Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Information you provide directly — your name, email address, company, phone number, service interest, and project details when you submit our contact form, book a strategy call through our scheduling widget, or subscribe to our newsletter.
• Information collected automatically — IP address, browser type, device information, pages visited, referral source, and general usage patterns, collected via standard web server logs and (where enabled) analytics tools.
• Cookies and similar technologies — small files used to remember preferences, understand site usage, and support embedded third-party tools such as our booking calendar.
• Client project data — when you engage us for AI services, chatbot, or automation work, you may share business data, documents, or system access necessary for us to design, build, and operate the solution under a separate service agreement.

2. How We Use Your Information

• Respond to enquiries, schedule calls, and provide quotes or proposals
• Deliver, maintain, and support the Services you've engaged us for
• Send project updates, invoices, and — where you've opted in — newsletter content
• Improve our Site, offerings, and internal AI-assisted workflows
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations

3. AI & Automation Tools

As an AI solutions agency, we build and operate AI-driven systems — including chatbots, AI receptionists, and workflow automations — for ourselves and our clients. Where we process personal data through AI or automation tools (ours or a third-party provider's), we take reasonable steps to ensure that data is handled securely and used only for the purpose it was collected. We do not use client project data to train third-party foundation models unless explicitly agreed in writing.

4. Third-Party Services

We rely on trusted third-party providers to operate the Site and Services, including:

• A scheduling/booking platform to power our "Book a free strategy call" calendar
• Hosting and infrastructure providers to serve the Site
• Email delivery providers to send transactional messages and (opt-in) newsletters
• Analytics providers to understand aggregate Site usage

These providers process data on our behalf under their own privacy and security terms, and only to the extent necessary to provide their service to us.

5. Data Sharing & Disclosure

We do not sell your personal information. We share information only with the service providers described above, professional advisors (legal, accounting) as needed, or when required by law, regulation, legal process, or to protect the rights, property, or safety of Scilla, our clients, or others.

6. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy — typically for the duration of our relationship plus a reasonable period afterward for legal, accounting, or reporting requirements — after which it is deleted or anonymised.

7. Data Security

We use commercially reasonable administrative, technical, and organisational safeguards to protect information against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information, restrict or object to certain processing, or withdraw consent (such as unsubscribing from our newsletter via the link in any email). To exercise these rights, contact us using the details below.

If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or the CCPA/CPRA respectively. We will respond to verified requests within the timeframes required by applicable law.

9. International Data Transfers

We and our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards — such as standard contractual clauses — to protect data transferred internationally.

10. Children's Privacy

The Site and Services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The "Last updated" date above indicates when this policy was last revised. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

Questions about this Privacy Policy or how we handle your data? Email us at hello@scillasolutions.com or reach out via our contact page.