Privacy Policy

Inclined Plane is an AI-native data engineering consultancy. Our registered business addresses and contact details are listed in Section 14. We act as the data controller for personal data collected through this website.

We operate across the United States and India. Where applicable, we comply with global data protection standards, including relevant US state privacy laws such as the California Consumer Privacy Act (CCPA) as amended by the CPRA, and the UK/EU General Data Protection Regulation (GDPR) for visitors from those regions.

Information you provide directly

• Name, email address, job title, and company name submitted via contact forms or discovery call bookings
• Content of enquiries, messages, or communications you send us
• Information provided during contract or engagement discussions
• CV or application information submitted via careers pages

Information collected automatically

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time on site, referral source, and clickstream data
• Cookie identifiers and session data (see Section 10)

Information from third parties

• Professional details from LinkedIn if you connect via that platform
• Analytics data from services such as Google Analytics or similar

We use personal data for the following purposes:

• Responding to enquiries and booking discovery calls
• Delivering and managing our data engineering and AI consultancy services
• Sending relevant service updates, blog content, or thought leadership (with your consent)
• Processing job applications and managing recruitment
• Improving our website experience and understanding user behaviour
• Complying with legal and regulatory obligations
• Protecting against fraud, misuse, or security threats
• No AI Training: We explicitly do not use personal data collected through this website (such as contact form submissions or emails) to train, fine-tune, or develop any proprietary or third-party Large Language Models (LLMs) or artificial intelligence systems.

For visitors subject to UK/EU GDPR, we rely on the following lawful bases:

• Contract: Processing necessary to take steps prior to or fulfil a contract with you
• Legitimate interests: Running our business, improving our services, and maintaining website security — balanced against your rights
• Consent: Marketing communications and non-essential cookies — where you have explicitly opted in
• Legal obligation: Where we are required to process data to comply with law

We do not sell your personal data. We may share data with:

• Service providers: Hosting, CRM, analytics, email, and calendar platforms that process data on our behalf under data processing agreements
• Professional advisers: Lawyers, accountants, or insurers where required
• Authorities: Law enforcement or regulators where legally required
• Business transfers: In the event of a merger, acquisition, or asset sale — subject to standard confidentiality obligations

All third-party processors are contractually required to handle your data securely and only for the specified purpose.

Because we operate internationally, personal data we collect may be transferred to, and processed in, the United States, India, or other countries outside your home jurisdiction.

When we transfer your data across borders, we ensure it receives an adequate degree of protection by implementing necessary legal safeguards, such as specific legally-approved contracts (like Standard Contractual Clauses) which give personal data the same protection it has in regions like the UK/EEA.

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Our general retention periods are:

• Enquiry and contact records: 3 years from last contact
• Client engagement records: 7 years post-engagement (legal/tax obligations)
• Job application data (unsuccessful): 6 months from decision
• Marketing consent records: Until consent is withdrawn
• Website analytics data: 14 months (Google Analytics default)

Depending on your location, you may have the following rights over your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data where we have no lawful reason to retain it
• Restriction: Ask us to limit how we use your data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: At any time, where we rely on consent as the legal basis

To exercise any of these rights, contact us at the details in Section 14. We will respond within 30 days. UK/EEA residents also have the right to lodge a complaint with their local supervisory authority.

If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding your personal information. This section supplements the rest of this Privacy Policy and applies solely to California residents.

Categories of personal information we collect

In the past 12 months, we have collected the following categories of personal information from California residents:

• Identifiers: Name, email address, IP address, job title, company name
• Professional or employment-related information: Role, employer, and career details submitted via contact or careers forms
• Internet or network activity: Pages visited, referral source, browser type, device information, and session data collected via analytics cookies
• Geolocation data: Approximate location inferred from IP address

We collect this information for the business purposes described in Section 3. We do not sell or share your personal information with third parties for cross-context behavioural advertising.

Your CCPA rights

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business or commercial purpose, and the categories of third parties with whom we share it
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where we are required to retain it by law)
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information as defined under the CCPA/CPRA. No opt-out is therefore required, but you may contact us to confirm this at any time
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

How to submit a request

To submit a verifiable consumer request, contact us by email at privacy@inclinedplane.com with the subject line "CCPA Request". We will respond within 45 days of receipt. We may need to verify your identity before processing your request. You may designate an authorised agent to submit requests on your behalf.

We use cookies and similar tracking technologies on our website. For full details on what cookies we use, why, and how to manage your preferences, please see our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews. While we strive to protect your data, no internet transmission is completely secure — we cannot guarantee absolute security.

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Where changes are material, we will notify you via email (if we hold your contact details) or by prominent notice on our website.