Privacy Policy

Integr8te Ltd ("Integr8te", "we", "us", "our") is an AI governance and ISO compliance consultancy based in the United Kingdom. We are the data controller for personal data collected through this website.

Contact: grant@integr8te.uk

We collect personal data through two means on this website:

Contact Form: Name, email address, company name, phone number, area of service interest, your message.

Readiness Assessments (ISO 9001, ISO 27001, ISO 42001): Name, email address, company name, job role, your answers to assessment questions, your calculated maturity score.

We do not collect payment information, passwords, or sensitive personal data as defined under UK GDPR.

We use the data you provide to:

- Respond to your enquiry and provide the services you have requested

- Generate and email you a personalised assessment report

- Notify our team of new enquiries and assessment submissions so we can follow up

- Improve our services and understand how our tools are being used

We do not use your data for automated decision-making that produces legal or similarly significant effects.

Under UK GDPR, we process your personal data on the following legal bases:

- Consent: Where you have explicitly ticked the consent checkbox before submitting a form or assessment

- Legitimate Interests: To respond to business enquiries and follow up on assessment requests, where this does not override your rights and interests

We use the following third-party services to operate this website, each of whom may process your data as a data processor on our behalf:

- Base44 (platform provider): Hosts our website, stores form submissions and assessment responses in a managed cloud database

- Resend (email delivery): Sends transactional emails including assessment reports and enquiry confirmations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We retain personal data collected through contact forms and assessments for no longer than 24 months from the date of submission, unless you request earlier deletion or unless we are required to retain it for legal or contractual reasons.

You may request deletion of your data at any time by emailing grant@integr8te.uk.

Under UK GDPR, you have the right to:

- Access the personal data we hold about you

- Rectify inaccurate or incomplete data

- Erase your data (the "right to be forgotten")

- Restrict or object to processing of your data

- Data portability: receive your data in a commonly used format

- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at grant@integr8te.uk. We will respond within 30 days.

All data is transmitted over HTTPS (TLS encryption). Data at rest is encrypted by our platform provider (Base44). We do not store payment card data. Access to stored personal data is restricted to authorised Integr8te personnel only.

While we take reasonable technical and organisational measures to protect your data, no system is entirely without risk. If you have concerns about a potential data breach, please contact us immediately at grant@integr8te.uk.

This website does not currently use tracking cookies or third-party analytics cookies. We may use strictly necessary session cookies to operate core website functionality. We will update this policy if our cookie usage changes.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

For any privacy-related questions or to exercise your rights, contact us at:

Email: grant@integr8te.uk

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.