Privacy Policy

Expand Automation
Last updated: June 2025

1. Introduction

This Privacy Policy explains how Expand Automation ("we", "our", or "us") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and complying with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Expand Automation is a UK-based company specializing in AI chatbots, voice AI assistants, and business automation solutions.

3. Information We Collect

3.1 Information You Provide

• Contact Information: Name, email address, phone number
• Business Information: Company name, industry, business requirements
• Communication Data: Messages sent through our contact forms, emails, or during consultations

3.2 Information Collected Automatically

• Website Analytics: IP address, browser type, pages visited, time spent on site
• Cookies: See our Cookie Policy section below

4. How We Use Your Information

4.1 Legitimate Business Interests

• Providing our AI automation services
• Responding to inquiries and providing customer support
• Improving our website and services
• Marketing our services (with your consent)

4.2 Legal Obligations

• Complying with legal requirements
• Maintaining business records

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for marketing communications
• Contract: To fulfill our contractual obligations
• Legitimate Interests: For business operations and service improvement
• Legal Obligation: To comply with applicable laws

6. Data Sharing

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (e.g., hosting providers, email services)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and staff training
• Secure hosting environments

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Information: 3 years from last contact
• Business Communications: 7 years for business records
• Website Analytics: 26 months

9. Your Rights

Under UK data protection law, you have the following rights:

9.1 Access

Request a copy of the personal data we hold about you

9.2 Rectification

Request correction of inaccurate or incomplete data

9.3 Erasure

Request deletion of your personal data in certain circumstances

9.4 Restriction

Request limitation of processing in certain circumstances

9.5 Portability

Request transfer of your data to another organization

9.6 Objection

Object to processing based on legitimate interests or for marketing purposes

9.7 Automated Decision-Making

Not be subject to automated decision-making, including profiling

10. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

12. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules

13. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

15. Contact Us

16. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

This privacy policy is designed to comply with UK data protection laws. For specific legal advice, please consult with a qualified legal professional.