Privacy Policy

Introduction and who we are

This Privacy Policy explains how LEC AI Limited, part of LEC Group ("LEC AI", "we", "us" or "our"), based in London, United Kingdom, collects, uses and protects personal information when you visit lecai.ai (the "Site") or interact with us through it, for example via our contact form.

This policy covers personal information collected through the Site itself. If LEC AI processes personal data on behalf of a customer through Donnie or Bishop, that processing is governed separately by the relevant customer agreement and data processing terms, not by this policy. Donnie Notes, our internal tool for staff, is also covered by its own separate privacy policy, not this one.

Information we collect

We may collect the following categories of personal information:

• Contact details you provide through our contact form or enquiry channels, such as name, email address, company, and the content of your message.
• Usage data, such as pages visited, time spent on the Site, browser and device type, and referring pages, collected via privacy-friendly analytics.
• Correspondence you send us, including any information you choose to include when contacting us about Donnie, Bishop, or general enquiries.
• Recruitment information, if you apply for a role with us through our careers page: your CV or résumé, contact details, links to your work such as project repositories or LinkedIn, your answers on the application form, and notes from anyone involved in reviewing or interviewing you.

We do not knowingly collect special category data, such as health or biometric information, through the Site.

How we use your information

We use personal information to:

• respond to enquiries submitted through the contact form;
• operate, maintain and improve the Site;
• understand how visitors use the Site, through aggregated analytics;
• communicate with you about LEC AI's products and services, where you have consented or where permitted by law;
• meet legal, regulatory and security obligations.

Careers and recruitment

If you apply for a role through our careers page, we use the information in your application to assess you for that role and to run our recruitment process end to end: reviewing your CV, scheduling and recording interview feedback, and telling you the outcome.

If we decide you are not right for the specific role you applied to, but nothing about your application itself was the reason — for example the role changed, was paused, or someone else was simply a closer fit for that one role — we may keep your details on an internal priority list, so that a named person on our hiring team can approach you again if a different, better-matched role opens later at LEC AI. Where this happens: contact comes by email from a person, not an automated system; it names the specific advertised role we think may fit, rather than adding you to a general pipeline; and you can ask to be taken off this list at any time using the contact details below. Coming off the list stops any future approach — it does not change a decision already made about a role you applied to.

We keep application and recruitment records, including CVs, for 12 months after a recruitment process closes, or for as long as you remain on the priority list described above, so we can meet record-keeping obligations and, where applicable, reconsider you for a future role. You can ask us to delete your application at any time; see "Your rights" below.

Legal basis for processing

Where UK GDPR applies, we rely on one or more of the following legal bases: your consent, for example for marketing communications; our legitimate interests, for example operating and securing the Site, responding to enquiries, and assessing and progressing job applications including the priority-list approach described above; and compliance with a legal obligation, where applicable.

Sharing your information

We may share personal information with:

• service providers who support the Site, such as hosting, analytics and contact-form providers, acting on our instructions;
• professional advisers, where necessary for legal, accounting or compliance purposes;
• a buyer or successor, in the event of a merger, acquisition or sale of business assets.

We do not sell personal information to third parties.

International transfers

Where personal information is transferred outside the United Kingdom, we take steps to ensure an adequate level of protection, such as relying on adequacy regulations or standard contractual clauses, as required by UK data protection law.

Data retention

We retain personal information only for as long as necessary for the purposes described in this policy, including to respond to your enquiry, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected; see "Careers and recruitment" above for how long we keep an application.

Your rights

Subject to applicable law, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information;
• object to or restrict certain processing;
• request that your information be provided in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or another relevant supervisory authority.

Cookies

The Site uses cookies and similar technologies to operate and, where used, to understand how it is used. Full details are set out in our separate Cookie Policy, including what is currently used and how to manage your preferences.

Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The Site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. Any changes will be posted on this page with a revised "last updated" date.

Contact us

Questions about this Privacy Policy, or requests relating to your personal information, can be sent via our contact form, or in writing to LEC AI Limited, LEC Group, London, United Kingdom.