Privacy Policy

1. Who we are

Calon AI Solutions Limited ("Calon AI", "we", "us" or "our") is a company registered in Wales under company number 15984397, with its registered office at Ty Merlin, Caerphilly Business Park, Van Road, Caerphilly, Wales, CF83 3GS.

We are the data controller responsible for the personal data we process about you. For any question about this policy or how we handle your data, contact us at [email protected].

2. The data we collect

We collect only the data we need to respond to enquiries, deliver our services and run our business. Depending on how you interact with us, this may include:

• Contact details — your name, business name, email address and telephone number, provided when you complete a form or contact us.
• Enquiry information — details you share about your business, the operational problems you are trying to solve and any context you provide.
• Project data — information processed in the course of building and operating the systems we deliver for you, under a separate agreement.
• Technical data — IP address, browser type and basic analytics about how our website is used.

3. How we use your data

We process personal data on the following lawful bases under the UK GDPR:

• Legitimate interests — to respond to your enquiry, provide our services and improve our offering, where this is not overridden by your rights.
• Contract — to perform a contract we have entered into with you, or to take steps at your request before entering into one.
• Consent — where you have agreed to receive specific communications from us. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with the law, including accounting and tax requirements.

4. Sharing your data

We do not sell your personal data. We share it only where necessary to run our business or deliver our services, including with trusted service providers (for example hosting, email and accounting providers) who act on our instructions, and with authorities where we are legally required to do so.

Where we use third-party processors, we put appropriate contractual safeguards in place and only share the minimum data required.

5. International transfers

Some of our service providers may process data outside the UK. Where this happens, we ensure an adequate level of protection through approved safeguards such as UK adequacy regulations or International Data Transfer Agreements.

6. How long we keep it

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Enquiry data that does not become a project is typically deleted within 24 months. Project and financial records are retained in line with statutory accounting requirements.

7. Your rights

Under UK data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these rights, email us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No system is completely secure, but we work to industry-standard practices and review our controls regularly.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated where appropriate.