1. Introduction

At Ascentis AI (“we”, “us”, “our”), we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your personal information when you interact with us.

This Privacy Policy complies with:

• • The UK Data Protection Act 1998 and the UK GDPR (as incorporated into UK law).

• • The EU General Data Protection Regulation (GDPR) 2016/679.

• • Our Charte du respect de la vie privée ([insert URL]).

2. Who is the Data Controller?

The entity responsible for your personal data depends on your location:

• • United Kingdom and International users:
    Your data is controlled by Ascentis AI Ltd, 128 City Road, London, United Kingdom, EC1V 2NX, company registration number: 16682255

• • France and EU users:
    Your data is controlled by Ascentis AI SAS, 1 Place Marie Curie 74000 Annecy, 990 446 817 R.C.S. Annecy

Both entities can share data securely within the Ascentis AI group, under safeguards that ensure compliance with UK and EU regulations.

3. What Data We Collect

We may collect:

• • Identity and Contact Data (name, email, phone, company, job title).

• • Account Data (logins, credentials).

• • Transactional Data (billing, payments).

• • Usage Data (IP, device, browser, cookies, logs).

• • Communications Data (emails, support tickets, feedback).

We avoid collecting sensitive data unless required and with explicit consent.

4. Legal Bases for Processing

We process your data based on:

• • Consent (Article 6(1)(a) GDPR / UK GDPR).

• • Contract performance (6(1)(b)).

• • Legal obligations (6(1)(c)).

• • Legitimate interests (6(1)(f)), balanced with your rights.

5. Why We Use Your Data

We use personal data to:

• • Provide and improve services.

• • Manage accounts, billing, and subscriptions.

• • Communicate with you.

• • Ensure security and prevent misuse.

• • Analyse usage and improve user experience.

• • Comply with legal and regulatory obligations.

6. Data Sharing and Transfers

• • Shared only with trusted service providers (hosting, payment, analytics, support).

• • May be transferred outside UK/EU under safeguards (Standard Contractual Clauses, adequacy decisions).

• • Never sold to third parties.

7. Retention

We retain personal data only as long as necessary for the purposes outlined or required by law. Data no longer needed is securely deleted or anonymised.

8. Security

We implement encryption, access controls, secure backups, audits, and incident response procedures to protect your data.

9. Your Rights

Depending on your jurisdiction (UK or EU), you may:

• • Access your data.

• • Rectify inaccuracies.

• • Request erasure (“right to be forgotten”).

• • Restrict processing.

• • Port your data.

• • Object to processing (including marketing).

• • Withdraw consent at any time.

You may also complain:

• • UK: Information Commissioner’s Office (ICO).

• • France/EU: Commission Nationale de l’Informatique et des Libertés (CNIL).

10. Cookies

We use cookies and similar tools to improve services and analyse traffic. You can manage settings via your browser or our cookie banner.

11. Contact Us

If you have any questions about this Cookie Policy or how we use cookies, please contact us at: info@ascentis-ai.com

12. Updates

We may update this policy to reflect changes in law, technology, or business practices. Updates will be posted here with a new “last updated” date.