Legal

Privacy.

What we collect, why, and how to make us stop.

Updated [DATE]

The short version

  1. We collect what you type into our forms and the concierge, and the basic technical log every website keeps.

  2. We use it to reply to you and to run the site. Nothing is sold, and nothing is used for advertising profiles.

  3. Our analytics are cookieless, so we do not track you across sites.

  4. You can ask what we hold, have it corrected, or have it deleted by emailing info@temprahq.com.

  5. The controller is Tempra Ltd, Malta.

Who we are

Tempra Ltd, registered in Malta, [registration number], Centris Business Gateway 1, Level 3, Triq is-Salib Tal-Imriehel, Birkirkara CBD 3020, Malta. We are the controller of the personal data described on this page. Contact: info@temprahq.com.

What we collect and why

We do not collect special categories of personal data, we do not knowingly collect data from children, and we do not make decisions about you by automated means that have legal or similarly significant effects.

  • Contact form and demo requests. Your name, your company if you give it, your email address and your message. We use them to reply to you and to arrange the scoping session or demo you asked for. Kept for twenty four months after our last exchange, then deleted, unless we have gone on to work together, in which case the terms page applies.

  • Ask Tempra, the concierge. The questions you type and, only if you choose to give it, your name and email so that a person can follow up. We use them to answer you. The questions are sent to a language model provider to generate the answer. [PROVIDER, from the build] processes them under a written contract, does not use them to train its models, and deletes them after the request is served. We keep the conversation for thirty days so we can improve the answers, then delete it. Do not type anything into the concierge that you would not put in an email to a company you have not met.

  • The findability check. The web address you give us. We fetch that public page to run the check and we do not keep its content. If the address includes your name, that is the only personal data involved.

  • Technical logs. Your IP address, your browser type, the pages you request and how long they took. Every website keeps this to run and secure the service and to find faults. Kept for thirty days.

  • Analytics. How many people viewed each page and where they came from, counted without a cookie and without any identifier that could be linked to you.

Replying to you and arranging what you asked for is a step you have asked us to take before any contract, under Article 6(1)(b) of the GDPR. Running and securing the site, and keeping the technical logs, is our legitimate interest under Article 6(1)(f), and it is an interest we have weighed against yours. If we ever ask for anything beyond that, we will ask for your consent under Article 6(1)(a), and you can withdraw it at any time.

Who else sees it

Nobody sees your data who does not need to in order to provide this site and answer you. The companies that process it for us are:

Each processes data under a data processing agreement that meets Article 28 of the GDPR. Data leaves the European Economic Area only with the safeguards the GDPR requires, and we will tell you here if that changes.

We do not sell personal data. We do not share it with advertisers. We disclose it to a public authority only when the law requires us to.

  • Vercel Inc., which hosts the site. The site is served from Vercel's servers in Frankfurt, in the European Union. Vercel is a United States company and is certified under the Data Privacy Framework agreed between the European Union and the United States, and our contract with it includes the European Commission's standard contractual clauses.

  • Microsoft Ireland Operations Limited, which provides our email. Messages you send through the contact form arrive in a mailbox on Microsoft 365, in the European Union.

  • [PROVIDER, from the build], which generates the concierge's answers, as described above.

How long we keep it

Only as long as the purpose needs, and the periods are above against each item. When a period ends the data is deleted or made anonymous. If you ask us to delete it sooner, we do, unless a law requires us to keep a record, and we will tell you if that is the case.

Your rights

Under the GDPR and Malta's Data Protection Act you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, receive it in a form you can take elsewhere, and object to processing that rests on our legitimate interest. Email info@temprahq.com and we will answer within one month. We may ask you to confirm who you are before we act.

If you think we have handled your data badly, you may complain to the Information and Data Protection Commissioner in Malta at idpc.org.mt. We would rather you told us first, so that we can put it right.

Security

The site is served over an encrypted connection. Form submissions are validated on our servers, protected against automated abuse, and delivered to a mailbox that only named people can open. Access to any system that holds your data is limited to the people who need it.

Changes

We will change this page when the facts change and put the date at the top. If a change matters to you, such as a new recipient of your data or a new purpose, we will say so plainly in the page itself rather than bury it.