Privacy policy
This site collects less than almost any website you will read a policy for. No cookie is written before you consent, there are no advertising pixels, and the only personal data we receive is what you choose to type into the contact form or send by email. Two pages carry opt in analytics. This page explains all of it, including the parts loaded from other companies.
Six things worth knowing before you read the detail
The full text is below and it is short. If you only read one part, read this.
No cookie before you consent
Nowhere on this site is a cookie written to your device unless you accept the banner on one of the two analytics pages. Verifiable in your own browser.
Analytics on two pages, off by default
The pricing page and the AI readiness assessment carry Google Analytics, switched off until you accept. Everywhere else measures nothing at all.
We load almost nothing from other companies
On the main site, fonts, stylesheets, scripts and images all come from this domain. The Insights blog requests web fonts from Google, which is the only exception and is described below.
The contact form is the only collection point
Name, email address, company if you give one, the topic you selected and your message. Nothing else, and no hidden fields beyond a spam trap that is always empty.
Your address is used to reply, and that is all
It does not go onto a mailing list, into a customer relationship platform, or to anyone outside iSpark. We do not sell or rent personal data under any circumstances.
You can have it deleted by asking
One email to hello@ispark.biz. No form, no identity verification ritual beyond confirming you control the address, and no attempt to talk you out of it.
Why this policy is unusually short
Most privacy policies are long because the site behind them is doing a lot of things with your data. This one is short because this site does almost nothing. That is a design decision, not an oversight, and it is checkable: open your browser developer tools on any page here and look at the network and storage tabs.
iSpark is a global AI services provider and an online company from India. This policy covers the website at www.ispark.biz. It does not cover client engagements, which are governed by whatever agreement we sign with you, and which normally include their own confidentiality and data processing terms that take precedence over this page.
In plain terms: no cookie is written anywhere on this site before you consent. The only personal data we receive is what you type into the contact form or send by email, which is a name, an email address, an optional company name, a topic and a message. We use it to reply to you, we keep it while the conversation is live and for a reasonable period afterwards, we never sell it, and we delete it on request. Two pages carry opt in Google Analytics, and the Insights blog loads web fonts from Google.
What we collect
There are four routes by which information about you can reach us, or a processor acting for us, and only one of them involves you deciding to send us anything.
The contact form
When you submit the form on the contact page, we receive the fields you filled in and nothing more:
- Your name, required, so we know who we are replying to.
- Your email address, required, so we can reply.
- Company, optional, and plenty of enquiries leave it blank.
- What this is about, an optional dropdown so the message reaches the right person faster.
- Your message, required. Whatever you choose to put in it.
Two technical fields travel with the form and are worth naming so nothing looks hidden. One is an empty field that real people never see and never fill in, which lets us discard automated spam. The other is a timestamp used to spot submissions completed faster than a human could type. Neither identifies you.
The submission is handled by a script on this domain. It composes one plain text email, sends it to hello@ispark.biz over an authenticated connection, and writes a copy to a log file on the server so that nothing is lost if mail delivery fails. Your message does not pass through any marketing platform, scoring engine or third party form service.
Email you send us directly
If you write to hello@ispark.biz rather than using the form, we hold that email in the same way any business holds its correspondence. The same retention and deletion terms below apply to it.
Server logs kept by our hosting provider
Like every website on the internet, the server that delivers these pages records requests made to it. Those logs typically contain an IP address, a timestamp, the page requested, the browser user agent and the referring page. They are generated and retained by our hosting provider, currently Hostinger, as part of running the service and protecting it from abuse. We do not use them to build a profile of you, we do not link them to contact form submissions, and we do not export them into any analytics tool.
Analytics, on two pages, and only if you accept
Two pages carry Google Analytics 4: the pricing page and the AI readiness assessment. Nowhere else on this site measures anything. On those two the tag loads with Google Consent Mode and analytics storage set to denied, so nothing is stored on your device until you accept in the banner. Accept and Google Analytics sets its measurement cookies and processes the usual GA4 data for those pages: pages viewed, approximate location derived from IP address, device and browser type, and how you arrived. Decline or ignore the banner and no cookie is set, with Google receiving only a cookieless signal carrying no identifier.
