Privacy Policy

1. About This Policy

This Privacy Policy explains how Evolve AI ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Evolve AI is an AI strategy firm based in Bristol, UK. We are the data controller for the personal information we collect about you.

3. Information We Collect

3.1 Information You Provide Directly

When you contact us through our website or engage our services, we may collect:

• Name and professional title
• Email address and phone number
• Company name and industry
• Business requirements and project details
• Any other information you choose to provide in communications

3.2 Information We Collect Automatically

When you visit our website, we automatically collect:

• IP address and location data
• Browser type and version
• Device type and operating system
• Pages visited and time spent on our site
• Referring website information

3.3 Cookies and Tracking Technologies

We use essential cookies to ensure our website functions properly. We do not use third-party tracking cookies without your explicit consent.

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Service Delivery

• Responding to your inquiries and providing strategy sessions
• Delivering our AI strategy services
• Managing our business relationship with you
• Providing customer support

4.2 Legal Basis

We process your personal data based on:

• Consent: When you provide information through our contact forms
• Contract: When necessary to deliver our services
• Legitimate Interest: For business development and website improvement
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in delivering our services (e.g., email hosting, website hosting)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of our business
• Consent: With your explicit permission

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection practices

7. Data Retention

We retain your personal information only for as long as necessary to:

• Provide our services and maintain our business relationship
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Typically, we retain client information for 7 years after the end of our business relationship, unless a longer retention period is required by law.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request that we limit the processing of your data
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@evolve-ai.co. We will respond to your request within one month.

9. International Transfers

Your personal data is primarily processed within the UK. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

10. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date at the top of this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Complaints

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):