Privacy Policy

1. Who We Are

iVcardo Technologies S.L. ("iVcardo", "we", "us") is a technology company providing ground transport connectivity services to transport retailers, fleet operators, and partners globally via the platform at www.ivcardo.com.

Data Controller: iVcardo Technologies S.L.
Contact: legal@ivcardo.com

2. What Data We Collect

We collect personal data only when you actively provide it to us:

• Contact form: Full name, company name, job title, country, work email address, and your message.
• Email correspondence: Any personal data you include when contacting us directly.
• Analytics: Aggregated, anonymised usage data (pages visited, session duration) via analytics tools. No personally identifiable information is collected without consent.
• Cookies: See our Cookie Policy for full details.

We do not collect sensitive personal data (health, financial, or payment information).

3. How We Use Your Data

We use the data you provide solely to:

• Respond to your enquiry or request within one business day.
• Communicate with you about our services if you have requested information.
• Improve our website and services using anonymised analytics data.
• Comply with legal obligations under applicable law.

We will not use your data for unsolicited marketing. We will always ask your explicit consent before sending promotional communications.

4. Legal Basis for Processing

Under GDPR (Regulation EU 2016/679), our legal bases for processing are:

• Legitimate interest — responding to business enquiries you have initiated.
• Consent — for any marketing communications or non-essential cookies.
• Legal obligation — where required by law.

5. How Long We Keep Your Data

We retain contact enquiry data for up to 24 months from the date of last correspondence, unless a longer retention period is required by law or ongoing business relationship. After this period, data is securely deleted.

6. Who We Share Data With

We do not sell or rent your personal data. We may share data with:

• Email delivery providers (e.g. SendGrid) — to transmit your enquiry to our team. They act as data processors under contract.
• Analytics providers — only anonymised, aggregated data.
• Legal authorities — where required by applicable law or court order.

All third-party processors are GDPR-compliant and bound by data processing agreements.

7. International Transfers

Some of our service providers are based outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email legal@ivcardo.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data in transit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page indicates when changes were last made. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data:

iVcardo Technologies S.L.
Email: legal@ivcardo.com