Privacy Notice
Last updated 15 August 2026.
This notice explains how Purple AI Labs Ltd (“PurpleAI Labs”, “we”) collects and uses personal data when you use purpleailabs.io or request a CORTEX discovery.
Who we are
Purple AI Labs Ltd is the data controller. Contact: privacy@purpleailabs.io.
What we collect
- Discovery requests: work email, organisation, role, industry, business domains, your transformation question, programme stage and preferred scope — only what you enter in the form.
- Technical data: standard server logs (IP address, user agent, timestamps) held by our hosting provider for security and reliability.
Why we process it and on what basis
- To respond to your discovery request and arrange a conversation — legitimate interests (Art. 6(1)(f) UK GDPR) in responding to enquiries from prospective enterprise customers.
- To keep the site secure — legitimate interests.
We do not use your data for automated decision-making and we do not sell it.
Cookies
The site sets no analytics or advertising cookies at the time of writing. If that changes, this notice and a consent control will be updated first.
Sharing
Form submissions are processed by our form-handling provider and our hosting provider (Vercel) as processors under contract. We do not share your data with other third parties except where required by law.
Retention
Discovery request data is kept for up to 24 months after our last contact, then deleted, unless a commercial relationship begins.
Your rights
You can ask us to access, correct, delete or restrict your data, or object to processing, by emailing privacy@purpleailabs.io. You can also complain to the ICO (ico.org.uk).
International transfers
Our processors may store data outside the UK. Where they do, transfers rely on the UK International Data Transfer Agreement or an adequacy decision.
Changes
We will post any changes here and update the date above.