Who we are
Vigiles AI Ltd ("Vigiles AI", "we") is the controller for personal data collected through this website. Our registered address is 20 Wenlock Road, London, N1 7GU. We do not yet publish an email address, so anything in this notice reaches us through the contact form or by post to that address.
When we deliver a project inside a client's environment, the client is normally the controller and we act as a processor under a written agreement. This notice covers our own processing, not that work.
What we collect, and why
| Data | Why we have it | Lawful basis | How long we keep it |
|---|---|---|---|
| Name, email, organisation, country, message from the enquiry form | To reply to your enquiry and, if it proceeds, to discuss and scope work | Legitimate interests (responding to a business enquiry you initiated) | 24 months from the last contact, then deleted |
| Email correspondence | To conduct the conversation and keep a record of what was agreed | Legitimate interests, or performance of a contract once engaged | 6 years where it relates to a contract; 24 months otherwise |
| Server logs including IP address | Security, abuse prevention and rate limiting on the enquiry endpoint | Legitimate interests (keeping the service available and secure) | 30 days |
| Analytics data, only if you consent | To understand which pages are useful so we write more of what helps | Consent | Per the retention set in the analytics tool, maximum 14 months |
What we do not do
- We do not add enquiry details to a marketing list, and we do not send newsletters you did not ask for.
- We do not sell, rent or trade personal data, in any circumstances.
- We do not profile visitors for advertising, and we run no advertising pixels.
- We do not load analytics scripts at all unless you consent, see the cookie notice.
Who we share it with
Only processors we need to operate: our hosting provider, our email provider, and, where the site owner has configured one, the workflow endpoint that routes enquiries to the right person. Each is bound by a written processing agreement. We will disclose data where we are legally required to, and we will tell you unless we are prohibited from doing so.
Where your data is held
This site and the enquiry pipeline are hosted in the European Economic Area or the United Kingdom. Where a processor transfers data outside those areas, the transfer relies on an adequacy decision or on standard contractual clauses with a transfer risk assessment.
Your rights
Under UK GDPR and EU GDPR you can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and withdraw consent where consent is the basis. Send the request through the contact form, marking it as a data protection request, or by post to the registered address above, and we will respond within one month. We will not ask you to justify the request.
If you are not satisfied with how we have handled something, you can complain to the Information Commissioner's Office in the United Kingdom, or to the supervisory authority in your country of residence. We would rather you told us first, but it is your choice and it does not affect your rights.
Changes
When this notice changes materially we update the date at the top and, where the change affects an active engagement, we tell the client directly rather than relying on a website update.