Privacy Policy

Xploratech Limited is the data controller responsible for your personal data. We provide AI audit and custom agentic software services to businesses in the UK and internationally.

If you have any questions about this policy or how we handle your data, contact us at hello@xploratech.ai.

We may collect and process the following categories of personal data:

• Contact and identity data: your name and email address when you contact us or book a call.
• Communications data: the contents of emails or messages you send us.
• Usage data: pages visited, time on site, referral source, and browser/device information collected via analytics tools.
• Booking data: name, email, and scheduling information when you book a call via our booking provider.

We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.

We use your personal data for the following purposes:

• To respond to enquiries and communicate with prospective and current clients.
• To schedule and manage discovery calls and audit engagements.
• To fulfil contractual obligations where we have entered into a services agreement with you.
• To improve our website and services using aggregated, anonymised analytics.
• To comply with legal obligations.

We rely on the following lawful bases under UK GDPR:

• Legitimate interests — to respond to enquiries, communicate with prospects, and improve our services, where our interests are not overridden by your rights.
• Contract performance — to fulfil obligations under a services agreement with you.
• Legal obligation — where processing is necessary to comply with UK law.
• Consent — where we have explicitly requested and received your consent (e.g. for marketing communications, if applicable).

We use a small number of trusted third-party services that may process your data on our behalf:

• Calendly — used to schedule discovery calls. When you book a call, your name and email are processed by Calendly, Inc. under their own privacy policy. We do not use your booking data for marketing purposes.
• Website hosting and CDN — our website is hosted on AWS infrastructure. Data may be processed in data centres within the UK or EEA.
• Analytics — we may use privacy-respecting analytics tooling. No personally identifiable information is shared with analytics providers.

We do not sell your personal data to third parties and we do not share it with parties outside those listed above, except where required by law.

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law.

• Enquiry and communications data: retained for up to 3 years after our last contact.
• Client engagement data: retained for 7 years following the end of the engagement, in line with standard UK accounting and legal requirements.
• Analytics data: retained in anonymised or aggregated form only.

Under UK GDPR, you have the following rights in relation to your personal data:

• Access — to request a copy of the data we hold about you.
• Rectification — to ask us to correct inaccurate or incomplete data.
• Erasure — to request deletion of your data in certain circumstances.
• Restriction — to ask us to limit how we use your data.
• Portability — to receive your data in a structured, machine-readable format.
• Objection — to object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@xploratech.ai. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website may use essential cookies required for the site to function correctly (e.g. theme preference). We do not currently use tracking or advertising cookies. If this changes, we will update this policy and seek your consent where required.

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

For any privacy-related questions or to exercise your rights, contact: