Privacy policy. What we collect, and what we do with it.

CoSama AI ("we", "us", "our") provides AI consulting, implementation and infrastructure services. This policy explains what personal information we collect through this website, why we collect it, and the choices you have about it.

It applies to this website and to enquiries you send us through it. It does not cover third-party websites we link to, which have their own policies.

When you submit our contact form we ask for your name, email address, business name, website, an optional phone number, and whatever you write in the message field. We only ask for what we need to answer you properly.

If you go on to work with us, we may also hold information you share during that engagement, such as billing details and contact details for people on your team.

Like most websites, our servers record basic technical information when you visit: IP address, browser type and version, device type, referring page, the pages you view, and the date and time of your visit. This is used to keep the site running, diagnose faults, and understand which pages are useful.

Cookies are small files stored on your device. We use only what is necessary for the site to function, together with any analytics described below. We do not use cookies to build advertising profiles or to track you across other websites.

You can block or delete cookies in your browser settings. Essential cookies are required for parts of the site to work correctly, so disabling them may affect how the site behaves.

We use the information described above to:

• respond to your enquiry and provide the services you ask for;
• operate, maintain and improve this website;
• send you information relevant to a project we are working on together;
• keep records for accounting and administration; and
• meet our legal and regulatory obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Where data protection law such as the UK GDPR or EU GDPR applies, we process personal information on the basis of your consent, our legitimate interest in running and improving our business, the performance of a contract with you, or compliance with a legal obligation. Where we rely on consent, you can withdraw it at any time.

We use a small number of service providers to run the business, and they only receive what they need to perform their function. These include our website hosting provider and the email delivery service that carries contact form submissions to our inbox.

We may also disclose information where we are required to by law, or where it is necessary to establish, exercise or defend legal claims. If our business is ever sold or reorganised, information may transfer as part of that transaction.

Our service providers may process information in countries other than your own. Where information is transferred outside your jurisdiction, we take reasonable steps to ensure it remains protected by appropriate safeguards.

We keep enquiry correspondence for as long as it is useful to answer you and to maintain a record of the conversation. Records relating to clients and to accounting are kept for as long as the law requires. When information is no longer needed we delete it or render it anonymous.

We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep the risk low and to respond quickly if something goes wrong.

Depending on where you live, you may have the right to request a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent you previously gave.

If you are in California, you may also have the right to know what personal information is collected and disclosed, to request its deletion, and not to be discriminated against for exercising those rights. We do not sell personal information.

To make a request, get in touch. We will respond within the time the applicable law allows. You also have the right to complain to your local data protection authority.

This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

Our site may link to websites we do not control. We are not responsible for their content or their privacy practices, and we encourage you to read their policies before providing them with any information.

We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Material changes will be made clear on this page.

If you have questions about this policy or about how we handle your information, please contact us.