Privacy Policy

Last updated: April 2026

This Privacy Policy explains how MidniteAI Ltd ("MidniteAI", "we", "us", or "our") collects, uses, and protects your personal data when you visit our website or enquire about our services. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

MidniteAI Ltd is a limited company registered in England and Wales. Our registered address is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For any data-related queries, contact us at hello@midniteai.co.uk.

2. What Data We Collect

We may collect the following personal data:

• Contact information — your name, email address, and phone number if you submit an enquiry or book a call
• Communication data — records of emails or messages you send us
• Usage data — information about how you use our website, including pages visited, time spent, and your approximate location (collected via analytics tools if you consent)
• Technical data — your IP address, browser type, and device type

3. How We Collect Your Data

• When you book a call via Calendly
• When you email us directly at hello@midniteai.co.uk
• Automatically through analytics cookies (only if you accept cookies)

4. How We Use Your Data

We use your data to:

• Respond to your enquiries and schedule consultations
• Provide and manage our services
• Improve our website and understand how visitors use it
• Comply with our legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interests — to respond to enquiries and improve our services
• Contract — to fulfil our obligations where we have entered into an agreement with you
• Consent — for analytics cookies, where you have given explicit consent

6. Third-Party Services

We use the following third-party services which may process your data:

• Calendly — for scheduling calls. Calendly's own privacy policy applies to data collected through their platform. See calendly.com/privacy
• Google Analytics — for website analytics (only if you accept cookies). See policies.google.com/privacy

7. Data Retention

We retain your personal data only for as long as necessary. Enquiry data is kept for up to 2 years. Client data is retained for 6 years after the end of a contract, in line with UK statutory requirements.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict our processing of your data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at hello@midniteai.co.uk.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of last update shown above.