Privacy policy

1. Who we are

GoodInfra is the trading name of Good Infrastructure Ltd. We are the controller of the personal information described in this policy.

You can contact us about this policy, or your information, at support@goodinfra.co.

2. The information we collect

When you send an enquiry

The enquiry form asks for your name, work email, company, company website, role, company size, cloud platform, model providers, approximate monthly spend and a message about your setup.

When you become a client

We keep contact and billing details for the people we work with, and our correspondence with them.

When you visit this website

This website does not use analytics or advertising tracking, and does not set cookies. Our hosting provider keeps standard server logs, which include IP addresses, for security and reliability.

The website loads its fonts from Google Fonts. When your browser requests them, Google receives your IP address and browser information. Google’s use of that data is covered by Google’s privacy policy.

3. How we use your information

• Replying to your enquiry and deciding whether the review fits your setup. Lawful basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
• Carrying out a review and managing our relationship with you. Lawful basis: performance of a contract.
• Invoicing and record-keeping. Lawful basis: legal obligation.
• Keeping the website secure. Lawful basis: legitimate interests.

We do not sell your information, use it for automated decision-making, or add you to a marketing list without your consent.

4. Data inside your billing exports and systems

Billing exports, usage reports and resource inventories you share for a review may contain personal data. For that data we act as a processor on your behalf, as set out in our terms, and we delete or return it within 30 days of delivering the report.

5. Who we share it with

We share information only with service providers that help us run the business, such as form handling, email, website hosting and accounting, under contracts that protect it. We may also disclose information where the law requires it.

6. International transfers

Some of these providers store data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to protect it.

7. How long we keep it

• Enquiries that do not lead to a review: 12 months from our last contact.
• Client records and invoices: 6 years from the end of the financial year they relate to, as required for tax purposes.
• Data shared for a review: deleted or returned within 30 days of delivering the report.

8. Security

We protect your information with access controls, encrypted storage and multi-factor authentication on the services we use, and we limit access to the information needed for each task.

9. Your rights

Under UK data protection law, you have the right to access the personal information we hold about you, and to ask us to correct, delete or restrict it. You can also object to our use of it, and ask for a copy in a portable format.

To exercise any of these rights, email support@goodinfra.co. We respond within one month.

10. Complaints

If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it last changed.