Privacy notice

Who is responsible

The controller for the processing described here is Lethra Technologies Ltd., Griva Digeni 78, 2nd Floor, Flat/Office B1, 3101 Neapoli, Limassol, Cyprus, registered under HE 494333. Write to office@lethra.io for anything in this notice, including a request to exercise the rights below. Company details are in the imprint. We have not appointed a data protection officer; enquiries reach the people who built the site.

What this site does not do

Nothing is loaded from a third-party domain. No tag manager, no advertising pixel, no embedded fonts, scripts, styles or images from anywhere but lethra.io. Analytics is served from lethra.io too, through this site's own path rather than from an analytics vendor's domain. You can confirm all of this in your browser's network inspector, which is a better assurance than this paragraph.

Measurement, and your choice about it

We measure how the site is used, so that we can tell which pages are read, which parts of the application form people abandon, and which of them ever worked at all. The tool is PostHog, running on its European infrastructure as our processor.

On your first visit you are asked. Until you answer, and if you decline, nothing is written to your device: the visit is counted through a value PostHog derives on its own servers, which does not follow you to your next visit and cannot be traced back to you. If you accept, a cookie and a local storage entry are set so that repeat visits can be recognised as the same browser, and a recording of the pages you interact with may be made. Recordings mask every form field, so what you type is never in them.

The lawful basis differs by answer. Reading from or writing to your device happens only on your consent, Article 6(1)(a); those entries expire after twelve months at the latest, and the measurement behind them is kept only while it still tells us something about how the site is working, which in practice means until the page it describes has been rewritten. Counting a declined visit without touching your device rests on our legitimate interest in knowing how the site performs, Article 6(1)(f), balanced against an identifier that cannot be resolved to you. You may object to it at any time at office@lethra.io. Withdrawing consent is as easy as giving it, costs nothing, and does not make the processing that already happened unlawful.

PostHog processes this on our documented instruction under a processing agreement, on European infrastructure. Nothing in it is transferred outside the European Economic Area, and there is no automated decision-making and no profiling that produces a legal effect for you.

Either way we see the page addresses you open, the referring address, your browser and device type, and roughly where the request came from. That last part is worth spelling out rather than summarising, because "location" can mean very different things: our processor derives your continent, country, region and city, a pair of coordinates, and a time zone. The coordinates carry a stated accuracy radius of about fifty kilometres and describe the middle of an area, not a place you have been. Your IP address is used to work all of that out and is then discarded rather than stored on the measurement. We do not sell any of this, and it is not combined with anything from an advertising network.

Your answer to the question above is also written down on our side, so that we can show what was asked and what was answered rather than only asserting it. That record is the choice itself, the version of this wording that was on screen, the country and browser derived from the request, when it happened, and, unlike the measurement, your IP address itself. It is there because a consent record that cannot be tied to the request it came from proves very little. It is kept apart from the measurement, used for nothing else, and it is the one thing we store about you even when you decline, because a decline that leaves no trace is indistinguishable from never having asked.

Your answer is remembered in one local storage entry, which is the only thing stored on your device if you decline. You can change it at any time: reopen the choice, or clear this site's storage in your browser.

Advertising

If you reach the site from an advertisement, the click identifier the advertising platform appends to the address is stored with your enquiry. We use it to tell the platform that its click led somewhere, so that it stops spending on the ones that do not. That report is sent from our systems to the platform, not from your browser, and it carries the fact of the conversion rather than what you wrote.

Server logs

The site is served from Vercel. Standard request logs are processed by the hosting provider for delivery and abuse prevention. We do not build profiles from them and we do not combine them with anything else.

The contact form

If you submit the form, we receive the name, company, work email, vertical, volume band and message you entered, together with the fact and time of your consent. The lawful basis is your consent, given by ticking the box, and our purpose is to answer your enquiry and, if it goes further, to run a test-partner conversation with you.

We keep enquiry correspondence for as long as the conversation is live and for a reasonable period afterwards, then delete it. You can withdraw consent or ask for deletion at any time by writing to office@lethra.io, and withdrawal does not affect processing that already happened.

The form is processed on our own infrastructure and the resulting message reaches us by email. We do not sell or share the details, and we do not add you to a mailing list you did not ask for.

What you typed does not go to the analytics described above. Measurement records that an application was sent, which vertical and volume band it named, and how long it took, and nothing else. Your name, your email address and your message stay in our own database and in the notification mail, under the consent you gave on the form.

Your rights

You may request access to the personal data we hold about you, its correction or erasure, restriction of processing, and portability, and you may object to processing carried out on our legitimate interest. Where processing rests on consent, you may withdraw it at any time with effect for the future: reopen the measurement choice or write to us. We answer within one month.

Write to office@lethra.io. You may also lodge a complaint with a supervisory authority, for us the Office of the Commissioner for Personal Data Protection in Cyprus, or with the authority where you live or work.

Documents held through the Lethra service

This notice covers the website. It does not cover documents processed through the Lethra platform by a partner. In that relationship the partner is the controller and Lethra is the processor, acting on the partner's instruction under a separate data processing agreement. Those documents reach us already encrypted with a key that never transits our systems, so we hold ciphertext and the metadata the partner chooses to send.

Controller

Lethra Technologies Ltd.
Griva Digeni 78, 2nd Floor, Flat/Office B1
3101 Neapoli, Limassol, Cyprus
office@lethra.io