Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use the data we collect for the following purposes:

• Delivering and managing the services you have requested
• Responding to enquiries and providing customer support
• Sending newsletters, product updates, and marketing communications (where you have opted in)
• Improving our website, products, and service offerings based on usage patterns
• Conducting research and analytics to understand our audience
• Complying with applicable legal and regulatory obligations
• Detecting and preventing fraud, misuse, or security incidents

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under one or more of the following legal bases:

• Consent — where you have explicitly opted in, for example to receive our newsletter
• Contract — where processing is necessary to fulfil a service agreement with you
• Legitimate interests — where we have a genuine business interest that does not override your rights, such as improving our website and conducting B2B outreach
• Legal obligation — where we are required to process data to comply with applicable law

4. How We Share Your Information

We do not sell your personal data. We may share it only in the following circumstances:

• Service providers — trusted third parties who assist us in operating our website and delivering services (e.g. hosting, email delivery, CRM platforms), bound by data processing agreements
• Analytics providers — such as Google Analytics, to help us understand website usage
• Legal authorities — when required by law, court order, or to protect the rights and safety of Espressio AI, our clients, or the public
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction

All third parties we engage are required to handle your data securely and in accordance with applicable data protection law.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing services, maintaining business records, and meeting legal obligations.

In some cases, we may be required to retain data for longer periods — for example, to comply with tax, accounting, or regulatory requirements. When data is no longer needed, we securely delete or anonymise it.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience and gather analytics data. The types of cookies we use include:

• Essential cookies — required for the website to function correctly; these cannot be disabled
• Analytics cookies — used to understand how visitors interact with our site (e.g. Google Analytics, which anonymises IP addresses)
• Marketing cookies — used to measure the effectiveness of campaigns, where applicable

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect website functionality.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no legitimate reason for us to continue holding it
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@espressio.ai. We will respond within 30 days.

8. International Data Transfers

Some of our service providers are based outside the EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with an adequacy decision from the European Commission
• Other legally recognised transfer mechanisms where applicable

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, disclosure, or destruction. These measures include encrypted data transmission, access controls, and regular security reviews.

While we take security seriously, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any incidents that arise.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your personal data has been handled unlawfully.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this page periodically to stay informed. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.