Company / Legal
Privacy & Cookies Policy
Last Modified: October 2026
We at Indeema Inc. (“Indeema,” “we,” “us,” or “our”) have created this privacy policy (“Privacy & Cookies Policy”) to let you know how information you provide to us is collected, used and shared, why, and for how long. We encourage you to read this Privacy & Cookies Policy carefully. It applies when:
- You visit the website at indeema.com (the “Website”) and use its forms
- You provide information to us by other means such as email, phone, messenger, and third-party mediums
- You apply for a job with us
The controller of the personal information described here is Indeema Inc., 1201 North Market Street, Suite 111-I52, Wilmington, DE 19801, USA. Our establishment in the European Union is Indeema Sp. z o.o., Wojdyła Business Park, ul. Muchoborska 8, 54-424 Wrocław, Poland. If you have any questions or requests with regard to this Privacy & Cookies Policy or your personal information, please contact us via email at ask@indeema.com with “Privacy Policy” in the subject line, or by post at either address.
What Information We Collect
We collect only the information you choose to give us and, with your consent, information about how you use the Website (collectively, the “Information”):
Project enquiries
When you send a project enquiry, we receive your name, work email address, your message and, if you choose them, the engineering area and industry of your project. With your analytics consent, the enquiry also records how you reached us: the landing and source pages, campaign (UTM) parameters, the referring website and the last call to action you used.
Content requests
When you request a whitepaper or other gated content, we receive your name, work email address and the details you enter in the request form, and we send you a single-use download link by email.
Job applications
When you apply for a job, by email to our recruitment team or through a form on the Website, we receive your name, email address and the details you include, such as your phone number, LinkedIn profile, your message, the position you apply for and your CV.
Communications
When you email, call or message us, we receive the information you include in that communication.
Customer testimonials
We may post customer testimonials, which may contain Personal Information, on the Website. We obtain each customer's consent prior to posting the customer's name and testimonial.
Usage information (with consent)
If you allow analytics, our analytics services record pages visited, how you arrived and left, time on page, whether you are a new or returning visitor, approximate location derived from your IP address, and your device and browser type and language.
Your privacy choices
We store your cookie choice and the date you made it on your device, so that we do not ask again on every visit.
How We Use the Information and Our Legal Bases
We use the Information only for the purposes below. For visitors in the European Economic Area, the United Kingdom and Switzerland, each purpose relies on a legal basis under the General Data Protection Regulation (“GDPR”):
Respond to your requests
To answer project enquiries, send requested content and reply to your messages. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries (GDPR Art. 6(1)(b) and (f)).
Create and maintain business relations
To follow up on an enquiry and manage our relationship with customers and partners in our customer relationship management system. Legal basis: our legitimate interest in running our business (GDPR Art. 6(1)(f)).
Recruitment
To assess job applications and contact candidates. Legal basis: steps taken at your request before entering into an employment contract, and our legitimate interest in recruiting (GDPR Art. 6(1)(b) and (f)).
Marketing updates
To send you occasional emails about engineering insights, events and services, only if you ticked the optional marketing box on our enquiry form (it is never ticked in advance). We record the wording you agreed to and when. Every marketing email contains an unsubscribe link. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
Analytics
To understand how the Website is used and improve it. Legal basis: your consent (GDPR Art. 6(1)(a)). Analytics runs only after you allow it.
Advertising (remarketing)
To show people who visited the Website relevant Indeema content and adverts on Google, Microsoft (Bing), LinkedIn and Meta (Facebook and Instagram), and to measure our campaigns on those platforms. Legal basis: your consent (GDPR Art. 6(1)(a)). Advertising runs only after you allow it, separately from analytics, and you can withdraw it at any time.
Security and abuse prevention
To protect our forms from spam and automated abuse, and to keep the Website secure. Legal basis: our legitimate interest in the security of our services (GDPR Art. 6(1)(f)).
Legal obligations
To comply with applicable law and respond to lawful requests (GDPR Art. 6(1)(c)).
We do not sell your Personal Information, and we do not use it for automated decisions that produce legal or similarly significant effects on you.
Cookies and Similar Technologies
Cookies are small text files stored on your computer or device when you browse websites so that they “recognize” you on the next visit. We use only the technologies below. Most browsers also allow you to block or delete cookies; this can affect how websites work.
Necessary
Your privacy choice is stored on your device for 180 days (or until you change it or a new version of this policy asks again). It contains no Personal Information. Necessary storage does not require consent.
Analytics (only with your consent)
Google Analytics, loaded through Google Tag Manager with Google Consent Mode v2, and HubSpot analytics set cookies such as _ga, _ga_*, hubspotutk, __hstc, __hssc and __hssrc. Neither is loaded before you allow analytics. How Google uses information from sites that use its services.
Advertising (only with your consent)
Google Ads, the Microsoft Advertising Universal Event Tracking (UET) tag, the LinkedIn Insight Tag and the Meta Pixel, loaded through Google Tag Manager with Google Consent Mode v2, set or read cookies such as _gcl_au, _uetsid, _uetvid, MUID, li_fat_id, lidc, bcookie, _fbp and _fbc, and the platforms may recognise you by cookies on their own domains. They let us show relevant content to people who visited the Website and measure our campaigns. None of them is loaded before you allow advertising, and a Global Privacy Control signal from your browser keeps advertising off.
You can change or withdraw your cookie preferences at any time by clicking ‘Privacy settings’ in the website footer. When you withdraw consent, the analytics or advertising cookies that we set on the Website are deleted; cookies on the platforms’ own domains are controlled through your settings with Google, Microsoft, LinkedIn and Meta.
