Privacy policy.
This policy explains how CortexaForge Ltd ("CortexaForge", "we", "us") collects, uses and protects personal data submitted through this website, in accordance with the UK GDPR and the Data Protection Act 2018.
Who we are
CortexaForge Ltd is the data controller for personal data collected through this website. For any privacy matter, contact us at Baden@CortexaForge.ai.
What we collect
We only collect what you choose to give us through this site:
- Contact & enquiry details — your name, work email address and any message you send when you request a white paper, ask for an audit, contact us, or book a discovery call.
- Consent records — the consent options you select, together with the exact wording shown and the date and time, so we can demonstrate the basis on which we contacted you.
- Technical data — limited information needed to keep the site secure and working, such as your IP address processed by our anti-spam provider when you submit a form (see sub-processors).
We do not use advertising or third-party tracking cookies, and we do not build behavioural profiles of visitors.
How we use it & our lawful basis
- To respond to your enquiry and send you the material you requested (such as a white paper download link) — our lawful basis is the steps taken at your request and our legitimate interest in responding to you.
- To send you our newsletter — only where you give separate, optional consent. We record your consent now; if and when we send a newsletter you will be able to unsubscribe at any time, or you can withdraw consent by contacting us.
- To keep the site secure and prevent spam and abuse — our legitimate interest in protecting our services.
Sub-processors
We use a small number of trusted providers to operate this site. Each processes personal data only on our instructions:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Secure database and file storage for enquiry records and white-paper documents | EU |
| Google (Google Workspace) | Sending the transactional email we send in response to your enquiry, such as your white-paper download link | Global |
| Cloudflare | Turnstile anti-spam verification on forms (processes your IP address and may set a verification cookie) | Global |
Cookies
This site does not use analytics or advertising cookies. The only cookie that may be set is a short-lived verification cookie from Cloudflare Turnstile when you submit a form, used solely to confirm you are not a bot. No tracking or profiling is performed.
Retention
We keep enquiry and consent records for as long as needed to respond to you and to maintain a record of our communications and your consent, and no longer than necessary for those purposes. Newsletter subscribers are retained until they unsubscribe. You may ask us to erase your data at any time (see your rights).
Security
Personal data is held in access-controlled systems. All credentials and service keys are held server-side only and are never exposed to your browser. Data is transmitted over encrypted (HTTPS) connections.
Your rights
Under the UK GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, contact Baden@CortexaForge.ai. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
International transfers
Where personal data is transferred outside the UK or EEA (for example by global providers such as Google or Cloudflare), we rely on appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision.
Changes
We may update this policy from time to time. The "last updated" date above reflects the current version.
This is a standard template, not legal advice. It should be reviewed by a qualified professional and tailored to your circumstances before being relied upon.