Version of
Privacy
This notice explains how Perennos handles personal information when you visit perennos.com, contact us or discuss a project.
Who is responsible
Perennos operates this website and decides why and how website enquiries are handled. For these activities, Perennos is the data controller. Contact talktome@perennos.com with “Privacy” in the subject. Our work is built and maintained in the Cayman Islands.
The identity and formal notice address of the supplier must also appear in your engagement agreement. Handling your enquiry does not make Perennos the controller of everything in your business systems.
Information we receive
| When | Information involved | Why it is needed |
|---|---|---|
| You open a page or download a file | Your IP address, requested address, request time, browser information and connection or error information; a referring page may be included by your browser | Deliver the website, diagnose faults and prevent misuse |
| You email us | Your address, name, message, attachments and normal email delivery information; your organisation and phone number if you provide them | Answer your enquiry and arrange the next step |
| You use the enquiry form | Your name, email address, a description of what you need and a budget range, as you type them | Answer your enquiry and prepare a scope |
| You become a client | Contact, agreement, invoice and project records appropriate to the engagement | Deliver and administer the agreed services |
The website has one enquiry form, on the contact page. It asks for your name, your email address, a description of what you need and a budget range, and nothing else. The form saves your answers in a database in Perennos's Cloudflare account, where a person at Perennos reads them. It does not save your IP address with your answers, and it does not send you a confirmation email. Email remains available as an alternative: talktome@perennos.com. No automatic deletion period is set for saved enquiries yet; ask us at the privacy address and we will delete yours.
Please send a short description first. Do not put passwords, access keys, payment-card details, patient files, identification documents or confidential case material into an initial enquiry. We will agree an appropriate transfer route if the project needs sensitive information. A warning on a form does not remove our duties if we receive personal information.
What we do not collect by default
We do not use enquiries for advertising profiles or sell personal information. We do not treat an enquiry as permission to add you to a marketing list or to train an AI model on your material.
Perennos Tempo has no default analytics or telemetry feed to Perennos. Its local operating records, saved conversations and receipts are different from a product analytics feed. They may contain personal information and need their own access and retention controls. If you connect a model, integration or monitoring service, its data handling must be reviewed and explained before it receives information. Visiting this website does not give us access to your files or your Perennos Tempo installation.
Our reasons for using information
The Cayman Islands Data Protection Act (2021 Revision) requires a lawful condition for processing. Where the GDPR applies, we also need an applicable GDPR basis. We use the following purposes and bases, rather than asking for blanket consent:
| Purpose | Applicable basis |
|---|---|
| Respond to a person's request for a proposal, then perform that person's agreement | Steps requested before a contract, or performance of the contract |
| Answer an employee's business enquiry and manage a client relationship | Legitimate interests in responding and delivering services, balanced against the person's rights |
| Deliver and protect the site, investigate misuse and manage disputes | Legitimate interests in reliable, secure operations and protecting legal rights, subject to the required balancing |
| Keep records or make disclosures required by a specific applicable law | That legal obligation; not a general permission to retain everything |
| Optional marketing or optional tracking, if introduced | Consent where required, with a way to refuse or withdraw without losing the core service |
Sensitive information needs an additional applicable condition. We agree that condition and the safeguards before deliberately collecting it. We do not make solely automated decisions about website enquirers that have legal or similarly significant effects.
Providers and other recipients
Cloudflare provides the website hosting and delivery layer, and the domain's published incoming email routes also point to Cloudflare. Website requests and incoming email therefore have distinct provider data flows. Website delivery involves connection and request information even when a page contains no tracking code. Cloudflare describes its own processing in its privacy policy and customer data processing addendum. Those documents and the public email-routing records do not establish which account options or final mailbox Perennos uses.
An email enquiry also travels through email delivery services. A provider is not described here as an approved client subprocessor merely because it appears in an email address or a software list. The current mailbox operator and its processing locations must be disclosed in the provider schedule supplied with this notice before it is put into force.
For client work, the engagement's provider schedule identifies each provider permitted to handle client personal data, its role, purpose and processing locations. A provider you appoint directly may have a separate relationship with you. We disclose information to advisers or authorities only where the purpose and law justify it, with confidentiality and access limited appropriately.
International processing
This website is delivered through a global network. Email and an expressly approved external service can also involve processing outside the Cayman Islands. “Local-first” describes the default product route; it does not mean this public website or every client service is confined to Cayman.
Before a restricted transfer, the responsible controller must establish the protection required by the Cayman Act and, where applicable, the GDPR. Depending on the circumstances, that may require an adequacy assessment, appropriate contractual safeguards and additional measures. A customer's permission to connect a service is not by itself a lawful international-transfer mechanism. Ask us for the safeguards and relevant provider details for your information.
How long information is kept
We keep information for its purpose, rather than indefinitely because storage is available. An enquiry is needed while we answer it and consider follow-up; an engagement record is needed while we deliver the work and for justified legal, accounting or dispute requirements afterwards. Incident records are needed for investigation and proportionate follow-up. Unnecessary attachments should be removed sooner than the business record they accompanied.
The operational schedule must set review dates, deletion periods and backup expiry for these categories. It must distinguish Perennos-controlled copies from provider-controlled logs. No fixed provider log lifetime or automatic deletion period is promised by this notice. A lawful preservation requirement may delay deletion; retained information must remain restricted and must not be repurposed. Ask us for the period or criteria that apply to your record.
Your rights
Under the Cayman Act, you can ask how your information is used, request access and correction, stop direct marketing, and exercise applicable rights to stop or restrict processing and protections concerning automated decisions. The Act also provides routes to seek rectification, blocking or erasure and compensation, subject to the relevant conditions. These rights are not all unconditional rights to immediate deletion.
Where the GDPR applies to the processing, its rights may additionally include erasure, restriction, objection and portability in the circumstances set out in that regulation. You can withdraw consent for future consent-based processing without changing the lawfulness of earlier processing.
Write to talktome@perennos.com. Tell us what you need and enough to locate the information; do not send identity documents unless a proportionate identity check is necessary. Cayman access requests normally have a 30-day response period, with statutory provisions about identity checks and extensions. GDPR requests normally have a one-month period, with the extensions that regulation permits. We will explain any applicable extension, restriction or refusal and your route to challenge it. There is no routine charge for exercising your rights; any exception must be legally justified.
You may complain to the Cayman Islands Ombudsman, the Cayman data protection supervisory authority, on +1 345 946 6283. You do not have to surrender that right by contacting us first. Where the GDPR applies, you may also complain to the competent supervisory authority, including in the relevant place of residence, work or alleged infringement.
Changes and contact
We will date material changes and explain a new use before relying on it. A changed notice is not retroactive consent. For privacy questions or an accessible copy, email talktome@perennos.com.
Legal sources: Cayman Data Protection Act, Ombudsman access guidance and GDPR. GDPR applicability depends on its territorial and material scope, not simply a visitor's nationality.