Privacy
Short, because we collect very little. An agency that audits other people's data hygiene should be able to explain its own on one page.
What we collect
When you use the website: page views, counted without cookies and without identifying you. We use a cookieless analytics tool, which is why there's no consent banner to dismiss. We don't run advertising pixels, we don't run cross-site tracking, and we don't share anything with advertising networks.
When you request an alignment check: your name, business name, email, phone number if you give one, your domain, and whatever you write in the message box.
When you email us: whatever is in the email.
That's the complete list.
What we do with it
Send you the report. Reply to you. Keep a record of the conversation so we're not asking you the same questions in six months. Nothing else.
What we don't do
We don't sell your data. We don't share it with partners. We don't add you to a newsletter you didn't ask for. We don't run a nurture sequence. If you don't reply, we don't chase you.
How long we keep it
Alignment check requests: two years, then deleted. Client records: for the engagement plus the period accounting rules require [VERIFY: Maldivian retention requirement]. Email: as long as the thread is useful.
Your choices
Ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. Email hello@islandtodo.mv. We'll do it within five working days and confirm when it's done. You don't need to give a reason.
Who else touches it
Our email provider, our analytics provider, our CRM, and our hosting provider [VERIFY: name each against the live stack]. We don't use any tool that resells data.
The alignment check itself
When you request a check we look at public records — registrar data, business profiles, social accounts, listings — and at your website as any visitor would. We don't attempt access to anything, we don't scan or probe your systems, and we don't retain anything beyond the report we send you.