TORQUEFOUNDRY
← Back to site

Last updated: 4 June 2026

Privacy Policy

This policy explains what personal data TorqueFoundry Advisory collects through this website, why we collect it, how we protect it, and the rights you have over it. We have built this site to be privacy-respecting by default: no advertising or cross-site tracking cookies, and cookieless analytics.

1. Who we are (Data Controller)

TorqueFoundry Advisory, Basel, Switzerland, is the controller responsible for your personal data in connection with this website.

For any privacy question or to exercise your rights, contact us at info@torquefoundryadvisory.com.

2. Scope & applicable law

We process personal data in accordance with the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR where relevant, and the Swiss Federal Act on Data Protection (FADP). This policy applies to the website at torquefoundryadvisory.com.

3. What we collect & why

3.1 Information you give us

  • Application & booking forms (the "Apply" / "System Control" and "Book a Session" pages): your name, organization, work email, role, your preferred date/time, and the operational details you choose to describe. We use this solely to respond to your enquiry, run a preliminary operational assessment, and arrange a conversation with a Managing Partner.
  • AI assistant ("Operations Triage"): the messages you type into the in-page assistant. These are processed to generate a response and help triage your enquiry (see Section 5).
  • Direct contact: if you email us, we receive your message and contact details.

Providing this information is voluntary. Please share only what is necessary, and do not submit confidential, sensitive, or special-category data through the forms or the AI assistant.

3.2 Information collected automatically

  • Privacy-friendly analytics: we use Umami Analytics and Vercel Web Analytics to understand aggregate traffic (e.g. page views, referrers, approximate region, device type). Both are cookieless, do not track you across other websites, and are designed to avoid collecting directly identifying information.
  • Security & operational logs: our hosting provider records standard request logs (including IP address and user-agent) for a limited time to keep the service secure and reliable.

3.3 Local storage on your device

We store a single functional value in your browser's local storage to remember your language preference (English or Turkish). This is strictly necessary to provide the feature you choose and is not used for tracking.

4. Cookies

This website does not use advertising, profiling, or cross-site tracking cookies, and our analytics are cookieless. Because we do not store or access non-essential information on your device, no cookie-consent banner is required. The only browser storage we use is the functional language preference described above.

5. The AI assistant

The in-page "Operations Triage" assistant is clearly labelled as AI; it is not a person. The messages you send are transmitted through our server to a self-hosted language model that we operate, used only to generate the reply you see. We do not use your conversations to train any third-party or publicly available model. The assistant is rate-limited and scope-restricted to operational topics.

Please do not enter confidential client information, trade secrets, personal data about others, or special-category data into the assistant. For confidential specifics, speak with a Managing Partner directly.

6. Legal bases for processing (GDPR Art. 6)

Purpose Legal basis
Responding to enquiries, applications, and booking requests; arranging an assessment Steps taken at your request prior to entering a contract; and our legitimate interest in business communication
Operating the AI assistant to answer your questions Legitimate interest in providing helpful information at your request
Aggregate, cookieless analytics and site improvement Legitimate interest in understanding and improving our website
Security, fraud/abuse prevention, and log keeping Legitimate interest in keeping the service secure; legal obligation where applicable

Where we rely on legitimate interests, we have balanced them against your rights and freedoms. You may object to this processing (see Section 9).

7. Who we share data with (processors)

We do not sell your personal data. We share it only with service providers acting on our instructions under appropriate data-processing terms:

  • Vercel: website hosting and delivery (this site is served from an EU region, Frankfurt).
  • Umami: cookieless website analytics.
  • Email / SMTP provider: to deliver and receive the messages you send us.
  • Our self-hosted AI infrastructure for the assistant (operated by us).

We may also disclose data where required by law or to protect our legal rights.

8. International transfers

We aim to keep processing within the EU/EEA and Switzerland where practical (this site is hosted in an EU region). Where a provider processes data outside the EEA/Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent measures.

9. Your rights

Subject to the GDPR and Swiss FADP, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to processing;
  • Data portability for data you provided to us;
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these, email info@torquefoundryadvisory.com. You also have the right to lodge a complaint with a supervisory authority: your local EU/EEA data protection authority, or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

10. Data retention

We keep enquiry and application data only as long as needed to respond to you and, where relevant, for the duration of any resulting engagement plus a limited period to meet legal and accounting obligations. Aggregate analytics are retained in non-identifying form. Security logs are kept for a short period. AI assistant messages are not retained beyond what is needed to generate the response and operate the service.

11. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted transport (HTTPS), restricted access, and keeping service credentials out of client-side code. No method of transmission or storage is completely secure, but we work to protect your information.

12. Children

This website and our services are intended for businesses and professionals, not for children, and we do not knowingly collect data from children.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be reflected on this page.

14. Contact

TorqueFoundry Advisory, Basel, Switzerland
info@torquefoundryadvisory.com