Privacy Policy

1. Introduction

Jamot Ltd ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI Integration and AI Auditing services.

This Privacy Policy applies to all personal data we process in connection with our business operations, including through our website, client engagements, and business relationships.

Data Controller Details:
Jamot Ltd
167-169 Great Portland Street
London, United Kingdom, W1W 5PF
Company Number: 16901105

2. Legal Basis for Processing

We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data only where we have a lawful basis to do so, including:

• Contract Performance: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and fraud prevention, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal obligations to which we are subject.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, company name, job title, and business address.
• Account Information: Username, password, and other registration details if you create an account on our website.
• Communication Data: Information contained in correspondence, inquiries, feedback, and communications with us via email, phone, contact forms, or other channels.
• Service Engagement Data: Information related to our services, including project requirements, technical specifications, system details, and business needs.
• Payment Information: Billing details, invoice information, and payment history (note: we do not directly store credit card details; payments are processed by secure third-party payment processors).

3.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device type, and unique device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, referring websites, and other browsing behaviour.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies. See our Cookie Policy section below for more details.

3.3 Information from Third Parties

We may receive information about you from third parties, such as business partners, service providers, publicly available sources, or social media platforms, where permitted by law and in accordance with applicable data protection regulations.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI Integration and AI Auditing services, including project execution, client support, and service customization.
• Communication: To respond to inquiries, send service-related notifications, provide customer support, and communicate about projects and engagements.
• Billing and Payments: To process payments, send invoices, manage accounts, and maintain financial records.
• Marketing: To send promotional materials, newsletters, and information about our services, where you have consented or where we have a legitimate interest to do so. You may opt out at any time.
• Analytics and Improvement: To analyse website usage, understand user preferences, improve our services, develop new offerings, and enhance user experience.
• Security and Fraud Prevention: To detect, prevent, and respond to security incidents, fraudulent activity, and other harmful or illegal activities.
• Legal Compliance: To comply with legal obligations, resolve disputes, enforce our agreements, and respond to lawful requests from public authorities.

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our business, such as cloud hosting providers, payment processors, CRM systems, and analytics services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Business Partners: We may share information with business partners when collaborating on projects, provided you have been informed and, where necessary, have given consent.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of others.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred to the successor entity, subject to appropriate safeguards.
• With Your Consent: We may share your information for other purposes with your explicit consent.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom and European Economic Area (EEA) where our service providers or partners are located. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or European Commission
• Adequacy decisions recognising that the destination country provides adequate data protection
• Other legally approved transfer mechanisms

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Client Data: Retained for the duration of the business relationship and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements (typically 6-7 years in accordance with UK financial and tax regulations).
• Marketing Data: Retained until you withdraw consent or request deletion, or until we determine the data is no longer relevant for marketing purposes.
• Website Analytics: Typically retained for up to 26 months in accordance with analytics service provider policies.

8. Your Data Protection Rights

Under UK GDPR and data protection laws, you have the following rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, if you believe your rights have been violated.

To exercise any of these rights, please contact us using the contact details provided in Section 14.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our website. Cookies are small data files stored on your device.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly, such as enabling security features and remembering your preferences.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Functionality Cookies: Enable enhanced functionality and personalisation, such as remembering your settings and preferences.
• Marketing Cookies: Used to track visitors across websites to display relevant and engaging advertisements.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of our website. Most browsers allow you to refuse cookies or delete existing cookies.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Secure backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

12. Third-Party Websites and Services

Our website may contain links to third-party websites and services. This Privacy Policy does not apply to such third-party sites. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to registered users and active clients

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes have been made constitutes acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, or if you wish to exercise your data protection rights, please contact us:

Email: hello@jamot.pro

Address:
Jamot Ltd
167-169 Great Portland Street
London, United Kingdom
W1W 5PF

Company Number: 16901105

15. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects. Any AI systems we develop or audit for clients are subject to human oversight and are not used to make automated decisions about individuals based on our website visitors' or clients' personal data.