Privacy · Covered by ISO 27001

What we collect, and why it's safe.

Three kinds of data pass through Takeoff Media: what this website records about visits, what you type into our chat, and what we hold about clients and employees. All three sit inside the same certified information security management system, and this page says what each one is.

01 — Coverage
ISO
27001
2022 revision

One management system
covers all of it.

The website analytics, the chat transcripts, and the client and employee data we manage are all in scope of the information security management system that UNIT audited and certified. The same risk assessment, access controls, training and incident process apply to each.

Certificate
Nº SGSI22 030
Valid to
26 March 2029
Entity
Takeoff Media S.R.L., Montevideo
How we run security

Controller · Takeoff Media S.R.L. · Víctor Soliño 349, P.11, Montevideo, Uruguay

02 — Analytics

Anonymized analytics,
after consent.

We measure how the site is used with Google Analytics 4: which pages get read, how visitors arrive, and what device they use. The data is aggregated and anonymized. We do not collect names, email addresses or any other detail that identifies a visitor.

WEB 01

What is recorded

Pages viewed, referring site, approximate location at country level, browser and device type, and the time spent on the page. Google Analytics 4 does not log or store IP addresses.

WEB 02

Nothing loads before you agree, where the law asks for that

If you visit from the European Economic Area, the United Kingdom, California or Brazil, the analytics script is not requested from Google until you accept the banner. If you decline, it never loads. Elsewhere, measurement starts without a banner.

WEB 03

Working out where you are does not keep your address

The banner decides whether to appear from a country code that our network edge supplies. Your IP address is not returned, logged or stored by that check.

WEB 04

Your choice stays on your device

Your answer to the banner is saved in your browser for up to a year, so you are not asked on every page. Clearing site data in your browser resets it.

03 — Chat

Chat transcripts
are kept as a record.

When you use the chat on /start, the messages you send and the replies you receive are stored as a transcript. A person at Takeoff Media reads every conversation, and the transcript is how we follow up when you ask us to.

Collected

Your messages and the replies

The text of the conversation, the time of each message, and a random session identifier.

Used for

Answering and following up

The chat will ask for your name and email, so we can reach out. If you type them, they are kept in the transcript and securely managed as transferred PII (Personally Identifiable Information).

Session

Ends after 5 idle minutes

The session identifier lives in your browser tab and is discarded after five minutes without activity. The next message opens a new conversation.

Your part

Keep secrets out of it

Please do not type passwords, payment details or government ID numbers into the chat. Nothing we do there requires them.

04 — Company data

Client and employee data
under the same controls.

Beyond the website, Takeoff Media manages information entrusted to it by clients and by the people who work here. It is processed to deliver the contracted work or to employ and pay people, and for no other purpose.

DATA 01

Client data

Information a client shares or exposes to us during an engagement is handled under that engagement's contract and security review. AI tools touch it only where the client has approved them in writing, and credentials never enter an agent's working context.

DATA 02

Employee data

Records about the people who work at Takeoff Media, such as employment, payroll and contact details, are kept by the company, with access limited to those who need them to do their job.

DATA 03

Safeguards that apply to both

An infosec lead on every pod, mandatory annual and onboarding security training, endpoint and cloud monitoring, a 24/7/365 incident team, and every agent action logged against its session. Details are on the security page.

DATA 04

Sharing

We do not sell personal data. It is shared with service providers only where delivering the work requires it, under agreements that carry the same obligations we hold ourselves to.

05 — Your rights

Ask us what we hold,
and we will tell you.

You can ask to see the personal data we hold about you, to correct it, or to have it deleted. Takeoff Media S.R.L. is based in Uruguay, so Uruguayan data protection law (Ley 18.331) applies, alongside the GDPR, CCPA and LGPD for visitors from those regions. Send the request to the address below and we will reply.

06 — Contact