Last updated: 1 January 2025
This Privacy Policy describes how GridlingtonAI ("we", "us", or "our") collects, processes, and protects personal data obtained through gridlingtonai.org. We are committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We handle all personal information with care, transparency, and respect for your rights.
GridlingtonAI acts as the data controller for all personal information collected via this website. Our principal place of business is 14 Threadneedle Street, London EC2R 8AY, United Kingdom. For all data protection enquiries, please contact us at [email protected].
When you submit our contact form, we collect your name and email address together with any details you provide in your message. We also collect technical information automatically through cookies and server logs, including your IP address, browser type and version, operating system, referring URL, pages visited, and session duration. This technical information helps us maintain and improve the performance of our website.
We use your personal data to respond to enquiries you submit through our website, to provide the consulting services you have requested, and to send relevant follow-up communications where you have consented or where we have a legitimate interest in doing so. Technical data is used solely to ensure the security and performance of our website and to identify and resolve technical issues.
We process personal data on the following grounds: your consent (given when you submit our contact form), the necessity of processing to take steps at your request prior to entering a contract, our legitimate interests in operating and improving our business (where these are not overridden by your fundamental rights), and compliance with legal obligations to which we are subject as a UK-registered business.
We retain enquiry data for up to three years from the date of last contact, after which it is securely deleted unless a contractual or legal obligation requires longer retention. Technical log data is retained for no more than twelve months. You may request early deletion of your data at any time by contacting us, and we will respond within 30 days.
Under UK GDPR, you have the right to access a copy of the personal data we hold about you, to correct inaccurate data, to request erasure of your data, to restrict or object to processing, and to receive your data in a portable format. You also have the right to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at [email protected]. You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.
We do not sell or rent your personal data to any third party. We may share data with trusted service providers who assist us in operating our website and business, under strict data processing agreements that prohibit those providers from using your data for any purpose other than providing the services we have contracted them for. We will disclose data to authorities where required by law.
We review and update this Privacy Policy periodically to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to check this page occasionally. Continued use of our website following any changes constitutes acceptance of the updated policy.