Privacy Policy

This policy covers personal data processed through the public Getcombra website and its business enquiry flow.

“Getcombra” refers to the product brand in this policy. The applicable contracting party and data-processing roles for an agreed engagement are identified in the corresponding agreement.

For privacy questions or requests, contact [email protected].

No data protection officer has been appointed unless a later Legal Notice states otherwise.

When you visit this website, technical access data may be processed, including IP address, request time, requested URL, browser information, referrer, and status codes. This is used to deliver the website, secure the service, debug errors, and prevent abuse.

Legal basis is Art. 6(1)(f) GDPR: the legitimate interest in operating a secure, reliable website and measuring basic service reliability.

When you request a private pilot or implementation conversation, Getcombra may process work email, company name, job role, audience type, product category, target markets, annual product volume, Managed Service or Enterprise interest, white-label interest, current compliance problem, request source, language preference, user agent, origin, and technical request metadata.

Website requests are currently routed through a Cloudflare Pages Function and stored in Airtable as the lead and CRM system for the request. Getcombra may use this information to review and respond to requests, qualify fit, prepare a focused compliance workflow discussion, and follow up on a possible commercial relationship.

Legal basis is Art. 6(1)(b) GDPR where the request is pre-contractual, and Art. 6(1)(f) GDPR for operating a focused B2B intake process.

If you contact Getcombra by email or Getcombra replies to a partner conversation request, Getcombra may process the sender and recipient addresses, message content, attachments you choose to send, timestamps, and technical delivery metadata.

Email communication for [email protected] may be handled through Google Workspace / Gmail. Please do not send confidential product files, trade secrets, credentials, or sensitive personal data by email unless an appropriate exchange channel has been agreed.

Getcombra is designed around product evidence, requirement mapping, evidence gap checks, reviewable compliance documentation, human approval, and audit trails. During an agreed engagement, processed materials may include BOMs, test reports, packaging artwork, manuals, product images, product data, company templates, reviewer feedback, and related compliance records.

Do not submit confidential product evidence through the public website form. Any production engagement should be governed by a separate agreement or data processing agreement that defines roles, subprocessors, storage region, retention, access rights, security commitments, and the secure document handoff channel.

This website uses Microsoft Clarity, a website analytics and session interaction service provided by Microsoft Corporation. Clarity helps Getcombra understand how visitors use the website and identify usability or technical issues. It may process page visits, clicks, scrolling, device and browser information, approximate location derived from the IP address, and interaction recordings. Sensitive form fields are masked or excluded from recordings.

Depending on the visitor’s location and consent state, Microsoft Clarity may use cookies or similar identifiers. Where consent is legally required, consent settings are used before analytics identifiers are stored. The legal basis for consent-based analytics is Art. 6(1)(a) GDPR. Further information is available in the Microsoft Privacy Statement and Microsoft Clarity documentation.

The partner conversation form may use local storage as a temporary fallback if an API is unavailable, so the entered request can be recovered in the same browser.

Getcombra uses technical service providers to host the website, operate the request API, store partner requests, send and receive email, monitor reliability, and protect against abuse.

For the current website flow, relevant providers include Cloudflare Pages for website hosting and the request function, Airtable for lead and CRM storage, Google Workspace / Gmail for email communication, and Microsoft Clarity for website analytics and interaction insights. If Getcombra later replaces or adds equivalent providers for the same purposes, this policy will be updated where the change materially affects how personal data is processed.

Where providers process personal data on behalf of Getcombra, Getcombra uses appropriate contractual safeguards such as data processing terms, data processing agreements, or standard contractual clauses where required.

Some providers may process data in countries outside the European Economic Area. Where this involves a restricted transfer under GDPR, Getcombra relies on appropriate safeguards such as adequacy decisions, the EU Standard Contractual Clauses, the UK transfer addendum where applicable, or other lawful transfer mechanisms provided by the relevant service agreement.

Provider subprocessors may change over time. Getcombra reviews provider information and subprocessors as part of launch and vendor management rather than listing every provider subprocessor on this page.

Website logs, partner conversation requests, and email communications are kept only as long as needed to operate the website, evaluate the request, communicate with the requesting company, operate the sales and onboarding process, protect against abuse, and meet legal or security obligations.

If no customer relationship starts, partner conversation requests should be reviewed for deletion after 24 months unless a longer retention period is required for legal claims, security records, compliance documentation, or documented business context.

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability, and objection under the GDPR. You may also lodge a complaint with a competent supervisory authority.

To exercise rights, contact [email protected].