Privacy Policy

1. Who we are

XLR8tech ("we", "us") is a data and AI consultancy headquartered in the United Kingdom. This policy explains how we collect, use and protect personal information when you use www.xlr8tech.org or contact us. We act as the data controller for the information described here.

2. Information we collect

• Contact details you provide — name, email address, company name and the contents of your message when you submit our contact form or book a discovery call.
• Usage information — standard technical data such as browser type and pages visited, used in aggregate to understand how the site is used.

The AI Readiness assessment is anonymous: your answers are processed in your browser only and are not stored or transmitted to us.

3. How we use your information

• To respond to your enquiry and arrange discovery calls.
• To deliver and improve our services.
• To comply with legal obligations.

Our lawful bases under UK GDPR are: legitimate interests (responding to business enquiries and improving our services), consent (where you have provided it, e.g. for marketing), performance of a contract (delivering an engagement you have entered into with us), and compliance with legal obligations. We do not sell personal data, and we do not use your data for automated decision-making.

4. Sharing and storage

Enquiry data is stored securely on our website platform and forwarded to our team mailbox. We share personal data only with service providers who help us operate this website and communications, under appropriate safeguards.

5. International data transfers

We are headquartered in the United Kingdom and serve clients in the UK, the GCC and worldwide. Some of our service providers (including enterprise AI and cloud providers) process data outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards under UK GDPR, such as adequacy regulations or standard contractual clauses.

6. Data retention

We retain personal data only as long as necessary for the purposes described in this policy. Enquiry data that does not lead to an engagement is deleted within 12 months. Where an engagement follows, related records are retained for the duration of the engagement and for up to 6 years afterwards to meet legal, tax and contractual obligations.

7. Data security

We protect personal data with technical and organisational safeguards including encryption in transit and at rest, role-based access controls and audit logging. For more detail, see our Data Protection & Security page.

8. Cookies and tracking

Our website uses a small number of cookies and similar technologies to keep the site working and to understand, in aggregate, how it is used. We do not use cookies to build individual profiles or for third-party advertising. You can control or delete cookies at any time through your browser settings.

9. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time to reflect changes in the law or in how we operate. The latest version will always be published on this page with an updated "last updated" date.

11. Contact

For any privacy questions or requests, email us at info@xlr8tech.org, call us on +44 7368 133564, or reach us via the contact form at www.xlr8tech.org/contact.