Completing the AI readiness assessment records one event, if and only if you accepted, containing the result band and the total score. Your individual answers are scored in your browser and never leave it. Our cookie policy sets this out in full, including how to withdraw consent.
The Insights blog
Our blog at /insights/ runs on WordPress rather than being part of the static site, so it behaves slightly differently and it is worth saying how. It sets no cookies for readers and comments are not enabled, so there is no field anywhere on it that collects anything from you. It does request web fonts from Google, which means Google receives your IP address and browser user agent when you open a blog page. That is the only third party request anywhere on this website, it is covered in more detail in our cookie policy, and we are looking at serving those fonts from our own domain to remove it.
What we deliberately do not collect
No cookies of any kind. No browser storage. No analytics or heatmaps. No advertising or conversion pixels. No device fingerprinting. No phone number, budget range or company size, because those fields exist to sort people rather than to help them. No newsletter signup, because there is no newsletter.
Why we use it, and on what legal basis
We use what you send us to read your enquiry, reply to it, and carry on the conversation if there is one to have. That is the whole purpose. We do not use it for marketing, profiling or automated decision making of any kind.
If you are in a jurisdiction with a formal legal basis requirement, such as the European Union or the United Kingdom under the General Data Protection Regulation, the bases we rely on are these.
| What | Purpose | Legal basis |
|---|---|---|
| Contact form fields | Reading and replying to your enquiry | Steps taken at your request before entering into a contract, and our legitimate interest in answering people who write to us |
| Email correspondence | Continuing a conversation you started | Legitimate interest in maintaining business correspondence |
| Spam trap field and timestamp | Discarding automated submissions | Legitimate interest in keeping the form usable |
| Hosting server logs | Delivering the site and protecting it from abuse | Legitimate interest in operating a secure service |
| Analytics on two pages | Knowing whether the pricing page and the readiness assessment work | Your consent, given in the banner and withdrawable at any time |
If you are in India, the Digital Personal Data Protection Act 2023 applies. Submitting the form is a clear affirmative action for the purpose of receiving a reply, and that is the only purpose for which the data is used.
How long we keep it
Enquiries are kept while the conversation is useful and for a reasonable period afterwards, because a question asked in March is often followed up in September and it is unhelpful to have lost the context. In practice:
- Enquiries that lead to an engagement are retained alongside the project record, for as long as we need them for the engagement and for any period required by tax or contract law afterwards.
- Enquiries that do not lead anywhere are kept for up to twenty four months, then deleted.
- Spam and automated submissions are discarded immediately and never reach a person.
- Server logs are retained by the hosting provider under their own schedule, which is typically a matter of weeks.
- Analytics data, if you accepted it, is retained by Google under the retention period set on the property. We hold no copy of it in any other system.
If you would rather we did not keep anything at all once we have replied, say so in your message and we will delete it when the exchange ends.
Who else sees it
A short list, because the answer is close to nobody.
- Our hosting provider, currently Hostinger, which operates the server this site and its mail run on. They process data on our behalf as part of providing that service.
- People inside iSpark who need to read your enquiry in order to answer it.
- Google, in two narrow senses and no others. Opening a page on our Insights blog makes your browser request a font stylesheet from Google, so Google sees your IP address. And on the two analytics pages, Google Analytics processes measurement data if you accept the banner. Google never receives contact form data, your enquiry, or your assessment answers.
- Nobody else. We do not sell, rent, trade or share personal data with advertisers, data brokers, marketing platforms or partners. There is no arrangement under which anyone pays us for access to it and there never will be.
We would disclose information if a court or a law enforcement authority with proper jurisdiction compelled us to. If that happened and we were permitted to tell you, we would.
Where your data goes
iSpark operates from India and clients are worldwide, so if you write to us from elsewhere your message will be read in India. If you are in the European Economic Area or the United Kingdom, that is a transfer to a country outside it. We rely on the fact that you are sending the message to us directly, for the purpose of getting a reply from us, which is a transfer necessary for steps taken at your request.
If your organisation has data residency requirements that go beyond this, raise them in the first conversation. Client engagements are covered by their own agreement, and we have told prospective clients before now that we are not the right supplier because their data could not lawfully leave its jurisdiction. That answer stays available.
