Privacy policy

Maya Irwin Transformational Change Limited (“Maya Irwin”, “we”, “our”) is a company incorporated in Scotland with its registered office at 99 Moira Terrace, Edinburgh EH7 6SJ. We are the data controller for personal data collected through our website, and a data processor for interview transcripts and organisational content uploaded into the Maya Irwin service by our customers.

You can contact us at support@mayairwintransformational.com or on +44 7845 251998.

Account data: name, work email, organisation, role, billing address and payment metadata provided by our payments processor.

Service data: content you upload into a workspace (interview transcripts, meeting notes, free-text survey responses, consultant annotations), plus derived analysis outputs (themes, quotes, readiness scores).

Usage data: authentication events, page navigation, errors, and billing activity necessary to operate the service.

Support data: messages you send via email or the contact form, together with any attachments.

To provide and improve the Maya Irwin service, including running analyses, producing reports and maintaining account security.

To handle billing, invoicing, tax compliance and prevent fraud.

To communicate with you about your account, product updates and security notices.

To meet our legal, regulatory and contractual obligations.

We do not sell your personal data or customer content, and we do not use customer content to train third-party AI models.

Where you are based in the UK or EU/EEA, we rely on the following legal bases under UK GDPR and EU GDPR:

Contract — to deliver the service you have signed up for.

Legitimate interests — to secure, operate and improve the service in ways you would reasonably expect.

Consent — for optional marketing communications, which you can withdraw at any time.

Legal obligation — for tax, accounting and anti-fraud requirements.

We use a short list of sub-processors to operate the service, including cloud hosting, AI inference, payments and error monitoring. All sub-processors are bound by written contracts with data protection terms consistent with this policy.

The current sub-processor list is available on request at support@mayairwintransformational.com. We will notify customers in advance of any material change.

Customer data is stored on infrastructure located in the United Kingdom and the European Economic Area. For customers on the Organisation plan, we offer a single-region data residency option on request.

Where personal data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Agreement or EU Standard Contractual Clauses and apply supplementary safeguards as appropriate.

Account data is retained for the lifetime of your contract with us plus up to 24 months for billing, audit and legal purposes.

Customer content (transcripts, derived outputs) is retained for as long as the customer's workspace is active and is deleted within 30 days of a verified deletion request, or at the end of a contractual retention window.

If you are in the UK or EU/EEA you have rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

To exercise any of these rights, email support@mayairwintransformational.com. We aim to respond within 30 days.

We encrypt data in transit and at rest, enforce role-based access for staff, and keep detailed audit logs of administrative activity.

No system is perfectly secure. If you believe your account has been compromised, contact support immediately so we can help contain and investigate.

Maya Irwin is a decision-support tool for organisational and workplace content. It is not designed or licensed for medical, clinical, psychological or legal diagnosis, and customers agree not to use it for those purposes.

Customers remain responsible for obtaining appropriate consents from interview participants and for handling special category data (such as health or trade union information) in line with their own legal obligations.

We use a small number of strictly necessary cookies to keep you signed in and to secure the service. We use privacy-respecting analytics to measure aggregate site usage. We do not run third-party advertising cookies on this site.

We may update this policy to reflect changes in law, our service or our sub-processors. Material changes will be notified by email and via the website. This version is effective as of the date shown below.