Introduction
Graft Ltd ("Graft", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit graft.bot or use our services.
Data Controller: Graft Ltd, registered in England and Wales.
Information we collect
Information you provide
- Contact information: Name, email address, company name when you submit our contact form or request a consultation
- Graft Devices waitlist: Name, email address, company name, and the optional details you choose to share (what you would use Graft Devices for, and whether you want to be considered as a design partner) when you join the waitlist at graft.bot/devices. We use this only to contact you about Graft Devices.
- Connected assessment data: Responses you provide during the assessment
- Communication records: Emails and messages exchanged with our team
Information collected automatically
- Usage data: Pages visited, time spent, referral source
- Technical data: Browser type, device type, IP address (anonymised)
- Cookies: Essential cookies for site functionality and optional analytics cookies
How we use your information
We use your personal data to:
- Respond to your enquiries and provide requested services
- Deliver connected assessment results and recommendations
- Improve our website and services
- Send relevant communications (only with your consent)
- Comply with legal obligations
Legal basis for processing
We process your data under the following legal bases:
- Legitimate interests: Responding to enquiries, improving our services
- Consent: Marketing communications, analytics cookies
- Contractual necessity: Delivering services you have requested
Data retention
We retain your personal data only as long as necessary for the purposes outlined above. Contact form submissions are retained for 24 months. Service-related data is retained for the duration of the engagement plus 36 months.
Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@graft.bot.
Cookies
We use essential cookies required for the site to function. Analytics cookies are only used with your explicit consent.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via our website.
Contact
For privacy-related queries, contact us at privacy@graft.bot.