This notice explains how Productvamp Ltd ("we", "us") handles personal data collected through polyviam.com and related communications. It is written to comply with the UK GDPR and the Data Protection Act 2018.
Who we are
Polyviam is a trading name of Productvamp Ltd, a company registered in England. We are the data controller for personal data processed via this site.
For privacy questions, contact hello@polyviam.com.
What we collect
- Contact details you provide. Name, email address, company, role, and anything you choose to include when you book a call, send an email, or fill in a form.
- Booking data. When you book a call we use Cal.com. Cal.com processes your name, email, and chosen time on our behalf, subject to their own privacy notice.
- Analytics. We use Google Analytics 4 to understand how the site is used. This collects pseudonymous data including IP address (truncated), device and browser type, pages viewed, and referring URL. We do not use this data to identify individuals.
- Marketing and visitor identification data. We use RB2B (Retention.com) and similar technologies to help identify business visitors to our website and to associate website visits and logins with other business contact information that RB2B or its data partners may already hold, including by association with an email address.
- Server logs. Our hosting provider (Cloudflare) keeps standard request logs for security and reliability.
Why we use it
- To reply to enquiries and run discovery and engagement work.
- To send invoices and meet our accounting obligations.
- To understand site performance and improve content.
- To identify potential business customers and send relevant communications and marketing.
- To protect the site against abuse.
Legal bases
We rely on the following bases under UK GDPR Article 6:
- Legitimate interests for replying to enquiries, analytics, business development, and security.
- Contract for delivering services you've engaged us for.
- Legal obligation for tax and accounting records.
- Consent where required (e.g. non-essential cookies, where a banner is shown).
Who we share it with
We do not sell personal data. We share it only with processors that help us run the practice:
- Google Workspace (email, documents)
- Google Analytics (site analytics)
- Microsoft Clarity (analytics, heatmaps, and session replay)
- Cloudflare (hosting and email routing)
- Cal.com (booking)
- RB2B / Retention.com (visitor identification and marketing)
- Our accountants, where required for bookkeeping and tax
Some of these providers are based outside the UK. Where data is transferred internationally, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
Enquiry emails: typically 24 months after our last exchange. Client records and invoices: 7 years to meet HMRC requirements. Google Analytics: 14 months (GA4 default). Microsoft Clarity session recordings: typically 30 days. Server logs: short rolling windows set by our provider.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct it or delete it.
- Object to or restrict certain processing.
- Withdraw consent where we relied on it.
- Data portability for data you provided.
To exercise any of these, email hello@polyviam.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
RB2B-specific opt-outs
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.
You may opt out of this advertising by visiting app.retention.com/optout. You may also opt out of RB2B's collection of personal data for GDPR purposes by visiting rb2b.com/rb2b-gdpr-opt-out.
Cookies
We use a small number of cookies and similar storage for analytics, Microsoft Clarity session replay and heatmaps, visitor identification/marketing, and embedded services (e.g. the Cal.com booking widget on the contact page). Clarity reconstructs browsing sessions from page content and interactions such as clicks, scrolling, and navigation; sensitive input content is masked. You can clear or block these technologies through your browser or our cookie settings. Where required by law, we rely on a consent banner for non-essential cookies and similar technologies.
For visitors located in the United States, analytics, session replay, and marketing technologies may start when the page loads unless you have previously opted out or your browser sends a Global Privacy Control signal. For visitors outside the United States, these technologies remain off until you accept them. If we cannot determine your location, we use the opt-in approach.
Changes
We may update this notice. The "Last updated" date above reflects the current version.