier conversations if you get in touch again.
- Pulse Check answers: kept indefinitely in anonymised form, since they carry no identifier that would let us find, isolate, or delete one person's answers.
- Pulse Check email (if you leave one): kept for up to 24 months from submission, the same policy as our other single-purpose email captures, unless you ask us to delete it sooner.
- Handbook purchases: kept for as long as needed to deliver the product and meet our legal obligations (such as tax records, which Portuguese law requires us to keep for ten years).
If you ask us to delete your data, we will do so, except where we're legally required to keep it (for example, purchase records for tax purposes).
Your rights
Under GDPR, you have the following rights over your personal data:
- Access: ask us what data we hold about you, and get a copy.
- Correction: ask us to fix anything that's wrong or out of date.
- Deletion: ask us to delete your data ("the right to be forgotten").
- Restriction: ask us to pause processing while you sort out a concern.
- Objection: object to processing based on legitimate interest.
- Portability: get your data in a structured, machine-readable format.
- Withdraw consent: at any time, for any processing based on consent (such as marketing emails).
To exercise any of these rights, email info@unvera.ai. We'll respond within 30 days. We don't charge a fee, and we won't ask you to justify your request. If your request concerns the Pulse Check, tell us the email address you left after your reflection and we'll delete it; because the answers themselves are anonymous and carry no identifier, we have no way to locate or delete a specific person's answers.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), if you believe we've mishandled your data. Their website is cnpd.pt.
Security
We take reasonable steps to protect your data. The site is served over HTTPS. Form submissions are encrypted in transit. Our processors (Netlify, Lemon Squeezy, Google Workspace) provide encryption at rest and access controls on their platforms. Access to submission data is limited to Gale and a small number of trusted collaborators who need it to operate the business.
No system is perfectly secure. If we ever discover a breach involving your personal data, we will notify you and the relevant authority as required by GDPR.
Children
Unvera's services are intended for adult professionals. We don't knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data to us, please email info@unvera.ai and we'll delete it.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top and, where relevant, notify the people affected (for example, by email if the change affects how we handle marketing data). The current version is always available at unvera.ai/privacy.
Contact
For any privacy question, request, or concern:
Gale Robins
Unvera
Setúbal, Portugal
info@unvera.ai