Your rights
Whatever jurisdiction you are in, you can ask us to do the following and we will do it. You do not need to cite a regulation, fill in a form or explain why.
- Tell you what we hold about you. Usually a single email thread, which we will simply send back to you.
- Correct anything that is wrong.
- Delete it. We will confirm when it is done.
- Stop using it. Given the only use is replying to you, this generally means ending the correspondence.
- Give you a copy in a portable format.
- Object to our processing, including any processing we have based on legitimate interest.
- Withdraw analytics consent at any time by clearing your browser's site data for ispark.biz, which removes both the Google Analytics cookies and our record of your choice.
Write to hello@ispark.biz with what you want. We will respond within thirty days and normally much sooner. We may ask you to confirm you control the email address in question, which is the only verification step involved.
If you are in the European Economic Area or the United Kingdom you also have the right to complain to your national data protection authority. If you are in India you may raise a grievance with us first and then with the Data Protection Board under the Digital Personal Data Protection Act 2023. We would rather you told us first, because a complaint usually means we did something wrong and we would like the chance to fix it.
Security, children and changes
Security
The site is served over HTTPS with strict transport security enabled. Contact form submissions are delivered over an authenticated and encrypted mail connection. No system is perfectly secure, and we will not pretend otherwise. That is precisely why the form asks for a message rather than for anything sensitive, and why the contact page tells you not to paste customer records, credentials or regulated data into it.
Children
This is a website about commissioning AI engineering work for organisations. It is not directed at children and we do not knowingly collect personal data from anyone under eighteen. If you believe a child has sent us something, write to hello@ispark.biz and we will delete it.
Changes to this policy
If this policy changes, the date at the top of the page changes with it. If a change is material, for example if we ever started using analytics, we would say so plainly on the page rather than quietly editing a paragraph. We have no plans to add tracking, and if that ever changed, a consent mechanism would arrive before the tracking did, not afterwards.
Frequently asked questions
Marked up with FAQPage schema so these answers can surface directly in search results and inside AI assistant responses.
Does iSpark use cookies or analytics?
No cookie is written anywhere on this site before you consent. Almost every page sets nothing at all and measures nothing. Two pages, the pricing page and the AI readiness assessment, carry Google Analytics 4 in Consent Mode, which loads with storage denied and writes nothing until you accept in the banner. There are no advertising or conversion pixels anywhere, and no fingerprinting. You can verify all of it in your browser developer tools.
What personal data does the iSpark contact form collect?
Your name, your email address, an optional company name, an optional topic selected from a dropdown, and your message. Nothing else. There is no phone number field, no budget field and no company size field. Two technical fields travel with the form, a spam trap that is always empty and a timestamp, and neither identifies you.
Will iSpark add me to a mailing list?
No. There is no mailing list and no newsletter. Your email address is used to reply to your enquiry and for nothing else. We do not sell, rent or share personal data with advertisers, data brokers or partners under any circumstances.
How do I get my data deleted?
Send one email to hello@ispark.biz asking for deletion. We will confirm when it is done, normally within a few days and always within thirty. There is no form to complete and no attempt will be made to talk you out of it. We may ask you to confirm that you control the email address concerned, which is the only verification involved.
How long does iSpark keep contact form enquiries?
Enquiries that lead to an engagement are kept with the project record for as long as the engagement and any tax or contract obligations require. Enquiries that do not lead anywhere are kept for up to twenty four months and then deleted. If you would rather we deleted yours as soon as the exchange ends, say so in the message.
The rest of the small print
Four short documents and a full index. None of them is longer than it needs to be.
Terms of use
The rules for using this website, what it is and is not, and the limits of our liability for it.
Read more →Disclaimer
Why nothing here is professional advice, and how to read our claims about what AI can and cannot do.
Read more →Cookie policy
Short version: this site sets no cookies at all, which is why you never saw a consent banner.
Read more →Sitemap
Every page on iSpark.biz in one list, grouped by services, industries, solutions and company.
Read more →Still have a question?
If anything on this page is unclear, or your procurement team needs it phrased differently, write to us. A person will answer, and if the honest answer is that you should ask a lawyer rather than us, we will say that too.