Privacy Policy

We're Cold Lava AI Ltd, a company registered in England and Wales (Company Number: 16492732). Our registered address is United Kingdom. When we say "we", "us", or "our", that's who we mean.

We only collect what we need. Nothing more.

• ▸Contact info — When you fill out a form or email us, we keep your name, email, and whatever you've written to us.
• ▸Usage data — Basic analytics: what pages you visit, how long you stay, what you click. We use this to make the site better, not to build a profile on you.
• ▸Cookies — Small files that help the site work properly. See our Cookie Policy for the details.

• ▸Respond to your enquiries
• ▸Send you information you've asked for
• ▸Improve our website and services
• ▸Comply with legal obligations

We don't sell your data. We don't share it with advertisers. We don't do anything creepy with it.

We use a few trusted services to run our business:

• ▸Hosting — Vercel (our website lives there)
• ▸Analytics — Meta Pixel (for understanding visitor behavior)
• ▸Email — Standard email providers
• ▸Booking — Cal.com (for scheduling calls)

These services have their own privacy policies. We've chosen them because they take data protection seriously.

Under UK GDPR, you have the right to:

• ▸Access the data we hold about you
• ▸Correct any inaccuracies
• ▸Request deletion of your data
• ▸Object to how we process your data
• ▸Request we transfer your data elsewhere

Want to exercise any of these? Email us at hello@coldlava.ai. We'll sort it within 30 days.

We keep your data for as long as necessary to provide our services or comply with legal requirements. If you're a client, we keep project records for 6 years (UK tax requirements). If you just enquired but didn't become a client, we'll delete your info after 2 years of no contact.

We use industry-standard security measures. HTTPS everywhere, encrypted databases, access controls, the works. No system is 100% secure, but we take it seriously.

Cyber & Data Protection Insurance: We maintain comprehensive Cyber & Data Protection insurance with a UK-regulated insurer. This covers incidents related to data breaches, cyber attacks, and privacy violations, including notification costs, regulatory fines, and remediation expenses.

In the unlikely event of a security incident affecting your data, our insurance provides additional financial protection beyond our technical safeguards. This demonstrates our commitment to protecting your information both technically and financially.

If we update this policy, we'll post the new version here with a new "last updated" date. For significant changes, we'll make reasonable efforts to notify you.

Email us at hello@coldlava.ai. We're happy to explain anything that's unclear.

If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.