← Back to Maturify

Privacy Policy

Last updated: June 2026

1. Introduction and identity of the controller

Maturify ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains who we are, what personal data we collect, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have. Maturify operates maturify.io and the Maturify ESG readiness platform. For the purposes of GDPR, Maturify is the data controller. Contact: privacy@maturify.io.

2. Scope of this policy

This policy applies to all personal data collected through maturify.io including via contact forms, quote request forms, newsletter sign-ups, and any other interactions with our website or platform. It does not apply to third-party websites linked from our site. This policy should be read alongside our Cookie Policy at maturify.io/cookies.html.

3. What personal data we collect

Contact and quote request data — name, work email, phone number, company name, job title or role, funding stage, service tier interest, and message content.
Newsletter subscription data — email address and where provided name and company.
Usage and technical data — IP address, browser type and version, operating system, referring URL, pages visited, time on page, and diagnostic data collected via cookies.
Communication data — records of correspondence including content and any personal data included.
Platform data — company information, ESG-related data, and documents submitted to generate AI Output.

4. How we collect your personal data

We collect data directly when you fill in forms, subscribe to the newsletter, correspond with us, use the platform, or otherwise interact with our Services. We collect technical data automatically via cookies subject to your consent preferences. We do not currently collect data from third-party sources.

5. Legal basis for processing

Consent (Article 6(1)(a)) — newsletter, non-essential cookies, and explicitly consented processing. Consent may be withdrawn at any time.
Legitimate interests (Article 6(1)(f)) — responding to contact and quote requests, maintaining communication records, fraud prevention, and platform improvement.
Performance of a contract (Article 6(1)(b)) — processing necessary to perform a contract or take pre-contractual steps.
Legal obligation (Article 6(1)(c)) — processing required to comply with legal obligations including tax, accounting, and anti-money laundering legislation.

6. How we use your personal data

We use data to respond to enquiries and quote requests; to send newsletters where opted in; to operate and improve the platform; to generate AI Output; to analyse website usage; to comply with legal obligations; to detect and prevent fraud; to enforce our Terms of Use; and to communicate changes to our Services.

7. Marketing communications

We only send marketing communications where you have explicitly opted in. Each communication includes a clear unsubscribe mechanism. You may unsubscribe at any time at privacy@maturify.io. Unsubscribing does not affect transactional or service communications.

8. How we share your personal data

Service providers and processors — email delivery, cloud hosting, analytics including Google Analytics, CRM tools, payment processors — all bound by GDPR-compliant data processing agreements.
Legal and regulatory authorities — where required by law, court order, or to protect rights and safety.
Business transfers — in event of merger, acquisition, or sale — with notice to affected users.
Professional advisors — lawyers, auditors, subject to confidentiality obligations.

9. International data transfers

Some providers are located outside the EEA. We ensure appropriate safeguards including Standard Contractual Clauses or adequacy decisions under Chapter V GDPR. Contact privacy@maturify.io for details.

10. Your rights under GDPR

Right of access (Article 15) — obtain confirmation of whether your data is being processed and a copy of the data.
Right to rectification (Article 16) — have inaccurate personal data corrected or completed.
Right to erasure (Article 17) — have your personal data deleted where the legal basis no longer applies.
Right to restriction of processing (Article 18) — limit how we use your data in certain circumstances.
Right to data portability (Article 20) — receive your data in a structured, commonly used, machine-readable format.
Right to object (Article 21) — object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent (Article 7(3)) — withdraw consent at any time without affecting prior lawful processing.
Right to lodge a complaint with IMY (imy.se) — contact the Swedish supervisory authority if you believe your rights have been violated.

We will respond to requests within one month, extendable by two months for complex requests.

11. How long we retain your personal data

Data type Retention period
Contact and quote request data 24 months from last interaction
Newsletter subscription data Until unsubscription, deleted within 30 days
Usage and analytics data Up to 14 months
Customer and platform data Duration of relationship plus 5 years
Communication data 24 months from last communication

12. Data security

We have implemented appropriate technical and organisational measures including encrypted data transmission (TLS/HTTPS), access controls, reputable cloud infrastructure with industry-standard certifications, and regular security reviews. No internet transmission is completely secure. In the event of a breach likely to risk your rights and freedoms, we will notify the supervisory authority and where required you directly.

13. Children's data

Our Services are not directed at individuals under 18. We do not knowingly collect data from children. Contact hello@maturify.io if you believe a child has submitted data and we will delete it promptly.

14. Automated decision-making and profiling

Our AI platform generates automated output to assist human decision-making. We do not make solely automated decisions that produce legal effects or similarly significantly affect individuals within the meaning of Article 22 GDPR.

15. Changes to this policy

We may update this policy periodically. Material changes will be communicated by updating the date at the top and where appropriate by email or prominent website notice. Continued use of the Services constitutes acceptance of the updated policy.

16. Contact and complaints

hello@maturify.io. We aim to respond within five business days. Supervisory authority: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, Sweden, imy.se.