Data Protection

This statement explains how EronAI protects data across our website and the assistants we build. It is provided as a starting template and should be reviewed by a qualified adviser.

1. Our commitment

Data protection is central to how we work. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

2. Controller and processor

For enquiries submitted through this website, EronAI is the data controller. When we build and run an assistant for a customer, that customer is the controller of their own data and EronAI acts as a data processor, handling data only on their documented instructions under a written agreement.

3. How we handle your data

Trained on approved sources only. Our assistants answer from the documents and data a customer approves - not the open internet.
Purpose limitation. We use data only for the purpose it was provided.
Minimisation. We collect only what is needed.
Security. We apply appropriate technical and organisational measures to protect data.

4. Sub-processors

We use trusted service providers (for example, hosting, email and workflow tools) to deliver our services. These act under contract and on our instructions. Where a provider is outside the UK, we put appropriate safeguards in place.

5. Data subject rights

Individuals can access, correct, delete, restrict or object to the use of their personal data. Where we act as a processor, we support our customers in responding to such requests. To make a request, email enquiries@eronai.co.uk.

6. Data breaches

We maintain procedures to detect, report and investigate personal data breaches, and will notify the relevant parties and the ICO where required by law.

7. Retention

We retain personal data only for as long as necessary for the purpose it was collected or as required by law, after which it is securely deleted or anonymised.

8. Contact

For any data protection question, email enquiries@eronai.co.uk. You may also contact the ICO at ico.org.uk.