Privacy Policy

August 28, 2025

1. Introduction

Welcome to Geordie AI Ltd’s Privacy and Data Protection Policy ("Privacy Policy"). At Geordie AI Ltd ("we", "us", or "our") we are committed to protecting and respecting your privacy and personal data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other mandatory laws and regulations of the United Kingdom.

This Privacy Policy explains how we collect, process, and keep your data safe. It will tell you about your privacy rights, how the law protects you, and inform our users and contacts of their rights.

2. Data Controller and Data Protection Officer

Geordie AI Ltd is the Data Controller and responsible for your personal data.

We have appointed a Data Protection Officer ("DPO") responsible for overseeing questions in relation to this Privacy Policy. If you have any questions, including requests to exercise your legal rights, please contact the DPO:

Email: privacy@geordie.ai
Postal address: 85 Great Portland Street, London, W1W 7LT, United Kingdom

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

3. Data We Collect

We may collect, use, store and transfer the following categories of personal data about you:

• Profile/Identity Data: first name, last name, etc.

• Contact Data: email address, phone number, etc.

• Technical Data: IP address, browser type, operating system, etc.

• Usage Data: information about how you use our website, products and services.

• Marketing and Communications Data: preferences in receiving marketing communications.

We may also collect and share aggregated data to improve our services, but such data does not directly identify you.

We do not collect any special category data (e.g. race, religion, health data) or information on criminal convictions.

4. Legal Basis for Processing

We rely on the following legal bases to process your data:
• Consent – e.g. when you opt-in to marketing communications.
• Contractual Obligations – e.g. when providing requested services.
• Legal Compliance – e.g. for fraud prevention or regulatory requirements.
• Legitimate Interests – e.g. to improve services or maintain business relationships, provided your rights are not overridden.

5. Cookies

We use cookies and similar technologies to enhance your experience, analyse website usage, and deliver relevant content. You can manage cookie preferences through your browser settings or our cookie banner. For more details, please see our separate Cookie Policy.

6. How We Use Your Data

We will only use your personal data when the law allows us to. Common uses include:
• Providing access to our platform and services.
• Responding to enquiries and support requests.
• Sending service updates and marketing communications (with consent).
• Improving and securing our website and services.
• Complying with legal obligations.

7. Your Rights

You have the following rights under data protection law:
• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restrict processing
• Right to data portability

If you wish to exercise these rights, contact us at privacy@geordie.ai.

8. Data Security and Deletion

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. If you delete your account, we will take reasonable steps to delete or anonymise your personal data, subject to legal or regulatory retention requirements.

9. Sharing Data with Third Parties

We may share your data with trusted service providers, business partners, or in connection with a business transfer. We may also share your data where required by law. We do not sell your personal data.

10. International Transfers

Your information may be transferred and processed outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as the UK Addendum to Standard Contractual Clauses (SCCs), to protect your data in line with UK data protection laws.

11. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. In some cases, we may retain data for longer if required for disputes or regulatory obligations.

12. California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA/CPRA), including:
• The right to know what personal data we collect and how it is used.
• The right to request deletion of your personal data.
• The right to opt out of the sale or sharing of your personal data.
• The right to non-discrimination for exercising your rights.

To exercise these rights, contact privacy@geordie.ai.

13. Children

This website is not intended for children and we do not knowingly collect data relating to anyone under 18. If you are under 18, you must immediately stop using Geordie AI Ltd.

14. Updates to This Policy

We keep our Privacy Policy under regular review. Updates will be posted on this page with a revised date. By continuing to use our website after changes are made, you accept the updated policy.