Privacy Policy

1. Who we are

This website and our services are operated by Greyfall Automations Ltd ("we", "us", "our"), a business providing AI automation services to organisations.

If you have questions about this policy, you can contact us at privacy@greyfall.co.uk.

2. What this policy covers

This policy applies when you:

• Visit our website greyfall.co.uk (and any subdomains).
• Fill in a contact form, demo request, or strategy-call form.
• Communicate with us by email, phone, or messaging apps.
• Use our services as a customer or prospective customer.

For full client projects, detailed data processing terms are set out in our Data Processing Agreement or contract and will override this policy where they differ.

3. Data we collect

The types of personal data we may collect include:

• Contact and identity data – name, job title, company name, email address, phone number.
• Business and project information – information about your business, systems, workflows, and goals that you share with us.
• Usage and technical data – IP address, browser type, pages visited, and similar analytics data, typically collected via cookies or similar tools.
• Communication data – emails, messages, and call notes.

4. How we use your data

We use personal data for purposes such as:

• Responding to enquiries and providing proposals.
• Delivering services under our contracts.
• Monitoring and improving our website and services.
• Keeping appropriate business records and complying with legal obligations.

Our main legal bases are consent, performance of a contract, and our legitimate interests in running and improving our business.

5. Sharing your data

We do not sell personal data. We may share it with:

• Service providers who host our systems, provide analytics, or help us operate our business.
• Professional advisers such as lawyers or accountants where necessary.
• Regulators or authorities where we are legally required to do so.

Where providers are outside the UK or EEA, we use appropriate safeguards aligned with UK GDPR requirements.

6. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. We may retain some records for longer where the law requires it.

7. Your rights

Depending on where you are based, you may have rights over your personal data, including:

• Access to a copy of your data.
• Correction of inaccurate or incomplete data.
• Erasure of data in certain circumstances.
• Restriction or objection to certain types of processing.
• Data portability (receiving your data in a usable format).

To exercise these rights, contact us at privacy@greyfall.co.uk.

8. Cookies & analytics

We may use essential cookies and privacy-friendly analytics to understand how visitors use our site and to keep it secure. You can control cookies through your browser settings. If you block certain cookies, some parts of the site may not work as intended.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of the page. We encourage you to review it periodically to stay informed about how we protect your data.