Privacy Policy

---

Effective date: 15 July 2026

AIGENUITY LTD is a private limited company registered in England and Wales.

Company number: 16506716
Registered office: 14 Museum Place, 4th Floor, Cardiff, United Kingdom, CF10 3BH
Privacy contact: aigenuityltduk@gmail.com

For the purposes of applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, AIGENUITY LTD is the data controller responsible for the personal data described in this privacy policy.

This privacy policy explains how AIGENUITY LTD collects, uses, stores and shares personal data in connection with:

• our websites;
• enquiries and communications;
• customer and technical support;
• our applications, products and online services;
• purchases, subscriptions and commercial relationships;
• marketing communications; and
• other services that link to this privacy policy.

Some products have their own product-specific privacy notices. Where a product-specific notice differs from this general policy, the product-specific notice applies to the processing associated with that product.

The information we collect depends on how you interact with us and which services you use.

This may include:

• your name;
• your email address, telephone number or other contact details;
• the company or organisation you represent;
• enquiries, correspondence and support messages;
• account details where a product requires an account;
• purchase, subscription and transaction information;
• information you provide in forms, surveys or feedback;
• diagnostic information you deliberately provide when requesting support; and
• marketing and communication preferences.

Please do not send us sensitive personal information unless it is necessary for us to deal with your request.

When you access our websites or internet-connected services, our systems or hosting providers may process:

• your Internet Protocol address;
• browser and device type;
• operating system;
• date and time of access;
• pages or resources requested;
• referring website;
• approximate location derived from an IP address;
• error, security and diagnostic records; and
• cookie or consent preferences.

This information may be contained in normal web-server and security logs even where we do not use analytics cookies.

Our applications and products may process information needed to provide their functions.

The relevant product page or product-specific privacy notice will explain:

• what information the product accesses;
• whether processing happens locally or on our servers;
• what information is transmitted;
• which third-party services are involved; and
• how product information can be deleted.

We may receive information from:

• app stores and software-distribution platforms;
• payment processors;
• hosting and infrastructure providers;
• authentication providers;
• analytics or diagnostic providers, where used;
• business customers or partners;
• publicly available business sources; and
• professional advisers or authorities.

We only use such information for purposes compatible with the reason it was provided.

We may use personal data for the following purposes.

We use information to:

• provide requested products, services and functionality;
• create and administer accounts;
• process purchases or subscriptions;
• authenticate users;
• deliver updates;
• maintain service availability; and
• fulfil our contractual commitments.

Our lawful basis is normally the performance of a contract with you or taking steps at your request before entering into a contract.

We use contact details, messages and relevant diagnostic information to:

• respond to enquiries;
• provide technical support;
• investigate faults;
• communicate service information; and
• maintain records of how an issue was resolved.

Our lawful basis is normally the performance of a contract, taking requested pre-contractual steps, or our legitimate interests in supporting users and operating our business.

We may use technical, usage and security information to:

• maintain and troubleshoot our websites and services;
• prevent fraud, abuse and unauthorised access;
• investigate security incidents;
• measure reliability;
• improve usability and performance; and
• plan future product development.

Our lawful basis is normally our legitimate interests in operating, protecting and improving our business and services.

Where optional analytics or tracking requires consent, we will request consent before enabling it.

We may process information to:

• maintain financial and company records;
• respond to lawful requests;
• establish, exercise or defend legal claims;
• enforce our agreements;
• protect our legal rights; and
• comply with applicable law.

Our lawful basis is compliance with a legal obligation or our legitimate interests in protecting our rights.

Where permitted, we may use contact information to send news or information about our products.

We will rely on consent where consent is required. In other permitted circumstances, we may rely on legitimate interests, subject to your right to object.

You may unsubscribe at any time by using the unsubscribe facility in the communication or contacting us.

We will not sell your personal data to third parties.

Our websites may use cookies and similar storage technologies.

Essential technologies may be used to:

• operate website features;
• maintain security;
• remember privacy choices;
• balance traffic; and
• prevent fraud or abuse.

Where we use non-essential analytics, advertising or marketing technologies, we will request consent where required by law.

