Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how Eilla AI Ltd ("Eilla", "we", "us" or "our") collects, uses, and protects your personal data when you visit our website at eilla.ai (the "Site") or get in touch with us through it. It also explains your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Eilla AI Ltd is the "data controller" responsible for your personal data in connection with the Site. Eilla AI Ltd is a company registered in England and Wales (company registration number 14201306) whose registered office is at Apartment 3204, 251 Southwark Bridge Road, London, SE1 6FP.

Scope of this policy

This policy covers only the eilla.ai marketing website and the enquiries you send us through it. Our client platform, which requires a login, is governed by separate terms and a separate privacy notice provided to users of that platform. This policy does not cover third-party websites we link to, which have their own privacy policies.

Information we collect

We collect the following categories of personal data:

• Information you give us. When you complete a form on the Site (for example "Speak with an Advisor" or "Request Buyers"), we collect the details you submit, which may include your name, email address, telephone number, company name, and any information you choose to include in your message. We also record the campaign tags (for example utm_source and utm_campaign) of the link you arrived by, so we know which of our campaigns led to your enquiry.
• Information collected automatically. When you browse the Site we collect limited technical and usage data through cookies and similar technologies, such as your IP address, device and browser type, pages viewed, and how you interact with the Site. See "Cookies and analytics" below.

We collect all the personal data described in this policy directly from you or from your device; we do not obtain it about you from third parties. We do not intentionally collect special category data through the Site, and we ask that you do not include sensitive personal information in free-text form fields.

How we use your data and our legal bases

Under the UK GDPR we must have a lawful basis for using your personal data. We rely on the following:

• To respond to your enquiry and discuss whether and how we might work together. Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interests in responding to and following up on enquiries.
• To operate, secure, and improve the Site and understand how it is used. Legal basis: your consent for non-essential analytics cookies, and our legitimate interests in keeping the Site secure and functional.
• To comply with our legal and regulatory obligations. Legal basis: compliance with a legal obligation.

You are not required by law or contract to provide personal data through the Site. If you choose not to, we simply will not be able to respond to your enquiry.

Cookies and analytics

We also use Cloudflare Web Analytics, a privacy-friendly measurement tool that runs for all visitors. It sets no cookies, stores nothing on your device, and does not track or identify individuals — it only produces aggregate statistics (such as page views and referrers), so it does not require your consent.

We use PostHog to understand how the Site is used. By default — and for anyone who has not accepted cookies — PostHog runs in a cookieless mode: it sets no cookies and stores nothing on your device, capturing only anonymous, aggregated usage, so it needs no consent. If you accept analytics cookies, PostHog switches to its full mode and may set cookies such as ph_* to recognise returning visits. Our analytics also collect anonymous technical error reports (such as error messages and diagnostic details) so we can find and fix problems.

We also use Google Analytics (via Google Tag Manager), which sets cookies such as _ga and _ga_*. Google Analytics loads only after you accept analytics cookies.

We store your accept-or-decline choice in your browser's local storage so we can remember it (this is strictly necessary and always active). You can change your choice at any time using the "Cookie preferences" link in the footer of the Site.

Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contracts that require them to protect it and use it only as instructed:

• HubSpot — our customer relationship management (CRM) platform, which stores and manages enquiries submitted through the Site.
• Google — website analytics and tag management.
• PostHog — product and website analytics (hosted in the EU).
• Hosting and infrastructure providers — who host the Site and deliver it securely.

We may also disclose personal data where required by law, to a regulator, or to protect our rights.

International transfers

Some of our service providers process personal data outside the UK. In particular, HubSpot and Google may process data in the United States. Where personal data is transferred outside the UK, we rely on an appropriate safeguard, such as the UK Extension to the EU–US Data Privacy Framework (the UK–US Data Bridge), the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a country the UK has deemed to provide adequate protection.

How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy.

• Enquiry and contact data: we keep this only for as long as necessary to handle and follow up on your enquiry and any resulting relationship, and delete it when it is no longer needed for that purpose.
• Analytics data: retained for no longer than 2 months.

Automated decision-making

We do not make any decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Your rights

Under UK data protection law you have the right to access, correct, delete, or restrict the use of your personal data; to object to certain processing; to data portability; and, where we rely on consent, to withdraw that consent at any time. To exercise any of these rights, contact us at privacy@eilla.ai.

If you have a concern about how we handle your personal data you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk, although we would appreciate the chance to address your concerns first.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

The Site is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

Contact us

If you have any questions about this policy or how we handle your personal data, contact us at privacy@eilla.ai or by post at:

Eilla AI Ltd
Apartment 3204, 251 Southwark Bridge Road
London, SE1 6FP