Last updated: 1 January 2025
This Privacy Policy describes how GridlingtonAI ("we", "us", or "our") collects, uses, and protects personal data when you visit gridlingtonai.site or enquire about our services. We are fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and to being transparent about how we handle your information.
GridlingtonAI is the data controller for all personal information collected via this website. Our registered office is at 30 St Mary Axe, London EC3A 8BF, United Kingdom. For any data protection enquiries, please contact us at [email protected]. We take all privacy enquiries seriously and will respond promptly and thoroughly.
We collect the following categories of personal information: contact information you provide voluntarily when submitting our enquiry form, including your name, email address, and the content of your message; and technical information collected automatically when you browse our website, including your IP address, browser type and version, pages visited, time spent on pages, device type, and referring URL. This technical data is collected through cookies and similar tracking technologies.
We use your personal data to respond to your enquiries, to provide the consulting services you have requested, and to communicate with you about your account or project where applicable. Technical data is used to monitor website performance, ensure security, and improve content and user experience. We do not use your personal data for direct marketing unless you have expressly opted in, and we never sell, rent, or exchange personal data with third parties for commercial purposes.
Our processing of personal data is based on the following legal grounds: your consent where explicitly provided, the necessity of processing to fulfil a contract or pre-contractual steps at your request, our legitimate interests in running and improving our business (subject to a balancing assessment confirming these do not override your rights), and compliance with legal obligations imposed on us as a UK business. We document our legal basis for each processing activity as required by UK GDPR.
We retain contact and enquiry data for a maximum of three years from the date of last meaningful contact. Technical and analytics data is retained for no more than twelve months. Where we have entered a contractual relationship with you, relevant records are kept in accordance with applicable legal and accounting requirements. You may request deletion of your personal data at any time, and we will fulfil such requests within 30 days subject to any overriding legal obligation to retain the data.
You have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have your data erased in certain circumstances, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of your rights, please contact us at [email protected]. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encrypted data transmission, access controls, and regular security reviews. While we take all reasonable steps to protect your data, no system is completely immune to risk and we cannot guarantee absolute security of information transmitted over the internet.
We review this Privacy Policy periodically and update it to reflect changes in our practices or applicable legislation. The date at the top of this document indicates when it was last revised. Continued use of gridlingtonai.site following any update to this policy constitutes your acknowledgement of the changes.