Service Providers We Use
We share the Information only with service providers that process it on our behalf and under our instructions, bound by data processing agreements:
HubSpot
Our customer relationship management system. Project enquiries and content requests are recorded as contacts in our HubSpot account, hosted in HubSpot’s European data centre; with your consent, HubSpot analytics also measures visits. When you ask us to delete your information, we delete it from our website systems and from HubSpot. HubSpot privacy policy.
Cloudflare Turnstile
Protects our forms from spam and bots. It runs only when you interact with a form, checks signals from your browser and device to tell people from automated traffic, and does not set tracking cookies. Cloudflare privacy policy.
CleverStaff
Our recruitment system. Job applications you send us, including your CV, are recorded in our CleverStaff account so that our recruitment team can process them. CleverStaff.
Google Analytics and Google Tag Manager, only with your analytics consent, and Google Ads, only with your advertising consent. Google privacy policy.
Microsoft
The Microsoft Advertising Universal Event Tracking (UET) tag, only with your advertising consent, to show relevant content to visitors on Bing and the Microsoft Advertising network and measure our campaigns. Microsoft privacy statement.
The LinkedIn Insight Tag, only with your advertising consent, to show relevant content to visitors on LinkedIn and measure our campaigns. LinkedIn privacy policy.
Meta
The Meta Pixel, only with your advertising consent, to show relevant content to visitors on Facebook and Instagram and measure our campaigns. Meta privacy policy.
Amazon Web Services
Hosts the Website, its backend and databases in the European Union (Frankfurt, Germany) and delivers the Website through the Amazon CloudFront network. Amazon Simple Email Service sends the emails we send from the Website, such as the download links you request and internal notifications to our team about your enquiry. AWS privacy notice.
We may also disclose Information when required by law, or to protect our rights, in connection with a merger or acquisition, or with your consent.
Where We Store the Information and International Transfers
The Website, its backend and its databases are hosted by Amazon Web Services in the European Union (Frankfurt, Germany), and our HubSpot account is hosted in HubSpot’s European data centre. The Website is delivered through a global content delivery network, and some of our service providers, such as Google and Cloudflare, process data in the United States.
When Information about visitors in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards: the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents), or the EU-U.S. Data Privacy Framework where the recipient is certified. You can ask us for information about these safeguards at ask@indeema.com.
How Long We Keep the Information
We keep the Information only as long as needed for the purpose it was collected for, within the periods below, and we delete it earlier when you ask us to (see “Your Rights”):
Project enquiries and content requests
For as long as we are in contact with you about a project or work together, and then for up to three years after our last contact, in our website systems and in our customer relationship management system (HubSpot); after that the record is deleted or anonymised. Details of your visit that came with an enquiry are cleared after 180 days.
Download links
A download link is valid for seven days and works once; the request record is deleted 14 days after the link expires.
Job applications
For the duration of the recruitment process and then for up to two years, so that we can consider you for future openings, in our website systems and in our recruitment system (CleverStaff); after that the application and CV are deleted. You can ask us at any time not to keep your application for future openings.
Your privacy choice
180 days on your device.
Analytics
According to the retention settings of our analytics services.
Your Rights
Depending on where you live, and in particular under the GDPR, you have the right to:
Access
Ask whether we hold Personal Information about you and receive a copy.
Rectification
Ask us to correct inaccurate or incomplete information.
Erasure
Ask us to delete your Personal Information.
Restriction and objection
Ask us to limit how we use your information, or object to processing based on our legitimate interests, including direct marketing.
Portability
Receive the information you gave us in a structured, commonly used format, or have it sent to another organisation.
Withdraw consent
Withdraw your consent at any time, without affecting processing before the withdrawal; for cookies, use ‘Privacy settings’ in the website footer.
Complain
Lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, or with the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
To exercise these rights, email ask@indeema.com with “Privacy Policy” in the subject line. We may ask you to confirm your identity, and we respond within one month.
How We Protect the Information
At Indeema, we take appropriate technical and organisational measures to protect your privacy and to shield the information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Information is encrypted in transit, access to it is limited to the people who need it, and access to our administration systems is logged. While we take serious precautions, no security measures are impenetrable and we cannot guarantee the safety or security of your personal information. We suggest you use caution when deciding what information to send via email.
Children and Privacy
The Website is specifically created for and aimed at adult audience. We do not request, hold, or knowingly collect any Personal Information from or about children under 16 years. If you believe that a child has provided any Personal Information to us, please contact us, and we will remove such information from our databases.
California Residents
We do not sell Personal Information. With your advertising consent, the Website shares online identifiers (such as cookie IDs) with Google, Microsoft, LinkedIn and Meta so that we can show relevant content to visitors on their platforms; under California law this may be “sharing” for cross-context behavioural advertising. You can opt out at any time through ‘Privacy settings’ in the website footer, and we treat a Global Privacy Control signal from your browser as an opt-out. We do not disclose Personal Information to third parties for their own direct marketing purposes.
External Websites
If we have strong reasonable belief that you may like to want to visit other website from our Website, we may provide links to such sites. However, since these websites are not operated by us, they may or may not correspond to our privacy practices. We encourage you to read the privacy policy of such sites.
Changes to This Privacy Policy
This Privacy & Cookies Policy is effective as of the date in the “Last Modified” legend at the top of the document. We may update this Privacy & Cookies Policy from time to time; when a change affects how we use cookies, the Website asks for your choice again. We encourage you to look at this Privacy & Cookies Policy regularly. The previous edition (January 2025) is available on request.