You can manage available choices through the cookie controls displayed on the relevant website and through your browser settings.

Blocking essential storage technologies may prevent parts of a website or service from operating properly.

We may disclose personal data to carefully selected recipients where necessary, including:

• website, cloud and infrastructure providers;
• email and communication providers;
• customer-support providers;
• payment processors and app stores;
• authentication, security and fraud-prevention providers;
• analytics and diagnostic providers, where disclosed and enabled;
• accountants, lawyers, insurers and other professional advisers;
• prospective purchasers, investors or advisers involved in a corporate transaction; and
• courts, regulators, law-enforcement bodies or other authorities where disclosure is legally required or reasonably necessary.

Service providers acting on our behalf are permitted to process personal data only for the agreed purposes and must protect it appropriately.

Some third parties, such as app stores and payment providers, may also act as independent data controllers under their own privacy policies.

Some service providers may process personal data outside the United Kingdom.

Where a transfer is subject to UK data protection restrictions, we will use an appropriate transfer mechanism, such as:

• a country covered by UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission’s Standard Contractual Clauses;
• another legally recognised safeguard; or
• a permitted legal exception where appropriate.

Where European Economic Area data protection law also applies, we will use an appropriate mechanism recognised under that law.

You may contact us for further information about safeguards relevant to your personal data.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The period depends on:

• the nature of the information;
• the product or service involved;
• whether an account or contract remains active;
• the length of the customer or support relationship;
• security and fraud-prevention requirements;
• applicable limitation periods;
• tax, accounting and regulatory requirements; and
• whether information is needed for a legal dispute.

In general:

• enquiry and support records are retained while the matter is active and for a reasonable period afterwards;
• account information is retained while the account remains active and for a reasonable period after closure;
• transaction and financial records are retained for the period required by applicable law;
• security and server logs are retained only while reasonably needed for security, diagnosis and abuse prevention;
• marketing information is retained until consent is withdrawn or an objection is received;
• limited suppression records may be retained to ensure that an opt-out continues to be respected; and
• anonymised information that can no longer identify an individual may be retained for research, statistical and service-improvement purposes.

Product-specific retention information may be provided in the relevant product privacy notice.

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

These measures may include access controls, encryption where appropriate, software updates, logging, backups and restrictions on who may access personal data.

No internet transmission or storage system can be guaranteed to be completely secure.

We maintain procedures for responding to suspected personal-data breaches.

Where required by applicable law, we will notify the Information Commissioner’s Office or another relevant supervisory authority. We will also notify affected individuals where the law requires us to do so.

Depending on the circumstances and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• receive certain information in a portable format;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw consent where processing is based on consent; and
• complain to a data protection supervisory authority.

Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

Some rights are subject to conditions and legal exceptions. We may need to verify your identity before acting on a request.

To exercise your rights, contact aigenuityltduk@gmail.com.

We normally respond within the period required by applicable data protection law.

Please contact us first if you have concerns about how we use your personal data so that we have an opportunity to investigate.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection supervisory authority.

If you live outside the United Kingdom, you may also have the right to complain to the data protection authority in your country.

Our general websites and services are not directed specifically at children unless a product expressly states otherwise.

We do not knowingly collect personal data from children in circumstances where parental or guardian consent is legally required without obtaining that consent.

If you believe that a child has provided personal data to us improperly, contact aigenuityltduk@gmail.com.

Unless a product-specific privacy notice states otherwise, we do not make decisions that produce legal or similarly significant effects about individuals solely through automated processing.

Our websites and products may contain links to external websites or services.

We are not responsible for the privacy practices of third parties. You should review the privacy notice of the relevant third party before providing personal data.

We may update this privacy policy to reflect changes to:

• our products and services;
• our business operations;
• the service providers we use; or
• legal and regulatory requirements.

The updated policy will be published with a revised effective date.

Where a change materially affects how we use personal data, we will provide additional notice or seek consent where required.

Questions, requests or complaints concerning this privacy policy may be sent to:

AIGENUITY LTD
14 Museum Place, 4th Floor
Cardiff
United Kingdom
CF10 3BH

Email: aigenuityltduk@gmail.com