Inferaq Trust Centre
Privacy Notice
How Inferaq Ltd collects, uses, shares and protects personal information across its website, enquiries, AI services, Academy and Talent activities.
Last updated: 19 September 2026
Inferaq uses personal information only for clear business purposes: to respond to enquiries, deliver services, operate training and recruitment activities, protect its systems and—where permitted—keep people informed. Inferaq does not sell personal information. Visitors should not place passwords, secrets, special-category data or confidential business information into IQ.
1. Who is responsible for your information?
Inferaq Ltd (“Inferaq”, “we”, “us” or “our”) is the controller of personal information covered by this notice unless a contract or service-specific notice says otherwise.
When Inferaq processes personal information solely on a client’s documented instructions—for example while building or supporting a client system—the client will normally be the controller and Inferaq will act as its processor. The relevant contract and the client’s privacy notice will govern that processing.
2. Scope of this notice
This notice covers visitors to inferaq.com; business contacts and prospective clients; users of the IQ website adviser; research and partnership contacts; learners and corporate-training contacts; prospective candidates, workers and employers dealing with Inferaq Talent; suppliers; and people who report a security issue. More detailed notices may be provided for recruitment, temporary workers, employees, learners, research participants or a particular product.
3. Information we may collect
Identity and contact data
Name, organisation, role, email address, telephone number, postal address and communication preferences.
Enquiry and relationship data
Your requirements, project information, correspondence, proposals, meeting notes, contracts, service history and support requests.
Website and technical data
IP address, device and browser information, timestamps, requested pages, diagnostic events, security logs and consent or preference records.
IQ interaction data
Messages you choose to submit, the page you are visiting, suggested routes and limited technical data needed to operate and secure the service.
Academy data
Course enquiries, enrolment and attendance information, learning progress, submitted work, feedback, payment records and reasonable-adjustment requests where necessary.
Talent data
CV and employment history, qualifications, right-to-work and compliance information, availability, role preferences, interview notes and employer feedback. A fuller candidate or worker notice will apply before substantive recruitment processing begins.
Inferaq does not intentionally collect special-category or criminal-offence information through the general website or IQ. Where such data is genuinely required for Academy accessibility support, recruitment compliance or another defined service, Inferaq will provide additional information and identify the appropriate Article 9 or Schedule 1 condition.
4. Where information comes from
Information may come directly from you; from your employer or organisation; from an authorised referrer, recruitment platform or training sponsor; from public professional sources such as a company website or LinkedIn; from service providers operating on our behalf; or from website and security technologies.
5. Why we use information and our lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Respond to enquiries, scope projects and arrange meetings | Contact, organisation and enquiry details | Legitimate interests in developing and operating our business; and steps requested before entering a contract |
| Provide contracted consulting, development, training, recruitment or support services | Contact, relationship, delivery and transaction data | Performance of a contract; legitimate interests where the contract is with your organisation; legal obligations |
| Operate IQ and recommend relevant Inferaq content | Your message, current page and limited technical data | Legitimate interests in providing a useful, secure website adviser; consent where required for optional technologies |
| Manage Academy enrolment and learning | Identity, attendance, work, progress and payment data | Contract; legitimate interests; legal obligations; explicit consent or another valid condition where special-category data is necessary |
| Provide Talent and recruitment services | Candidate, worker, employer and compliance data | Steps before a contract; contract; legitimate interests in matching and administering opportunities; legal obligations |
| Protect systems, investigate misuse and respond to vulnerabilities | Technical, security and report data | Legitimate interests in protecting Inferaq, clients and users; legal obligations; establishment or defence of legal claims |
| Send relevant business updates | Business contact details and preferences | Consent where required; otherwise legitimate interests and the applicable PECR business-marketing rules. You may opt out at any time |
| Accounting, governance and legal compliance | Contracts, invoices, correspondence and audit records | Legal obligations; contract; legitimate interests in governance and legal claims |
6. IQ and artificial intelligence
The on-device version of IQ uses approved website information to answer Inferaq-related questions and navigate the site. If a live model service is enabled, your message may be sent securely to an AI service provider acting under contract. Inferaq will identify that provider and applicable transfer arrangements in this notice before activation.
If you ask IQ to help shape a project, it will collect the business problem, intended outcome, users, current process, data and integration needs, constraints, timing, indicative budget and business contact details one question at a time. The visible brief is not sent until you give explicit consent and confirm submission. A submitted brief is emailed to Inferaq through a same-origin protected server function and is then treated as enquiry and prospective-client information. Do not include passwords, secret keys, special-category information or client-confidential material that Inferaq has not asked you to provide.
- Do not submit passwords, authentication details, health information, financial account details, confidential client material or other highly sensitive information.
- IQ is not a legal, medical, financial or emergency service.
- IQ does not make decisions that produce legal or similarly significant effects about website visitors.
- Important commercial, recruitment or service decisions are reviewed by an authorised person.
- You may clear the visible conversation at any time.
7. Sharing information
Inferaq may share information, only as necessary, with hosting and cloud providers; email, communications and customer-management providers; payment and accounting providers; AI or analytics providers that have been deliberately activated; recruitment, compliance or learning platforms; professional advisers; insurers; regulators, courts and law-enforcement bodies; and a purchaser or investor during a properly controlled corporate transaction.
Service providers must process information for agreed purposes, protect it appropriately and comply with applicable data-protection duties. Inferaq does not sell personal information.
8. International transfers
Some suppliers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, Inferaq will use an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism, together with proportionate transfer-risk assessment and security measures. You may request information about the relevant safeguard.
9. Retention
| Record | Indicative retention |
|---|---|
| General enquiries and submitted IQ project briefs not leading to a contract | Up to 24 months after the last meaningful contact |
| Client, supplier, invoice and tax records | Normally six years after the relevant financial period or relationship, and longer where legally required |
| Marketing preferences | Until you opt out; suppression records are retained to respect that choice |
| Website security and diagnostic logs | Normally up to 90 days, longer where an incident requires investigation |
| Unsubmitted IQ conversation | The browser version is not designed to retain a transcript after the page session; only a brief deliberately submitted with consent becomes an enquiry record |
| Unsuccessful recruitment applications | Normally up to 24 months, subject to the candidate notice and applicable consent |
| Security disclosure reports | Up to six years after closure where needed for security learning or legal claims |
These periods may be shortened or extended where required by law, litigation hold, safeguarding, fraud prevention, a regulator or a clearly documented operational need.
10. Your rights
Depending on the circumstances, you may have rights to be informed; obtain access; correct inaccurate data; request erasure; restrict processing; object to processing based on legitimate interests or direct marketing; receive certain data in portable form; withdraw consent; and obtain safeguards concerning solely automated decisions. Rights are not absolute, and Inferaq may need to verify your identity.
Send requests to info@inferaq.com. Inferaq aims to respond within the period required by law. You may also complain to the Information Commissioner’s Office, although Inferaq would welcome the opportunity to address your concern first.
11. Security, children and changes
Inferaq uses proportionate organisational and technical controls and limits access according to role. No internet service can be guaranteed completely secure. The general website and IQ are directed to business users and are not intended for children under 16. Inferaq may update this notice when services, suppliers or law change; material changes will be highlighted where appropriate.
Last updated: 19 September 2026