Privacy Policy for www.gorf.ai
Effective date: 14 January 2026
This Privacy Policy explains how gorf.ai (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use www.gorf.ai (the “Website”) and any related services we provide (the “Services”).
If you do not agree with this Privacy Policy, please do not use the Website or Services.
1. Who we are
Controller: gorf.ai (the organisation responsible for your personal data).
Registered company in England and Wales number: 16590264
If you need to contact us about privacy, please use the details in the Contact section below.
2. The personal data we collect
We collect personal data in the following ways:
A. Information you provide to us
Depending on how you use the Website/Services, this may include:
-
Name
-
Email address
-
Company name
-
Account credentials (if accounts are enabled)
-
Messages, enquiries, and other content you submit (for example via forms, chat, or email)
-
Payment and billing information (if purchases are enabled, typically processed by a payment provider rather than stored by us)
B. Information we collect automatically
When you use the Website, we may collect:
-
IP address
-
Device and browser information
-
Operating system
-
Referral source and pages visited
-
Usage data and interaction events
-
Approximate location (derived from IP)
-
Cookie and similar technology data (see Cookies Policy)
C. Information from third parties
We may receive personal data from:
-
Analytics providers
-
Advertising and marketing partners (if used)
-
Payment processors (if used)
-
Identity/authentication providers (if used)
-
Social media platforms (only where you interact with our pages or content)
3. How we use personal data
We use personal data to:
-
Provide and operate the Website and Services
-
Respond to enquiries and provide customer support
-
Send service-related communications (for example, important updates)
-
Improve and develop our Website and Services
-
Monitor and enhance security, prevent fraud, and troubleshoot
-
Measure marketing performance and, where applicable, provide marketing communications
-
Comply with legal obligations and enforce our rights
4. Legal bases for processing (UK GDPR / EU GDPR)
Where UK GDPR or EU GDPR applies, we rely on the following lawful bases:
-
Contract: to provide the Services you request or to take steps before entering into a contract.
-
Legitimate interests: to operate, improve, and secure our Website and Services, and to understand user needs (balanced against your rights).
-
Consent: for non-essential cookies and, where required, for marketing communications.
-
Legal obligation: to comply with applicable laws and regulations.
You may withdraw consent at any time, where consent is the basis for processing.
5. Marketing communications
If you opt in (or if permitted by law), we may send you marketing communications. You can opt out at any time by using the unsubscribe link in emails or contacting us.
We do not sell your personal data.
6. Cookies and similar technologies
We use cookies and similar technologies for functionality, analytics, and (where applicable) marketing. For details, see our Cookies Policy.
You can control non-essential cookies using our cookie banner (where available) and via your browser settings.
7. Sharing and disclosure of personal data
We may share personal data with:
-
Service providers who help us operate the Website and Services (for example hosting, analytics, email delivery, customer support, security, payments).
-
Professional advisers (for example legal, accounting, insurance).
-
Authorities where required by law or to protect rights, safety, and security.
-
Business transferees if we are involved in a merger, acquisition, reorganisation, or sale of assets (your data may be transferred as part of that transaction).
When we share data with service providers, they are required to protect it and use it only for the services they provide to us.
8. International transfers
Your data may be processed outside the UK or European Economic Area. Where required, we use appropriate safeguards such as UK International Data Transfer Agreements or EU Standard Contractual Clauses, and we take steps to ensure an equivalent level of protection.
9. Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to meet legal, accounting, or reporting requirements.
Retention periods vary depending on the nature of the data and why it is processed. We may retain and use aggregated or anonymised data for longer periods.
10. Security
We implement appropriate technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.
11. Your rights
Depending on your location, you may have rights including:
-
Access to your personal data
-
Correction of inaccurate or incomplete data
-
Deletion (erasure) of your personal data
-
Restriction of processing
-
Objection to processing (including to certain processing based on legitimate interests)
-
Data portability
-
Withdrawal of consent (where applicable)
-
The right to lodge a complaint with a supervisory authority
To exercise your rights, contact us using the details below.
UK: You can complain to the Information Commissioner’s Office (ICO).
EU: You can complain to your local data protection authority.
12. Children’s privacy
Our Website and Services are not intended for children under 13 (or under 16 where applicable by local law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.
13. Links to other websites
The Website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. You should review their privacy policies before providing any personal data.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. If changes are material, we may provide additional notice where appropriate.
15. Contact us
For questions, requests, or complaints about this Privacy Policy or your personal data:
-
Email: hello@gorf.ai
-
Website: www.gorf.ai