Privacy Policy

1. Introduction

GroAI ("we", "us", or "our") is an AI development studio registered in the United Kingdom. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at groai.co.uk and use our services.

2. Data Controller

GroAI is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at:

• Email: team@groai.co.uk
• Address: 128 City Road, London, EC1V 2NX, United Kingdom

3. Information We Collect

3.1 Information you provide directly

When you use our contact form on the enquiries page, we collect:

• Full name
• Email address
• Phone number (optional)
• Company name (optional)
• Message content

3.2 Information collected automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website address

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to enquiries: When you submit a message through our contact form, we use your details to reply to your enquiry and discuss potential work together.
• To improve our website: We use anonymous usage data to understand how visitors interact with our site and to improve the user experience.
• To comply with legal obligations: We may process your data where necessary to comply with applicable laws and regulations.

5. Legal Basis for Processing

We process your personal data on the following legal grounds under the UK GDPR:

• Consent: When you submit our contact form, you consent to us processing your data to respond to your enquiry.
• Legitimate interests: We have a legitimate interest in understanding how our website is used so we can improve it, provided this does not override your rights.

6. Cookies

Our website uses cookies to ensure basic functionality and to remember your cookie preferences. When you first visit our site, you will be presented with a cookie banner allowing you to accept or decline cookies.

6.1 Essential cookies

These are necessary for the website to function and cannot be switched off. They include cookies that remember your cookie consent preference.

6.2 Analytics cookies

If you accept cookies, we may use analytics tools to collect anonymous data about how visitors use our website. This data is aggregated and does not personally identify you.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting our website.

7. Third-Party Services

We use the following third-party services that may process your data:

• Web3Forms: Our contact form submissions are processed through Web3Forms, which transmits your form data securely to our email. Web3Forms does not store your data beyond delivery. Their privacy policy is available on their website.
• Vercel: Our website is hosted on Vercel. Vercel may collect standard server logs including IP addresses. For details, refer to Vercel's privacy policy.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: Retained for up to 24 months from the date of your enquiry, unless an ongoing business relationship is established.
• Cookie preferences: Stored in your browser and expire after 12 months.
• Server logs: Retained by our hosting provider in accordance with their data retention policies.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, please email us at team@groai.co.uk. We will respond to your request within one month.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website is served over HTTPS, ensuring that data transmitted between your browser and our servers is encrypted.

11. International Transfers

Your data may be processed outside the United Kingdom by our third-party service providers (such as Vercel and Web3Forms). Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with UK data protection law.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113