Security & Privacy

Data minimisation by design

The strongest protection is not collecting data in the first place. This website has no login, no user profiles, no file uploads, no payment processing and no third-party analytics or advertising scripts. The only personal data we receive is what you choose to type into the contact form.

Encryption

• All traffic is served over HTTPS/TLS, so everything you read and submit is encrypted in transit.
• Contact submissions are stored in a managed cloud database that encrypts data at rest.
• Email notifications are delivered over authenticated, encrypted connections from our notify.idiasolution.com sending domain, protected by SPF, DKIM and DMARC alignment.

Form and input security

• Every submission is validated twice — in the browser and again on the server — with strict length and format limits before anything is stored.
• A hidden honeypot field silently discards automated spam submissions.
• Database writes use parameterised queries through our provider's client, so form input can never be executed as a query.
• The contact table is closed to public access; only our server-side endpoint can write to it, and reads are restricted to our team.
• Submissions are stored with a unique identifier and de-duplicated email delivery keys, so a retried request cannot create duplicate records or repeated emails.

Access control and secrets

Access to the database and email systems is limited to the small number of people who operate them. Service credentials are held as server-side secrets, are never exposed to the browser, and are rotated if there is any suspicion of exposure. Nothing sensitive is embedded in the pages you download.

No account, no session risk

Because this website has no authentication, there are no passwords, sessions or tokens to steal here. Where our separate products do offer accounts, they enforce their own authentication, password strength requirements and session handling, documented on those products’ own websites.

Retention and deletion

Contact submissions are kept while your enquiry is open and for up to 24 months afterwards, then deleted. You can ask us to delete your message and related correspondence sooner at any time — email team@idiasolution.com and we will confirm once it is done. You may also request a copy of what we hold about you. Full details are in our Privacy Policy.

Monitoring and incidents

Server-side errors are logged and monitored so we can detect faults and abuse quickly. If a security incident ever affected personal data you sent us, we would investigate immediately, notify affected individuals and, where required, the relevant supervisory authority without undue delay.

Responsible disclosure

We welcome security reports. Email team@idiasolution.com with the subject “Security report” and steps to reproduce. Please give us reasonable time to fix an issue before disclosing it publicly, avoid accessing data belonging to others, and do not run disruptive tests. We will not pursue action against good-faith research that follows these principles — see our Acceptable Use Policy.

Current status

This website is in a trial and beta phase. We review these practices as the site grows — notably before any feature that introduces accounts, uploads or payments, none of which exist today.