Legal

Privacy Policy

Effective Date: May 2, 2026  ·  Last Updated: May 2, 2026

Havaya ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it when you visit our website or engage with our consulting services.

1. Who We Are

Havaya is an ISO management system consultancy serving manufacturers and technology companies across the United States and Canada. If you have questions about this policy, please contact us.

2. Information We Collect

We collect information in the following ways:

  • Information you provide directly — When you fill out our contact form, book a discovery call, or correspond with us by email, we collect your name, email address, company name, and any other details you choose to share.
  • Information collected automatically — When you visit our website, we may collect standard technical data such as your IP address, browser type, pages visited, and the date and time of your visit. This is collected through server logs and, where applicable, analytics tools.
  • Client engagement data — During a consulting engagement, we may collect business information you share with us such as organizational documents, process data, and personnel details, solely for the purpose of delivering our services.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and schedule discovery calls
  • Deliver and improve our consulting services
  • Send you relevant updates, resources, or follow-ups you have requested
  • Understand how our website is used so we can improve it
  • Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (Where Applicable)

Where privacy laws require a legal basis for processing personal data, we rely on the following:

  • Contract — Processing necessary to deliver consulting services you have engaged us for
  • Legitimate interests — Operating and improving our website, and communicating with prospective clients
  • Consent — Where you have explicitly opted in to receive communications from us
  • Legal obligation — Where we are required to process data to comply with applicable law

5. How We Share Your Information

We may share your information with:

  • Service providers — Third-party tools we use to operate our business (e.g., email, scheduling, document storage). These providers are contractually bound to handle your data securely and only for the purpose of providing services to us.
  • Professional advisors — Lawyers, accountants, or auditors where necessary
  • Regulatory authorities — Where required by law or legal process

We do not share client engagement data with any third party without your explicit consent, except as required by law.

6. Cookies and Tracking

Our website may use cookies or similar technologies to improve your browsing experience and understand how the site is used. These may include:

  • Essential cookies — Required for basic website functionality
  • Analytics cookies — Used to understand visitor behavior in aggregate, anonymized form

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Enquiry and contact data is typically retained for up to two years. Client engagement data is retained for as long as required to support the engagement and any applicable legal or regulatory requirements.

8. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — Request a copy of the personal information we hold about you
  • Correction — Request that we correct inaccurate or incomplete information
  • Deletion — Request that we delete your personal information, subject to certain exceptions
  • Objection or restriction — Object to or request that we restrict certain types of processing
  • Data portability — Request that we provide your data in a portable format
  • Withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us. We will respond within a reasonable timeframe and in accordance with applicable law.

10. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top of this page when we do. Continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please reach out: