Privacy Policy

1. Introduction

Welcome to Grindless AI. This Privacy Policy explains how Leigh Valentine ("we," "us," or "our") collects, uses, and protects your personal information when you visit and use our website at grindlessai.com (the "Site").

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Information You Provide

We collect information that you voluntarily provide when you use our admin login system. This may include your email address and authentication credentials provided through our third-party authentication provider (Manus OAuth).

3.2 Automatically Collected Information

When you visit our Site, we may automatically collect certain technical information, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses

This information is collected through standard web server logs and is used to maintain and improve the Site's functionality and security.

3.3 Cookies

We use essential cookies to maintain your login session when you access the admin dashboard. These cookies are necessary for the Site to function properly and cannot be disabled. We do not use tracking cookies or third-party advertising cookies.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide access to the admin dashboard and manage content
• To maintain the security and integrity of the Site
• To improve the Site's functionality and user experience
• To respond to your inquiries and provide customer support
• To comply with legal obligations

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Legitimate interests: To operate and improve the Site
• Consent: When you voluntarily provide information or use our services
• Legal obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We use Manus for authentication and hosting services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Admin account information is retained for the duration of your account's active status.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

10. Third-Party Links

Our Site may contain links to third-party websites, including Buy Me a Coffee and external booking platforms. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: