Privacy Policy

1. Introduction

DriftIdentity ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our IAM Assessment tool and consulting services.

2. Information We Collect

Information You Provide

• Contact Information: Name, email address, and company name when you fill out forms, book a call, or use our IAM Assessment tool.
• Assessment Data: Responses submitted through our IAM Maturity Assessment, used to generate your personalized report.
• Communications: Any information you provide when contacting us via email at contact@driftidentity.com.

Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, and navigation patterns collected through Vercel Analytics.
• Device Information: Browser type, operating system, and device type.
• Performance Data: Page load times and site performance metrics collected through Vercel Speed Insights.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our website and services.
• Deliver your IAM Assessment results and personalized recommendations.
• Respond to your inquiries and communicate with you about our services.
• Send you relevant IAM insights and updates (only if you have provided your contact information).
• Analyze website usage to improve user experience and performance.
• Comply with legal obligations and protect our rights.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We use Vercel for hosting and analytics. These providers process data on our behalf and are bound by contractual obligations to protect your information.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. As an Identity and Access Management consulting firm, we apply industry best practices to our own data handling processes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Assessment data and contact information are retained for the duration of our business relationship and as required for legal compliance.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Objection: Object to the processing of your personal data for certain purposes.
• Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at contact@driftidentity.com.

8. Cookies and Tracking

Our website uses Vercel Analytics and Vercel Speed Insights, which collect anonymous usage and performance data. These tools are privacy-focused and do not use cookies for tracking purposes. We do not use third-party advertising cookies or trackers.

9. Third-Party Links

Our website may contain links to third-party services such as Google Calendar (for booking consultations) and LinkedIn. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: