Invenio Protocols Limited
Privacy notice
Last updated 22 August 2026
This notice covers the Invenio HALO website and its pilot enquiry form. It does not describe the HALO product in operation at a venue; that processing is governed separately by a pilot agreement and its own data-flow inventory.
Who is the controller
Invenio Protocols Limited is the controller for details submitted through this site. Invenio HALO is a product of Invenio Protocols Limited. The operation is based in Ireland and processes personal data under EU law.
For any privacy question, correction or deletion request, contact the founder directly at ahmed@invenioprotocols.com.
What is collected, and only what is asked for
The pilot enquiry form collects: your property or venue name, your name and role, your work email address, the type of operation you run, optionally the zones where requests go missing, and optionally a free-text description of what breaks today.
No cookies are set. No analytics, tag manager, session recorder, advertising pixel or third-party script runs on this site. Fonts are served from this site's own domain, so no font provider receives your IP address. Form submissions are received through the site's hosting provider.
Why, and on what lawful basis
Purpose: to reply to your enquiry and assess whether a paid pilot is a sensible fit. Nothing else.
Lawful basis: legitimate interests (Article 6(1)(f) GDPR) in responding to a business enquiry you initiated, and where a pilot proceeds, the performance of a contract (Article 6(1)(b)).
Your details are never sold, never used to build a marketing list without separate consent, and never enriched with third-party data.
How long it is kept
Enquiries that do not lead to a conversation are deleted within twelve months. Enquiries that lead to a pilot discussion are retained for the duration of that relationship and for six years afterwards where required for contractual or tax record-keeping.
You may ask for earlier deletion at any time and it will be actioned unless a legal retention duty applies.
Who else sees it
Recipients are limited to the founder and any professional adviser engaged on a specific pilot, plus the email and hosting providers required to deliver the message. Any processor used is bound by a data-processing agreement, and the current processor list is available on request.
Where a provider processes data outside the EEA, transfers rely on an adequacy decision or Standard Contractual Clauses.
Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with the Irish Data Protection Commission or your local supervisory authority.
Requests are answered within one month. No automated decision-making or profiling takes place on this site.
Accessibility and accommodation
If any part of this site or the enquiry route is difficult to use, say so in the enquiry or by email and an alternative route will be arranged, including a plain-text email exchange or a phone conversation instead of the form.
This notice describes the website only and is not legal advice. It is scheduled for review by qualified counsel before public launch.