top of page
LEGAL

Privacy Policy

Last updated: February 2026  ·  Invata Limited, Ireland  ·  Effective immediately upon publication

This Privacy Policy explains how Invata Limited collects, uses, stores and protects your personal data. We are committed to handling your information transparently and in full compliance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 - 2018.

1. Who we are

Invata Limited ("Invata", "we", "us", "our") is a company incorporated in Ireland, providing Digital Platform Engineering and Managed Operations services built on Microsoft 365 and the Microsoft Power Platform.​​

​

For the purposes of data protection law, Invata Limited is the data controller of personal data collected through this website and in connection with our services.

​

If you have any questions about this policy or how we handle your data, please contact us at:

  • Email: privacy@invata.ie

  • Address: Unit 1A, Bracken Business Park, Bracken Road, Sandyford Dublin 18
    D18 H283, Ireland

2. What Personal Data We Collect

We collect personal data in the following ways:​​

2.1 Data You Provide to Us

  • Name, job title, company name and contact details (email address, phone number) when you complete an enquiry, contact or assessment form

  • Email address, name and professional details submitted when accessing gated content such as guides, whitepapers, reports, templates or other downloadable resources

  • Name, email address, company name, job title and any additional information provided when booking or requesting a product demo

  • Information you share when attending a webinar or registering for an event

  • Communications you send us by email or through the website

  • Information provided during an onboarding or service engagement

​

2.2 Data You Provide to Us

  • IP address and approximate location data

  • Browser type, operating system and device information

  • Pages visited, time on site and referring URL

  • Cookie and tracking data (see our Cookie Policy for full details)

​

2.3 Data You Provide to Us

  • Publicly available professional information (e.g. LinkedIn) where relevant to a business relationship

  • Information provided by client organisations about their employees or contacts in connection with a service engagement

3. Legal Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:​

4. How We Use Your Personal Data

​We use the personal data we collect to:

  • Respond to enquiries and provide information about our services

  • Deliver gated content you have requested, such as guides, reports, whitepapers and templates

  • Book, prepare and deliver product demos you have requested, and follow up afterwards

  • Send relevant follow-up communications after a content download or demo, in line with your reasonable expectations as a business professional

  • Store and manage your contact details and engagement history within our CRM platform to ensure consistent, relevant and timely follow-up

  • Track form conversions to understand which content and resources are most valuable to visitors

  • Deliver and manage our platform engineering and managed operations services

  • Send you communications you have explicitly requested, including newsletters, guides and product updates

  • Improve and personalise your experience on our website

  • Analyse website usage and service performance

  • Comply with our legal and regulatory obligations

  • Protect against fraud, misuse or unlawful activity

​

We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4a. Gated Content and Demo Requests

When you submit your details to access gated content or request a demo, we process your personal data to fulfil that request. By submitting the form, you acknowledge that Invata may contact you in connection with the content or demo you have requested, and may send you information about related services and resources.

​

This follow-up is based on our legitimate interests in communicating with business professionals who have actively engaged with our content. It is not the same as opting in to general marketing communications.

​

You can opt out of any follow-up communications at any time by clicking the unsubscribe link in any email we send or by contacting us at privacy@invata.ie.

5. Marketing Communications

We will only send you marketing communications where you have given us explicit consent to do so, or where we have a legitimate interest in contacting you as a business professional about services relevant to your role.​​

​

You can withdraw your consent or opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any email we send

  • Emailing us at: privacy@invata.ie

​

Opting out of marketing will not affect communications related to services you have contracted with us.

6. Data Sharing and Third Parties

We may share your personal data with the following categories of third parties where necessary:

  • Microsoft Corporation - our platform infrastructure, including Microsoft 365, Azure, and the Power Platform, is hosted and operated by Microsoft. Data processed through our platform services may be stored in Microsoft data centres within the EEA.

  • CRM and marketing automation platform - we use a third-party CRM and marketing automation tool to store contact records, manage follow-up communications and track form conversions including gated content downloads and demo requests. Personal data collected through website forms may be transferred to and stored within this platform. The specific provider will be named here once confirmed. All data is processed under a data processing agreement.

  • Email delivery providers - we use third-party services to send transactional and marketing emails. These providers process your email address and related data on our instruction only.

  • Analytics providers - analytics tools will process aggregated and, where consent is given, identifiable website usage data.

  • Professional advisors - solicitors, accountants and insurers where necessary.

  • Regulatory authorities - where required by law or to comply with a legal obligation.

​

We do not transfer personal data outside the European Economic Area (EEA) except where appropriate safeguards are in place, such as EU Standard Contractual Clauses. Where CRM or marketing automation providers are based outside the EEA, we ensure that appropriate transfer mechanisms are in place before any data is shared.

​

We will never sell your personal data to third parties, and we do not share it with third parties for their own marketing purposes.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are:​

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of access - you can request a copy of the personal data we hold about you

  • Right to rectification - you can ask us to correct inaccurate or incomplete data

  • Right to erasure - you can ask us to delete your personal data in certain circumstances

  • Right to restriction - you can ask us to restrict processing of your data in certain circumstances

  • Right to data portability - you can request your data in a structured, machine-readable format

  • Right to object - you can object to processing based on legitimate interests or for direct marketing

  • Right to withdraw consent - where processing is based on consent, you can withdraw it at any time

​

To exercise any of these rights, contact us at privacy@invata.ie. We will respond within one calendar month. We may need to verify your identity before processing your request.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

  • Website: www.dataprotection.ie

  • Phone: +353 57 868 4800

  • Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

​

We would appreciate the opportunity to address your concerns directly before you contact the DPC, so please reach out to us first.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. These measures include:

  • Encrypted data transmission (TLS/HTTPS) across all website and platform communications

  • Access controls and role-based permissions across all internal systems

  • Regular security assessments and staff data protection training

  • Data processing agreements with all third-party suppliers

​

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and affected individuals without undue delay where required.

11. Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use, their purpose and how to manage your preferences, please see our Cookie Policy.

12. Children's Data

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at privacy@invata.ie.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

​

Continued use of our website following any update constitutes your acknowledgement of the revised policy.

14. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your data, please contact us:

  • Email: privacy@invata.ie

  • Post: Unit 1A, Bracken Business Park, Bracken Road, Sandyford Dublin 18
    D18 H283, Ireland

This document was last reviewed in February 2026. Invata Limited is registered in Ireland. This Privacy Policy is governed by Irish law and the laws of the European Union. The Irish courts shall have exclusive jurisdiction over any disputes arising from this policy.

bottom of page