At e21 AI Ltd, we take your privacy very seriously. We’ve updated our privacy policy (Policy) to make it as clear as possible how we handle your personal information. We encourage you to read this Policy carefully. It will help you make informed decisions about sharing your personal information with us.
The terms in this Policy are defined in our Terms of Use, which you should read along with this document. By accessing our website and using our Service, you agree to the terms of this Policy and our Terms of Use.
How we collect and use your personal information
e21 AI Ltd is an AI-powered solutions provider for business efficiency. We are the data controller for the personal information you provide, meaning we determine the purposes and means of processing that data.
The Service involves storing data about an organisation or an individual. This data can include personal information, which is any information about an identifiable person, such as their name, email address, or phone number.
We collect personal information directly from you when you:
- Register for the Service.
- Use the Service.
- Contact our support team.
- Visit our website.
You can always choose not to provide your personal information to e21 AI Ltd, but this may prevent us from providing you with the Service.
We collect, hold, and use your personal information to provide you with the Service and any related services you request. Our legal basis for processing your data is the performance of a contract — specifically, to deliver the Service you have subscribed to.
We use the personal information we collect for purposes related to the Service, including to:
- Verify your identity.
- Administer the Service.
- Notify you of new or changed features.
- Carry out marketing or training related to the Service.
- Assist with technical support issues.
- Comply with laws and regulations.
- Communicate with you.
By using the Service, you consent to your personal information being collected, held, and used for these purposes. We will only use your personal information for the purposes described in this Policy or with your explicit permission.
How our AI uses your data
As an AI-powered service, we use your data to make our solutions smarter and more effective for you. We are committed to a “privacy by design” approach, meaning we build privacy into our products from the ground up. Your personal data is only used to:
- Improve the performance of our AI for your specific use.
- Provide you with personalised and efficient service.
We do not use your personal information to train public AI models or for any purpose not directly related to providing and improving the Service for you.
How we protect your personal information
e21 AI Ltd is committed to protecting the security of your personal information. We take all reasonable precautions to protect it from unauthorised access, modification, or disclosure.
Our security measures include:
- Encryption: All data transferred between you and the Service is encrypted using Digital Certificates.
- Access controls: We use strict internal procedures to ensure only authorised personnel can access your data.
- Secure servers: Your personal information is stored on secure servers with robust protections.
We will notify you immediately upon discovering or being advised of a security breach where your personal information has been compromised.
This website, and what happens when you contact us
This section describes the website you are reading now, which is separate from the Service. We have set it out in detail because it is short, specific, and the part most people actually want to know about.
When you submit the contact form
The form collects your name, company, work email address, an optional telephone number, the type of enquiry, and your message. We store all of it so that we can answer you.
Alongside your submission we also record:
- A hashed version of your IP address. We never store the address itself. It is combined with a secret value and put through a one-way hash before anything is written down, so the stored value cannot be turned back into your address. We use it only to detect repeated abusive submissions, and the secret is rotated periodically, which permanently breaks the link to older records.
- Your browser’s user-agent string and the page you submitted from, for the same anti-abuse purpose.
Where it goes. Submissions are received and stored on UK-hosted infrastructure, in systems only e21 staff can reach. A notification is then sent to our internal team channel and to an internal email address, so that an enquiry is seen rather than sitting unread — those notifications carry your name, company, email address and the opening of your message, and the complete record stays in our own systems. We do not sell enquiry data, and we do not use it to train AI models.
The two consent boxes are not the same thing
The first is required, because without it we cannot store your enquiry in order to reply to it. Our lawful basis for that processing is your consent, and you can withdraw it at any time by emailing us.
The second — marketing updates — is entirely optional. You can send an enquiry, apply to the Alpha programme or ask about a partnership without ticking it, and we will not add you to any marketing list if you leave it unticked. If you do tick it, you can unsubscribe at any time.
Third parties that see data through this website
Two of these run in your browser, so we name them — you can see them in your own developer tools, and describing them vaguely would be evasive rather than careful. The rest are described by what they do rather than by product name. That is deliberate: an inventory of our internal systems is of more use to somebody attacking us than it is to you, and UK GDPR asks us to identify the recipients or the categories of recipient.
- Google reCAPTCHA — protects the form from automated abuse. It sends technical signals about your browser and interaction to Google, who provide it under their own privacy policy, and it sets cookies in your browser. It does not receive the contents of your message. It is loaded only once you begin filling in the form, so if you read the page and leave without interacting with it, nothing is requested from Google and no cookies are set.
- Plausible Analytics — measures page views. Plausible is cookie-free and does not collect or store any personal data or cross-site identifiers. It records the page visited, referrer, and coarse device and country information only.
- A cloud infrastructure provider — hosts this website and the service that receives the form, in the United Kingdom.
- A business productivity suite — holds submitted enquiries, accessible only to e21 staff.
- A team messaging service and an email delivery service — receive the notification that an enquiry has arrived, containing your name, company, email address, the type of enquiry and the opening of your message.
If you want them named, ask and we will tell you. Write to hi@e21.ai and we will give you the current list of processors and where each operates. We are not hiding who they are — we would rather hand the list to someone who asks than publish a map of our systems to everyone who does not.
Beyond these, we use third-party service providers to run our business, and ensure they are contractually obliged to protect your data.
How long we keep it
We keep enquiry submissions for as long as we are in contact with you about them, and for up to 24 months afterwards so we can pick up a conversation where it left off. After that they are deleted. If you ask us to delete your enquiry sooner, we will.
Disclosure to third parties
We will only disclose your personal information to third parties if it is necessary to facilitate the purpose for which your information was collected, such as providing the Service. The providers involved in this website specifically are named in the section above.
International data transfers
Our servers are currently located in the UK, on major cloud infrastructure. Your personal information will be stored on and routed through these servers.
Some of the providers named above are US-headquartered, and processing by Google reCAPTCHA and by some of the providers above may involve a transfer outside the UK. Where that happens, the transfer is covered by the appropriate safeguards, such as the UK International Data Transfer Addendum to the EU standard contractual clauses.
Your rights as a data subject
You have the right to:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request that we correct any inaccurate or incomplete personal information.
- Erasure: Request that we delete your personal information, subject to certain legal requirements.
- Portability: Request your personal information in a structured, commonly used, machine-readable format.
- Object: Object to the processing of your personal information in certain circumstances.
Complaints and policy updates
If you wish to complain about how we’ve handled your personal information, please provide our Data Protection Officer (DPO) with full details and any supporting documentation:
- By email: hi@e21.ai
- By letter: Data Protection Officer, e21 AI Ltd, 128 City Road, London, EC1V 2N.
Our DPO will provide an initial response within 10 business days and aim to resolve any complaint within 30 business days.