Privacy Policy.

CGI Consulting ("we", "us", "our") is an AI integration consultancy based in London, United Kingdom. We are the data controller for any personal data you provide through this website.

For any privacy-related question, contact us at contact@cgiconsulting.co.uk.

Information you give us directly. When you complete our contact form, we receive the name, email address, company name, and message you provide.

Technical information. Our hosting provider records standard server logs (IP address, request timestamp, user-agent string) as part of normal website operation. These logs are used for security and diagnostic purposes only.

Cookies. This website does not set tracking or analytics cookies and does not use third-party advertising trackers.

We process the information you submit through the contact form so we can respond to your enquiry and, where relevant, discuss a potential engagement. The lawful bases for processing are your consent (UK GDPR Article 6(1)(a)) and our legitimate interest in responding to prospective and existing clients (UK GDPR Article 6(1)(f)).

Server logs are processed on the basis of our legitimate interest in operating a secure and reliable website.

We do not use your information for automated decision-making or profiling, and we do not sell or rent personal data to third parties.

We use a small number of trusted service providers to operate this site:

• Hostinger hosts the website and processes server logs on our behalf.
• Proton AG (Proton Mail) is our email provider and delivers messages submitted via the contact form.

Each provider acts as a processor under a written agreement and is subject to appropriate data protection safeguards. We do not transfer your data to any other third party except where required by law.

Contact form submissions are retained for as long as needed to respond to your enquiry and, where a working relationship begins, for the duration of that engagement plus a reasonable period afterwards in line with normal business record-keeping (typically up to seven years for accounting and tax purposes).

Server logs are retained for up to 30 days unless they are needed for ongoing security investigations.

Under UK GDPR and the Data Protection Act 2018 you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data where there is no good reason for us to keep it.
• Object to or restrict the processing of your data.
• Request that your data be transferred to another provider.
• Withdraw consent at any time where we are relying on consent.

To exercise any of these rights, email us at contact@cgiconsulting.co.uk. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

We may update this policy from time to time. The effective date at the top of this page reflects the latest version. Material changes will be flagged on this page.