Privacy Policy

Effective Date: January 1, 2025

1. Introduction

Welcome to Uncultured AI Limited (“Company,” “we,” “us,” or “our”). Your privacy is important to us, and we are committed to safeguarding and responsibly handling your personal data. This Privacy Policy explains how we collect, use, store, and disclose personal information (“Personal Data”) obtained through our website, https://unculturedai.com (the “Website”), and any related products or services we provide. It also describes your rights regarding your data and how you can exercise them.

By using our Website or engaging with our services, you agree to the terms in this Privacy Policy. If you do not agree, please discontinue use of our Website and services immediately.

2. Data Controller and Scope

2.1 Data Controller
Uncultured AI Limited, a company registered in the United Kingdom (128 City Road, London, EC1V 2NX, UK), is the “data controller” responsible for deciding how and why your Personal Data is processed when you interact with our Website and services.

2.2 Applicability
This Privacy Policy applies to all visitors, customers, and any other users (“Users”) of our Website, regardless of location. However, certain provisions may vary based on local data protection requirements.

3. Key Definitions

  • “Personal Data”: Any information that can identify or be linked to an identifiable natural person (e.g., name, email address, shipping information).
  • “Processing”: Any operation performed on Personal Data, whether automated or manual (e.g., collection, storage, use, disclosure, erasure).
  • “UK GDPR”: The version of the General Data Protection Regulation retained in UK law post-Brexit, along with the Data Protection Act 2018 and related legislation.
  • “Consent”: Freely given, specific, informed, and unambiguous indication of a User’s wishes.

4. Information We Collect

4.1 Personal Data You Provide Directly

  • Account Registration Data: When you create an account, we may collect your name, email address, username, and password.
  • Transaction Data: If you purchase our digital or physical products, we collect information necessary to complete the purchase (e.g., name, shipping address, billing address, partial payment details—but typically processed via third-party payment providers).
  • Communications: Any information you provide when contacting us (e.g., support requests, feedback, complaints).
  • Other Voluntary Submissions: Information you share in surveys, user-generated content, or online forms.

4.2 Automatically Collected Data

  • Technical Data: IP address, browser type, operating system, device identifiers, and browsing behavior on our Website.
  • Cookies & Tracking: We use cookies, pixel tags, and similar technologies to collect usage data and tailor user experience. See Section 7 (Cookies and Tracking Technologies) for details.

4.3 Data from Third Parties

  • Payment Processors: We may receive limited payment confirmations (no full card details) from Stripe, PayPal, or other payment gateways.
  • Analytics/Advertising Services: We may receive anonymized or aggregated data (e.g., Google Analytics) about user demographics, usage trends, or referral sources.

4.4 Sensitive Data
We do not intentionally collect or process special categories of personal data (e.g., health, religion, biometric data). If you voluntarily provide such information, you consent to our processing of that data for the specific purpose it was provided, in line with this Policy.

5. How We Use Your Data

We process your Personal Data only where we have a valid legal basis. Common purposes include:

  1. Account Creation & Management: To register and maintain your user account, provide you with login credentials, and deliver customer support.
  2. Order Fulfillment: To process payments, ship physical goods, deliver digital products, and handle returns or refunds under our Refund and Return Policy.
  3. Service Improvement & Personalization: To analyze usage patterns, test new features, and enhance the Website’s layout, content, and performance (often under “legitimate interests”).
  4. Marketing & Promotions:
    • Email Marketing: If you opt in, we may send newsletters or promotional materials. You can unsubscribe at any time.
    • Advertising: We may use cookies or tracking technologies to display relevant ads on our Website or third-party platforms.
  5. Compliance & Legal Obligations: To satisfy legal or regulatory requirements, respond to lawful requests from public authorities, or protect our rights and interests.
  6. Fraud Prevention & Security: To monitor, detect, and prevent fraudulent or malicious activities.

6. Lawful Bases for Processing

In compliance with the UK GDPR and other applicable data protection laws, we rely on the following lawful bases:

  • Consent: Where you have given clear, specific consent for us to process your Personal Data for a particular purpose (e.g., email marketing).
  • Contractual Necessity: Processing is necessary to perform or fulfill a contract with you (e.g., completing an order).
  • Legitimate Interests: Processing is necessary for our or a third party’s legitimate interests, balanced against your data protection rights (e.g., analytics, Website security).
  • Legal Obligation: Compliance with a statutory or regulatory obligation (e.g., record-keeping for tax purposes).

7. Cookies and Tracking Technologies

7.1 Overview
We use cookies, web beacons, and similar technologies to collect information about your browsing activities on our Website. These technologies help us remember your preferences, enhance user experience, and analyze site performance.

7.2 Types of Cookies

  • Essential Cookies: Necessary for the Website’s functionality (e.g., retaining items in a shopping cart).
  • Analytics/Performance Cookies: Track usage metrics and patterns to optimize site functionality (e.g., Google Analytics).
  • Advertising/Marketing Cookies: Deliver relevant ads and measure the effectiveness of marketing campaigns.
  • Preference Cookies: Store choices you make, such as language or region preferences.

