PRIVACY POLICY

Iron Mind AI (operated by Iron Mind AB, Org.nr 559551-9181, Sweden) takes your privacy seriously. This policy explains what information we collect when you visit iron-mind.ai, how we use it, and what rights you have over it. It applies to visitors, prospective clients, and anyone who submits a contact inquiry through our website.

INFORMATION WE COLLECT

Contact Form Submissions

When you submit the contact form on our website, we collect the information you provide directly, which may include:

• Full name
• Email address
• Phone number (optional)
• Company or organisation name (optional)
• The message content you submit

This information is transmitted to our team via email and is not stored in a persistent database on our servers beyond the transmission itself.

Analytics Data

We use Google Analytics 4 (GA4) to understand how visitors interact with our site. GA4 collects data automatically when you visit, including:

• Pages visited and time spent on each page
• Referring website or search query
• Browser type, operating system, and device category
• Approximate geographic location (country/city level, derived from IP address)
• Interaction events (clicks, scroll depth)

Google Analytics data is collected and processed by Google LLC under their own privacy terms. We do not receive or store raw IP addresses. Data is aggregated and anonymised before we access it.

Cookies

Our website uses the following cookies:

• Google Analytics cookies (_ga, _ga_*): These are first-party cookies set by the GA4 tracking script. They persist for up to 2 years and are used to distinguish unique visitors and sessions.
• Session cookie (session): A short-lived, server-side session cookie used only for authenticated admin functionality. It is not set for ordinary site visitors.

We do not use advertising cookies, retargeting pixels, or tracking technologies beyond those listed above. You can disable cookies in your browser settings at any time, though doing so may affect site functionality.

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• Service delivery: To respond to your inquiry, discuss a potential engagement, and communicate with you about our services.
• Business communications: To follow up on project discussions, send proposals or scope documents, and manage ongoing client relationships.
• Website improvement: To analyse traffic patterns, identify popular content, and improve the structure and performance of our site using aggregated analytics data.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We do not use your data for automated profiling or algorithmic decision-making that produces legal or similarly significant effects.

THIRD-PARTY SERVICES

Our website integrates the following third-party services. Each operates under its own privacy policy:

We may also engage third-party contractors or subprocessors in the delivery of client services. Any such parties are bound by confidentiality obligations consistent with this policy.

DATA RETENTION

• Contact form data: Inquiry emails are retained in our business email inbox for as long as the correspondence is relevant to a potential or active engagement, and deleted thereafter when no longer necessary — typically no longer than 3 years after the last communication.
• Google Analytics data: Retention is configured to 14 months in our GA4 property. Data is automatically deleted by Google after this period.
• Cookies: Google Analytics cookies expire after 2 years. Session cookies expire at the end of the browser session or within 24 hours, whichever is sooner.

YOUR RIGHTS

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (EEA / UK residents)

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no legitimate basis for us to continue holding it.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Our lawful basis for processing contact form data is legitimate interests (responding to a business inquiry you initiated). For analytics, we rely on our legitimate interest in understanding how our website is used, subject to your ability to opt out via browser settings or the Google Analytics opt-out browser add-on.

Under CCPA (California residents)

If you are a California resident, you have the right to:

• Know what personal information is collected about you and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information. (We do not sell personal information.)
• Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at info@iron-mind.ai. We will respond within 30 days.

DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to any systems that process personal data is restricted to authorised personnel only.

No transmission over the internet can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at info@iron-mind.ai.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

CONTACT

For any privacy-related questions, requests, or complaints, please contact us:

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) .