Privacy Policy
Neural Natives Limited
Last updated: February 2026
1. Who We Are
Neural Natives Limited ("we", "us", "our") is a company registered in England and Wales with its registered office at 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. We provide AI consulting and software services to business clients. This Privacy Policy explains how we handle personal data in connection with our website at neuralnatives.com. For questions about this Privacy Policy or to exercise your data protection rights, please contact us at: hello@neuralnatives.ai
2. What This Policy Covers
This Privacy Policy applies to personal data we collect when you visit our website. It does not cover data processing we carry out on behalf of our clients as a data processor. That processing is governed by separate Data Processing Agreements between us and our clients.
3. Data We Collect
3.1 Server Logs
When you visit our website, our hosting provider automatically collects certain technical data, including your IP address (anonymised where feasible), browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This data is collected for the purpose of ensuring the security and functionality of the website.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — maintaining the security, availability, and performance of our website.
Retention: Server logs are retained for no longer than 30 days and then automatically deleted.
3.2 Contact by Email
If you contact us by email using the address published on our website, we will process your name, email address, and the content of your message for the purpose of responding to your enquiry.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — responding to business enquiries directed to us. Where your enquiry relates to entering into a contract, the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).
Retention: We retain correspondence for as long as necessary to handle the enquiry and, where a business relationship is established, for the duration of that relationship. In all cases, we may retain correspondence for up to 6 years after the last meaningful exchange to protect our legitimate interests in connection with potential legal claims, in line with applicable limitation periods under English law.
3.3 Cookies and Tracking
Our website is hosted on Webflow, which may set strictly necessary cookies required for the website to function (such as session management). These cookies do not collect personal data and do not require consent under applicable data protection law.Beyond these essential cookies, our website does not use any analytics tools, social media plugins, advertising cookies, or other tracking technologies. We do not use Google Analytics, Facebook Pixel, or similar services. We do not serve advertisements.
4. Data Sharing
We do not sell your personal data. We may share your data with:
Hosting provider: Our website is hosted by a third-party provider that processes server log data on our behalf. The provider is bound by a data processing agreement.
Professional advisers: We may share data with legal or financial advisers where necessary, subject to professional confidentiality obligations.
Legal obligations: We may disclose data where required by applicable law, regulation, or legal process.
5. International Transfers
Our website is hosted by Webflow, Inc., which uses Amazon Web Services (AWS) infrastructure located in the United States, with content delivered globally via Cloudflare's CDN. As a result, technical data collected through server logs (see Section 3.1) may be processed and stored in the United States.We do not collect personal data through the Website beyond server logs and any correspondence you send to us by email (see Section 3.2). Email correspondence is processed within our own systems and is not transferred to Webflow.Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including reliance on adequacy decisions or Standard Contractual Clauses. The United Kingdom is currently recognised by the European Commission as providing an adequate level of data protection.
6. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:Access: You may request a copy of the personal data we hold about you.
Rectification: You may request that we correct inaccurate or incomplete data.Erasure: You may request that we delete your personal data, subject to legal retention obligations.
Restriction: You may request that we restrict the processing of your data in certain circumstances.
Data portability: You may request to receive your data in a structured, commonly used, machine-readable format.
Objection: You may object to processing based on legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@neuralnatives.ai. We will respond within one month.
7. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact:
UK: Information Commissioner's Office (ICO) — ico.org.uk
Austria: Österreichische Datenschutzbehörde — dsb.gv.at
Other EU/EEA countries: The supervisory authority in your country of residence or place of work.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular review of our security practices.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.