7.3 Managing Cookies
Most web browsers allow you to refuse or delete cookies in your browser settings. However, disabling cookies may affect certain functionalities of our Website.

7.4 Do Not Track Signals
Our Website may not respond to “Do Not Track” signals. You can manage your tracking preferences via browser settings and third-party opt-out tools.

8. How We Share Your Data

8.1 Service Providers (Processors)
We share Personal Data with trusted third parties (e.g., payment processors, hosting providers, dropshipping partners for physical merchandise, analytics services) to perform tasks on our behalf. These parties are contractually obliged to maintain data confidentiality and only process data as instructed by us.

8.2 Business Transactions
In the event of a merger, acquisition, sale of assets, or reorganization, we may transfer Personal Data as part of the transaction. We will ensure that the recipient continues to honor this Privacy Policy or provides equivalent data protection assurances.

8.3 Legal Compliance & Protection
We may disclose Personal Data to government or law enforcement officials or private parties when we believe disclosure is necessary to comply with a legal obligation, protect our rights or safety, investigate fraud, or respond to a lawful request.

8.4 Aggregated or Anonymized Data
We may share aggregated, anonymized data that cannot reasonably identify you, for analytics, marketing, or other business purposes.

9. International Data Transfers

9.1 Location of Servers
Our primary servers and service providers may be located in the UK, EEA, or other countries. If you access our Website from outside these regions, your data may be transferred internationally.

9.2 Safeguards
When transferring Personal Data outside the UK or EEA, we use legal mechanisms such as UK International Data Transfer Agreements, Standard Contractual Clauses (SCCs), or rely on adequacy decisions, as required by applicable law. We take steps to ensure your data remains protected according to UK data protection standards.

10. Data Retention

10.1 Retention Period
We retain Personal Data only as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law (e.g., tax or accounting).

10.2 Criteria for Determining Retention

  • Contractual Obligation: Duration necessary to provide our products or services.
  • Legal/Regulatory Requirements: Keeping transaction records to comply with financial or consumer protection laws.
  • Legitimate Business Needs: Retaining data to enforce our Terms, prevent fraud, or resolve potential disputes.
  • Consent Withdrawal: If processing is based on consent, we typically delete your data promptly after you withdraw consent, unless retention is otherwise required.

11. Data Security

We use appropriate technical and organizational measures to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (e.g., SSL/TLS).
  • Secure Servers with restricted access.
  • Regular Security Audits to identify and address vulnerabilities.
  • Access Controls ensuring only authorized staff or contractors can handle sensitive data.

However, no electronic transmission or storage is 100% secure. By using our Website, you acknowledge that we cannot guarantee absolute security.

12. Children’s Privacy

12.1 No Targeting of Minors
Our services and Website are not intended for children under 13 (or under the age of majority in certain jurisdictions). We do not knowingly collect Personal Data from children without verifiable parental consent.

12.2 Parental/Guardian Control
If you believe we have inadvertently collected data from a child, please contact us immediately so that we can delete it or otherwise address the issue promptly.

13. Your Rights

Depending on local law, especially under the UK GDPR, you may have the following rights:

  1. Right to Access: Obtain confirmation about whether we process your Personal Data and access a copy of that data.
  2. Right to Rectification: Correct any inaccurate or incomplete Personal Data we hold about you.
  3. Right to Erasure (‘Right to be Forgotten’): Request deletion of your Personal Data under certain circumstances.
  4. Right to Restrict Processing: Ask us to limit how we process your data in specific cases.
  5. Right to Data Portability: Receive your Personal Data in a structured, commonly used, machine-readable format.
  6. Right to Object: Object to certain types of processing (e.g., direct marketing).
  7. Right to Withdraw Consent: For processing based on consent, you can withdraw at any time.

13.1 How to Exercise Your Rights
To submit a request, please contact us via our contact information in Section 16. We will respond within one month unless the request is complex or we receive multiple requests from you, in which case we may extend the response time by up to two additional months.

13.2 Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK, the relevant authority is the Information Commissioner’s Office (ICO) at https://ico.org.uk.

14. Third-Party Links and Services

Our Website may contain links to external sites or incorporate services from third parties. This Privacy Policy does not govern third-party practices. We are not responsible for the privacy, information, or other practices of such third parties. We recommend reviewing their privacy policies before sharing any personal data.

15. Policy Updates

We reserve the right to modify or update this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised version on our Website, with the “Effective Date” at the top indicating when revisions were made. We may attempt to notify you by email or a prominent notice on the Website if the changes are significant. Your continued use of our services after any modifications constitutes your acceptance of the updated policy.

16. How to Contact Us

If you have questions, concerns, or feedback regarding this Privacy Policy or our data practices, please contact us at:

Uncultured AI Limited
 128 City Road
London
United Kingdom
EC1V 2NX
Website Contact Form: https://unculturedai.com/contact/

We typically respond within 48 hours during business days (Monday–Friday, 9 AM–5 PM UK time).

17. Last Updated

Date: January 1, 2025