Privacy Policy

Last updated on 3 February 2025.

Lloyd IT Limited (trading as “Finleyy”, company number 16349880) (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and protect information when you interact with our website and AI assistant service (collectively, the “Service”).

Information We Collect

We collect information in the following ways:

Information you provide directly: When you create an account, we collect your email address and any profile information you choose to provide. When you use our AI assistant, we collect the content of your conversations to provide the Service.

Information collected automatically: We automatically collect certain technical information when you use the Service, including your IP address, browser type, device information, and usage data such as pages visited and features used.

Cookies and similar technologies: We use cookies and similar technologies to maintain your session, remember your preferences, and analyse how the Service is used. For more details, please see our Cookie Policy.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process and respond to your enquiries and requests
  • Send you important information about the Service, including updates and security alerts
  • Analyse usage patterns to improve user experience and develop new features
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

Important: We do not use your conversation data to train AI models. Your conversations are used solely to provide you with responses during your session and are not shared with third-party AI providers for model training purposes.

Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

  • Contract: Processing necessary to perform our contract with you (providing the Service)
  • Legitimate interests: Processing necessary for our legitimate interests (improving the Service, security) where these are not overridden by your rights
  • Legal obligation: Processing necessary to comply with our legal obligations
  • Consent: Where you have given consent for specific processing activities

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service providers: We use third-party service providers for hosting, analytics, and other operational purposes. These providers are contractually bound to protect your information and may only use it to provide services to us.
  • AI processing: To provide the AI assistant functionality, we send your queries to third-party AI providers. These providers process your data solely to generate responses and do not retain or use your data for their own purposes.
  • Legal requirements: We may disclose information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect rights, property, or safety.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfil the purposes described in this policy. Specifically:

  • Account information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes
  • Conversation history: You may delete your conversation history at any time through the Service. Deleted conversations are removed from our active systems within 30 days.
  • Technical logs: Retained for up to 90 days for security and debugging purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Secure hosting infrastructure

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request restriction of processing in certain circumstances
  • Data portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly. Visit ico.org.uk for more information.

International Transfers

Your information may be transferred to and processed in countries outside the United Kingdom. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Government, to protect your information.

Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after any changes indicates acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Lloyd IT Limited
Trading as Finleyy
Company number: 16349880
Email: [email protected]