Privacy Policy

1. Who we are

Varpa AI Ltd (“Varpa”, “we”, “us”, “our”) is a company registered in England and Wales. We are the data controller for the personal data we process through this website (varpa.ai) and our related services.

If you have questions about this policy or your data, contact us at hello@varpa.ai.

2. What data we collect

We may collect and process the following categories of personal data:

• Contact information — name, email address, and any details you provide when contacting us or subscribing to updates.
• Usage data — information about how you interact with our website, including pages visited, time spent, referring URLs, and browser or device type.
• Technical data — IP address, browser type and version, operating system, and device identifiers collected automatically when you visit our site.
• Cookie data — information stored by cookies and similar technologies as described in our Cookies Policy.

3. How we use your data

We process personal data for the following purposes:

• To provide and maintain our website and services.
• To respond to your enquiries and communications.
• To send you updates and marketing communications where you have opted in.
• To analyse website usage and improve our content and user experience.
• To comply with legal obligations and protect our legitimate interests.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

• Consent — where you have given clear consent, for example accepting cookies or subscribing to our newsletter.
• Legitimate interests — to operate and improve our website, understand our audience, and ensure security.
• Legal obligation — where we need to comply with applicable law.

5. Data sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist us in operating our website and services (e.g. hosting, analytics), subject to appropriate data processing agreements. We may also disclose data where required by law or to protect our rights.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact data is retained until you request deletion or unsubscribe. Usage and technical data is typically retained for up to 26 months.

7. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict our processing of your data.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@varpa.ai. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the ICO, to protect your data in accordance with UK GDPR.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.