Privacy

Privacy policy

Effective date: 27 May 2026. This policy explains how Utopick IT (“Utopick IT”, “Utopick IT”, “we”) collects, uses, and protects personal data submitted through this website.

1. Who we are

Utopick IT operates this website to present our services and engagement model. For privacy questions or to exercise your rights, contact us at [email protected].

2. What we collect

  • Information you give us via the project enquiry form: your name, email address, engagement type, and any optional message. If you subscribe to the Quarterly Risk Brief, we also store your email for that mailing list alone — unsubscribe at any time via the link in every issue.
  • Information collected automatically when you submit the form: your IP address, browser user-agent, and a submission timestamp. We use these only to deliver your message, prevent spam and abuse, and keep the service secure.
  • Analytics: with your consent, Google Analytics 4 records aggregate pages-visited, referrer, approximate location (IP-anonymised), and device type. We do not enable Google Signals, ad personalisation, or remarketing. You can decline analytics at any time using the cookie banner or by clearing your browser's site data.
  • Preferences: your language choice and cookie consent decision are stored locally in your browser (localStorage). These never leave your device.

We do not use advertising cookies, retargeting pixels, or cross-site trackers.

3. Why we use it (legal bases)

  • To respond to your enquiry and provide the information you requested — on the basis of your consent and our steps to enter into a relationship at your request.
  • To secure the service and prevent fraud and abuse — on the basis of our legitimate interests.
  • To meet legal and regulatory obligations where they apply.

4. Cookies, fonts & third parties

  • Google Analytics 4 (measurement ID G-R94JJXRPQE) — loaded only after you click Accept on the cookie banner. GA stores first-party cookies (_ga, _ga_*) to distinguish unique visits. IP address is anonymised before transmission. We use Google's consent-mode v2: with default state denied, no analytics cookies are dropped until you opt in. You can change your choice at any time by clearing site data.
  • Web fonts are served by Google Fonts; when a page loads, your IP address is shared with Google to deliver the fonts.
  • Cloudflare provides content delivery and security for this site and processes connection data (e.g., IP address) on our behalf to protect the service.
  • No advertising or retargeting trackers run on this site — no Meta Pixel, no LinkedIn Insight, no third-party tag manager beyond the GA snippet above.

5. How we share information

We do not sell your personal data. We share it only with service providers acting on our instructions — our hosting and email-delivery providers, Cloudflare (CDN/WAF), Google (Analytics, with your consent; Web Fonts) — and where required by law or to protect our rights.

6. International transfers

Engagement enquiries may be processed in the country where Utopick IT delivery teams are located. Google Analytics processes data in the United States; for EEA/UK visitors, Google relies on the EU–US Data Privacy Framework. Where applicable, additional transfers rely on the EU Standard Contractual Clauses and supplementary measures.

7. How long we keep it

We keep enquiry data only as long as needed to evaluate and respond to your enquiry and to meet legal obligations, after which it is deleted.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. These rights are provided under the EU/UK GDPR, the California CCPA/CPRA, and the Israeli Privacy Protection Law, among others. To exercise any right, email [email protected]. You may also lodge a complaint with your local data-protection authority.

9. Security

We protect data in transit with encryption (HTTPS), restrict access to submissions, and apply input-validation and anti-abuse controls. No method of transmission or storage is completely secure, but we work to protect your information.

10. Children

This site is not directed to children, and we do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top reflects the latest version.

Note. This page is general information about our data practices and is not legal advice. Investment-related disclaimers on the main pages continue to apply.