InnovAKT LLC · Effective 20 September 2026
InnovAKT LLC (“InnovAKT”, “we”, “us”) works with industrial and critical infrastructure organizations. This policy explains what we do with personal information that comes to us through this website, and how that differs from the information we handle inside a client engagement. It applies to www.innovakt.com and to enquiries sent to us through it.
What this website collects
Only what you send us. The contact form asks for your name, work email address, organization, role, the sector and scope you work in, and whatever you choose to write in the message field. The booking page asks for what HubSpot’s calendar needs to confirm a meeting — your name, email address and the time you chose. This site runs on Squarespace, which sets a small number of functional cookies and collects basic, aggregated visitor analytics for us; Squarespace’s cookie policy governs those. We run no advertising or tracking pixels of our own and do not build a profile of you.
Two things happen automatically and are worth naming. Our hosting provider records standard server logs — IP address, timestamp, page requested, browser type — which exist to keep the site available and secure. And when you use the contact form or the booking page, the information goes to HubSpot, the customer relationship system we use to keep track of enquiries and meetings. HubSpot, Inc. (United States) processes it on our instructions. The booking page loads HubSpot’s scheduling calendar, which may set cookies of its own while you use it; HubSpot’s privacy notice governs that, and no other page on this site loads it. The site loads its typefaces from Google Fonts, which means your browser makes a request to Google to fetch them; their privacy notice governs what Google records about that request.
If analytics are added to this site later, this policy will be updated to say so, what is measured, and how to opt out, before that happens rather than after.
Why we hold it, and on what basis
To answer you, to have the commercial conversation you started, and to keep a record of it. Where the law requires a legal basis for processing, ours is your consent when you submit the form, and our legitimate interest in responding to a business enquiry and in running our own business.
We do not sell personal information. We do not rent or share it for anyone else’s marketing. We will not add you to a mailing list because you contacted us about an engagement — if we ever run one, you will be asked first.
Who else sees it
Our own people, and the service providers we use to run the business: email and productivity hosting, our customer relationship system, and our website host. They process it on our instructions and for no purpose of their own. We may also disclose information where the law requires it. We do not transfer personal information to any other third party.
Engagement information is different
This is the distinction that matters most to our clients. Information we receive during an engagement — network captures, asset inventories, configuration exports, drawings, interview notes, findings — is not governed by this page. It is governed by the engagement contract and its confidentiality terms. How it is transferred, where it is stored, who may see it, how long it is kept and how it is destroyed are agreed in writing during scoping, before anyone reaches a site or receives an export. Where an engagement involves personal data of a client’s staff, the client is the controller and InnovAKT acts on their documented instructions.
We do not publish or reuse client information. Where we describe past work, we describe the nature of the outcome without identifying the organization, unless that organization has agreed in writing to be named.
How long we keep it
Enquiry correspondence is kept while the conversation is live and for a reasonable period afterwards so that we can pick it up again — ordinarily no more than twenty-four months from the last contact, unless it becomes part of a contracted engagement, in which case the contract’s retention terms apply. Server logs are kept for a short operational period. Ask us to delete your enquiry and we will, subject to anything we are legally required to keep.
Your rights
Wherever you are, you may ask us what personal information we hold about you, ask for it to be corrected, ask for a copy, or ask us to delete it. Depending on where you live you may have further rights — to object to or restrict processing, to withdraw consent, or to complain to a supervisory authority. We do not discriminate against anyone for exercising any of these rights.
Write to info@innovakt.com and we will respond within thirty days. We may need to verify your identity before we act on a request.
Security
We apply the same discipline to our own information that we ask of our clients: least privilege, multi-factor authentication on business systems, encryption of data in transit and at rest with our providers, and access limited to the people who need it. No control set is absolute, and we will not claim otherwise.
Children
This is a business-to-business website. It is not directed at children and we do not knowingly collect information from anyone under sixteen.
Changes
If this policy changes materially we will post the revised version here with a new effective date. The date at the top of this page is always the version in force.
Contact
InnovAKT LLC, Atlanta, Georgia, United States.
info@innovakt.com
Questions about how information is handled inside a specific engagement should go to your engagement lead, who can point you to the terms that govern it.