Privacy Policy

Who we are

IN&ED is operated by Matthew Wemyss, an independent AI in education consultant. This website is located at inanded.com. If you have any questions about this policy, you can contact us at matt@inanded.com.

What data we collect

We collect the minimum data necessary to provide our services:

• Contact form submissions — name, email address, country, organisation, position, enquiry type, referral source, and your message. This data is collected when you voluntarily submit the contact form.
• Email subscriptions — email address and the source of your signup (e.g. lead magnet, newsletter). This data is collected when you voluntarily enter your email to receive resources or updates.
• Marketing consent — whether you opted in to receive marketing emails, the exact wording you agreed to, and the date of consent.

We do not collect sensitive personal data, financial information, or data relating to children.

Why we collect it

We use your data for the following purposes:

• To respond to your enquiry — when you submit the contact form, we use your details to reply to you. The legal basis is legitimate interest (Article 6(1)(f) GDPR).
• To deliver requested resources — when you enter your email to download guides or resources, we use your email to provide access. The legal basis is performance of a contract (Article 6(1)(b) GDPR).
• To send marketing emails — only if you explicitly opt in. We may send occasional emails about AI in education insights, resources, and updates. The legal basis is consent (Article 6(1)(a) GDPR). You can withdraw consent at any time.

How we store your data

Your data is stored securely in Supabase, a cloud database platform with servers in the EU. Access is restricted to authorised personnel only. We use row-level security and encrypted connections to protect your data.

We retain your data for as long as necessary to fulfil the purposes described above. Contact form submissions are retained for up to 3 years. Email subscription records (including consent records) are retained for up to 5 years after unsubscription, as required for regulatory compliance.

Who we share it with

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by the following service providers who act on our behalf:

• Supabase — database hosting
• Vercel — website hosting

These providers are bound by data processing agreements and process data only on our instructions.

Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Restrict processing — ask us to limit how we use your data
• Data portability — request your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — for marketing emails, you can unsubscribe at any time using the link in any email or by contacting us

To exercise any of these rights, email us at matt@inanded.com. We will respond within 30 days.

Cookies

This website uses only essential cookies required for authentication and security. We do not use advertising cookies, tracking pixels, or third-party analytics. No cookie consent banner is required as we only use strictly necessary cookies.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact:

Matthew Wemyss
matt@inanded.com
inanded.com

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been mishandled.