What we store, and why.

This notice explains what personal data Alvio collects from website visitors, inquirers and customers, and why. We name the data, the lawful basis, how long we keep it, and how to exercise your rights. Minimum necessary, always.

Controller: who we are.

Alvio (sole proprietorship), principal Ágúst Björnsson. Contact: alvio@alvio.is.

What we collect: two categories.

1. Inquiry form data. When you submit the contact form, we receive your name, company, role, email, optional phone number, the product you indicated interest in, and your free-text message. We store these in Microsoft Dataverse inside the Alvio tenant.

2. Engagement data. If you become a customer, we collect the data the engagement requires: meeting notes, prototype configurations, your tenant access (under your IT's control), and the artifacts we produce together. This data lives inside your tenant in most cases; copies we hold are encrypted in Alvio's Microsoft 365 tenant.

Lawful basis: consent, contract, legitimate interest.

The inquiry form: explicit consent (you tick the box). Engagement data: contract performance. Limited follow-up after a non-converted inquiry: legitimate interest, with the right to opt out at any time.

Retention: plain numbers.

  • Inquiry data that does not convert to a paid engagement: reviewed at 24 months, deleted by 36 months.
  • Customer engagement data: retained for the duration of the engagement plus seven years (accounting and audit requirements), then deleted.
  • Web analytics (Application Insights): aggregated, retained for 90 days. No third-party trackers.

Your rights: access, rectify, erase, restrict, port, object.

Email alvio@alvio.is to request any of these. We respond within thirty days, usually within one working week. If you believe we have mishandled your data, you can complain to Persónuvernd (the Icelandic Data Protection Authority) at personuvernd.is.

Cookies: none worth a banner.

The Alvio site uses no third-party trackers. The Power Pages platform sets a small number of strictly-necessary cookies for session integrity. No advertising cookies, no analytics cookies that leave the Microsoft tenant, no cross-site tracking.

Last updated

2026-05-15.