Privacy Policy

1. Scope

This Privacy Policy explains how NeuralCanvas AI Studio Ltd collects, uses, stores, and shares personal data when you visit our website, contact us, or request information about our services. We aim to keep data collection minimal and aligned with a clear purpose.

2. Data we collect

We may collect the following categories of information:

• Contact data you provide: name, email, phone number (optional), and message content submitted via the contact form.
• Basic technical data: approximate location (derived from IP), browser type, device information, and pages viewed.
• Cookie preference data: whether you accepted or rejected optional cookies, stored locally in your browser.

We do not ask you to submit sensitive personal data through this site. Please avoid including sensitive or confidential information in messages.

3. How we use your data

We use personal data for the following purposes:

• To respond to inquiries and provide information about our services.
• To operate and secure our website, including preventing abuse and improving stability.
• To understand how visitors use the site when optional analytics are enabled.

4. Legal bases (UK GDPR)

We rely on the following legal bases under the UK GDPR:

• Consent: for optional analytics cookies, where applicable.
• Legitimate interests: to operate, secure, and improve our website and respond to general requests.
• Steps prior to entering a contract: when you request details about a project or proposal.

5. Cookies and local storage

Our website uses a small cookie preference card. Your choice may be stored in your browser using local storage. Essential functionality may also rely on standard browser storage mechanisms. Optional analytics, if enabled, are only used after you accept optional cookies.

6. Sharing and processors

We do not sell personal data. We may share data with trusted service providers who help us operate the website and handle communications. Where we use processors, we aim to use appropriate contractual safeguards and access controls. We only share the data necessary for the relevant service.

7. International transfers

If personal data is processed outside the United Kingdom, we take steps to ensure appropriate safeguards are in place, such as contractual protections or other recognized transfer mechanisms.

8. Data retention

We retain contact form submissions for as long as needed to respond to your request and manage follow-up. We may retain limited records to comply with legal obligations, resolve disputes, and enforce agreements. Cookie preferences stored in local storage remain until you clear your browser storage or update your choice.

9. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, but we work to reduce risk through access controls and secure practices.

10. Your rights

Subject to applicable law, you may have rights including access, rectification, erasure, restriction, objection, and data portability. You may also withdraw consent for optional cookies by changing your cookie preference and clearing local storage if needed.

To exercise your rights, contact us at [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

11. Contact

If you have questions about this policy or how we handle personal data, contact: