Privacy & Data Policy

Effective Date: 20 March 2026

1. Introduction

Holistc™ ("we", "us", or "our") operates the website holisticautomation.ai and provides workflow automation services to small and medium-sized businesses. This Privacy & Data Policy explains how we collect, use, store, and protect your information.

We take your privacy extremely seriously. Our business is built on trust — and that means your data stays yours.

2. Information We Collect

We may collect the following types of information when you interact with our website or services:

• Contact information — name, email address, phone number, and business name when you fill out forms or book a call.
• Business data — workflow details, system configurations, and operational data you share with us during consultations or project delivery.
• Usage data — anonymised analytics about how you interact with our website (e.g. pages visited, session duration).
• Communications — messages, emails, or other correspondence you send to us.

3. How We Use Your Information

We use your information solely for the following purposes:

• To deliver, maintain, and improve our automation services.
• To communicate with you about your project, account, or enquiry.
• To provide customer support and respond to your requests.
• To send you relevant updates — only if you have opted in.
• To comply with legal obligations where required.

4. We Do Not Share Your Data

This is non-negotiable. Your data is never:

• Sold to third parties — not now, not ever.
• Shared with advertisers, data brokers, or marketing platforms.
• Traded or exchanged with any external organisation for their benefit.
• Used for AI model training — your business data is not fed into any machine learning models.
• Accessible to anyone outside of the Holistc™ team members directly involved in your project.

If a third-party tool is required to deliver your automation (e.g. Zapier, Google Sheets, a CRM), we only connect to the systems you authorise, and only for the purpose of delivering your project. We do not extract, store, or retain data from those systems beyond what is necessary for the automation to function.

5. Data Preservation & Storage

All data you entrust to us is preserved with care:

• Your project data is stored securely on encrypted, access-controlled systems.
• We retain your information only for as long as necessary to deliver and support your project.
• Upon project completion, we retain minimal records (e.g. invoices, project summaries) for legal and accounting purposes only.
• You may request full deletion of your data at any time — and we will comply promptly.

6. Data Security

We implement industry-standard measures to protect your data, including:

• Encrypted data transmission (SSL/TLS) across all communications.
• Access controls limiting data visibility to authorised team members only.
• Secure cloud infrastructure with regular security reviews.
• No data stored on local or unsecured devices.

While no system is 100% immune to risk, we are committed to protecting your data to the highest standard and responding swiftly to any potential security concern.

7. Cookies & Tracking

Our website may use minimal, essential cookies to ensure basic site functionality and anonymised analytics. We do not use:

• Third-party advertising cookies.
• Behavioural tracking or retargeting pixels.
• Fingerprinting or invasive tracking technologies.

You can manage cookie preferences through your browser settings at any time.

8. Your Rights

You have the right to:

• Access — request a copy of any personal data we hold about you.
• Correction — ask us to update or correct inaccurate data.
• Deletion — request that we permanently delete your data from our systems.
• Withdraw consent — opt out of any communications at any time.
• Portability — request your data in a structured, commonly used format.

To exercise any of these rights, simply contact us using the details below.

9. Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those external sites. We encourage you to review their policies independently.

10. Children's Privacy

Our services are designed for businesses and are not directed at individuals under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this page periodically.