Privacy Policy

1. Who is responsible

Impact Mechanica, Inc., a Delaware corporation based in Cambridge, Massachusetts, United States, is responsible for the website and the enquiry information described in this policy. Both founders handle privacy requests at [email protected].

This policy concerns the informational website and email enquiries. It does not describe an active head-scanning, research-participation or public-registration service.

2. Information and its sources

When you visit, hosting and security services receive ordinary page and asset requests. These can include IP address, request time, requested page, browser or device information and technical error or security information.

If you send an enquiry, we receive the contact details, organisation, area of interest, message and email metadata that you or your email service provide. Information may also come from an authorised person contacting us about the same enquiry. We do not ask for health information, identity documents, photographs or anatomical scans through the website.

3. Preparing and sending an enquiry

The Partner form prepares a mailto link in your browser. It does not submit the entered details to a website database or save them in browser storage. You may edit the details or leave without opening your email application.

Opening the draft passes the details to your email application, which may save or sync them under its own settings. You decide whether to send. Once sent, we receive and use the email to assess and respond to the enquiry. An enquiry does not subscribe you to promotional messages.

Please do not send confidential technical material or sensitive personal information in an initial enquiry. The Terms of Use explain submissions and separate confidentiality arrangements.

4. Purposes and legal bases

We process information to deliver and protect the website, understand its performance where analytics is enabled, respond to requests, assess potential partnerships and maintain necessary business or legal records.

Where EU or UK data-protection law applies, we rely on our legitimate interests in operating a secure information website and responding to business enquiries; steps requested by you before entering a contract where applicable; and compliance with legal obligations. Where consent is legally required for a particular optional use, it must be obtained before that use. A website visit or ordinary enquiry is not consent to marketing, research or AI training.

5. Hosting, analytics and browser storage

Cloudflare provides website delivery and security services. Hosting requests and security information are distinct from analytics reporting.

Cloudflare Web Analytics measures aggregate page views and performance when enabled for a deployment. It is the analytics service selected for this website. Cloudflare describes it as not using analytics cookies or identifying visitors through fingerprinting. We do not use advertising trackers or the enquiry form to create browser cookies or local-storage records. This is not a statement that your browser, email application or every external website uses no cookies or processes no personal information.

See Cloudflare Web Analytics information and Cloudflare’s privacy policy for provider information. Provider descriptions do not change any rights you have in relation to our processing.

6. Providers, recipients and international processing

Cloudflare processes website-delivery and related technical information. Enquiry emails are handled through Zoho Mail, with United States hosting according to the company’s account information. The founders access the enquiry mailbox through webmail from South Africa and the United States. Your email provider also processes messages under its own arrangements.

These arrangements can involve processing outside the country where you are located. Different countries may provide different legal protections. Applicable transfer rules and safeguards depend on the service, processing role and jurisdiction. You may ask us for information about the arrangements relevant to your enquiry.

Information may also be disclosed where necessary to comply with law, protect legal rights, obtain professional advice or carry out a lawful business transfer, subject to applicable duties and appropriate limits. We do not sell enquiry information or share it for cross-context behavioural advertising. Read Zoho’s privacy policy for provider information.

7. Retention and deletion

Our policy sets a routine-enquiry retention period of 12 calendar months after the last substantive contact. Information may be kept longer for an ongoing relationship, a legal requirement or a dispute. The founders are responsible for tracking relevant dates and reviewing the policy quarterly.

Deletion from an active mailbox is different from removal from Trash, service logs and provider backups, which may follow separate cycles. The retention period does not promise immediate erasure of every backup copy. Contact us to ask about a particular record, request deletion or discuss an applicable exception.

8. Information security

The website uses technical protections, including restrictions on scripts and form submission. Authorised enquiry-mailbox access is limited to the founders. Security also depends on provider controls, account access and operational handling.

No website, email service or transfer is completely secure. Please send only what is necessary for your enquiry. We assess security incidents and any applicable notification duties in light of the information and law involved.

9. Privacy requests and complaints

Depending on applicable law, you may have rights to access, correct, delete or receive information, restrict or object to processing, withdraw consent where it is the basis used, or appeal a decision. Some rights have exceptions. Exercising a right does not require accepting the website Terms.

Email [email protected], describing your request and the information involved. We may seek proportionate verification without routinely requesting an identity document or head scan. We respond within applicable legal time limits and explain relevant decisions or exceptions. You may contact the competent privacy authority, including the ICO in the UK, the relevant EEA supervisory authority or South Africa’s Information Regulator where applicable; contacting us first is not a condition of making a complaint.

If a decision is subject to an applicable statutory appeal process, reply to our privacy email requesting review. You retain any further complaint or remedy available under that law.

10. Children and young people

Partnership enquiries are intended for adult business and research contacts. We do not invite children to create an account, provide scans or join research through this website. A young person may still visit public pages, generating ordinary technical requests. If you believe a child has sent personal information that requires attention, contact us so we can assess the appropriate response.

11. Programme updates and future applications

Public programme registration, beta enrolment, research recruitment and automated promotional email are closed. No interest-list registration is collected through this website release.

TrueContourAI is a separately developed application, not an active scanning service on this website. Before any app, registration, marketing or participant service opens, it will need its own appropriate privacy information, permissions, consent choices and terms. This policy does not authorise anatomical-data collection or AI training.

12. External links and changes

Linked publications and external services have their own terms and privacy practices. We may update this policy as services, practices or applicable requirements change. The version and date above identify the current notice. We will provide further notice or seek consent where required before a material change affects the processing concerned.

Contact Impact Mechanica, Inc. at [email protected].