Privacy Policy

At e21 AI Ltd, we take your privacy very seriously. We’ve updated our privacy policy (Policy) to make it as clear as possible how we handle your personal information. We encourage you to read this Policy carefully. It will help you make informed decisions about sharing your personal information with us.

The terms in this Policy are defined in our Terms of Use, which you should read along with this document. By accessing our website and using our Service, you agree to the terms of this Policy and our Terms of Use.

How We Collect and Use Your Personal Information

e21 AI Ltd is an AI-powered solutions provider for business efficiency. We are the data controller for the personal information you provide, meaning we determine the purposes and means of processing that data.

The Service involves storing data about an organisation or an individual. This data can include personal information, which is any information about an identifiable person, such as their name, email address, or phone number.

We collect personal information directly from you when you:

• Register for the Service.
• Use the Service.
• Contact our support team.
• Visit our website.

You can always choose not to provide your personal information to e21 AI Ltd, but this may prevent us from providing you with the Service.

We collect, hold, and use your personal information to provide you with the Service and any related services you request. Our legal basis for processing your data is the performance of a contract—specifically, to deliver the Service you have subscribed to.

We use the personal information we collect for purposes related to the Service, including to:

• Verify your identity.
• Administer the Service.
• Notify you of new or changed features.
• Carry out marketing or training related to the Service.
• Assist with technical support issues.
• Comply with laws and regulations.
• Communicate with you.

By using the Service, you consent to your personal information being collected, held, and used for these purposes. We will only use your personal information for the purposes described in this Policy or with your explicit permission.

How Our AI Uses Your Data

As an AI-powered service, we use your data to make our solutions smarter and more effective for you. We are committed to a “privacy by design” approach, meaning we build privacy into our products from the ground up. Your personal data is only used to:

• Improve the performance of our AI for your specific use.
• Provide you with personalized and efficient service.

We do not use your personal information to train public AI models or for any purpose not directly related to providing and improving the Service for you.

How We Protect Your Personal Information

e21 AI Ltd is committed to protecting the security of your personal information. We take all reasonable precautions to protect it from unauthorised access, modification, or disclosure.

Our security measures include:

• Encryption: All data transferred between you and the Service is encrypted using Digital Certificates.
• Access Controls: We use strict internal procedures to ensure only authorised personnel can access your data.
• Secure Servers: Your personal information is stored on secure servers with robust protections.

We will notify you immediately upon discovering or being advised of a security breach where your personal information has been compromised. However, the internet is not a completely secure environment, and transmitting personal information is always at your own risk.

Disclosure to Third Parties

We will only disclose your personal information to third parties if it is necessary to facilitate the purpose for which your information was collected, such as providing the Service.

We may use third-party service providers to help us run our business, such as analytics providers and payment processors. We ensure these third parties are contractually obligated to protect your data. We will not otherwise disclose your personal information to a third party unless you have provided your explicit consent or if required by law, such as in response to a court order or legal investigation.

Our server hosts do not control, and are not permitted to access or use your personal information except for the limited purpose of storing the information.

International Data Transfers

Our servers are currently located in the UK, primarily on Google Cloud (GCP). Your personal information will be stored on and routed through these servers. If we transfer your data outside of the UK, we will ensure that it is protected by appropriate safeguards, such as by entering into a standard contractual clause. We will update this policy if our server locations change.

Your Rights as a Data Subject

You have several rights regarding your personal information under applicable data protection laws.

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request that we correct any inaccurate or incomplete personal information we hold about you.
• Erasure (Right to be Forgotten): Request that we delete your personal information, subject to certain legal requirements.
• Portability: Request that we provide your personal information in a structured, commonly used, and machine-readable format.
• Object: Object to the processing of your personal information in certain circumstances.

To exercise any of these rights, please make your request in writing and send it to our Data Protection Officer at the contact details below. We will process your request as soon as is reasonably practicable.

We will keep your personal information for as long as we need it to provide you with the Service, unless a longer retention period is required by law.

Complaints and Policy Updates

If you wish to complain about how we’ve handled your personal information, please provide our Data Protection Officer (DPO) with full details and any supporting documentation:

• By e-mail: hi@e21.ai
• By letter: Data Protection Officer, e21 AI Ltd,128 City Road, London, EC1V 2N.

Our DPO will:

• Provide an initial response to your complaint within 10 business days.
• Investigate and attempt to resolve your complaint within 30 business days.

We may update this policy from time to time, and any amended version will be effective upon posting to our website. We will make every effort to communicate any significant changes to you via email or a notification in the Service. Your continued use of the Service will be deemed acceptance of any amended policy.

Last updated: 8 September 2025