Privacy Policy

Last updated: March 2026

GraftAI UK ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect information when you use our website at graftai.uk or contact us about our services.

1. Who We Are

GraftAI UK is an AI agency based in the United Kingdom that provides AI-powered lead response agents for tradespeople. Our contact email is hello@graftai.uk.

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us. This may include:

• Your name and contact details (email address, phone number) when you fill in our enquiry form or contact us directly
• Your trade or business type, and any message or notes you include
• Basic usage data about how you interact with our website (via anonymised analytics, if enabled)
• Communications you send to us via email, WhatsApp, or social media

3. How We Use Your Data

We use the information you provide solely to:

• Respond to your enquiry and provide information about our services
• Arrange and conduct a product demonstration
• Contact you about your account or our services if you become a customer
• Improve our website and services

We do not use your data for automated decision-making or profiling, and we do not sell or rent your personal data to any third party.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Consent — when you voluntarily submit your details via our contact form
• Legitimate interests — to respond to business enquiries and improve our services
• Contractual necessity — where processing is required to deliver services you have agreed to

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to 12 months. If you become a customer, we retain relevant data for the duration of our contract and for up to 6 years thereafter for legal and accounting purposes.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and form submissions are handled via Netlify's secure infrastructure.

7. Third-Party Services

We use the following third-party services that may process your data on our behalf:

• Netlify — website hosting and form handling (privacy policy at netlify.com/privacy)
• Zoho Mail — email communications (privacy policy at zoho.com/privacy.html)

All third-party processors are required to handle your data in compliance with applicable data protection law.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict how we process your data
• Withdraw your consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at hello@graftai.uk and we will respond within 30 days.

9. Cookies

Our website does not currently use tracking or advertising cookies. We may use essential session cookies required for the website to function correctly. We do not use Google Analytics or similar tracking tools at this time.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

GraftAI UK
Email: hello@graftai.uk
Website: graftai.uk

---

This policy was prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.