What we store, and why.

// Controller

Who we are.

Alvio (sole proprietorship), principal Ágúst Björnsson. Contact: agust@alvio.is.

// What we collect

Two categories.

1. Enquiry form data. When you submit the contact form, we receive your name, company, role, email, optional phone number, the product you indicated interest in, and your free-text message. We store these in Microsoft Dataverse inside the Alvio tenant.

2. Engagement data. If you become a customer, we collect the data the engagement requires: meeting notes, prototype configurations, your tenant access (under your IT's control), and the artefacts we produce together. This data lives inside your tenant in most cases; copies we hold are encrypted in Alvio's Microsoft 365 tenant.

// Lawful basis

Consent, contract, legitimate interest.

The enquiry form: explicit consent (you tick the box). Engagement data: contract performance. Limited follow-up after a non-converted enquiry: legitimate interest, with the right to opt out at any time.

// Retention

Plain numbers.

• Enquiry data that does not convert to a paid engagement: reviewed at 24 months, deleted by 36 months.
• Customer engagement data: retained for the duration of the engagement plus seven years (accounting and audit requirements), then deleted.
• Web analytics (Application Insights): aggregated, retained for 90 days. No third-party trackers.

// Your rights

Access, rectify, erase, restrict, port, object.

Email agust@alvio.is to request any of these. We respond within thirty days, usually within one working week. If you believe we have mishandled your data, you can complain to Persónuvernd (the Icelandic Data Protection Authority) at personuvernd.is.

// Cookies

None worth a banner.

The Alvio site uses no third-party trackers. The Power Pages platform sets a small number of strictly-necessary cookies for session integrity. No advertising cookies, no analytics cookies that leave the Microsoft tenant, no cross-site tracking.

// Last updated

2026-05-15.