Legal · Last updated 1 March 2026

Privacy Policy

This Privacy Policy explains how Unitorna AI ("Unitorna", "we", "us") collects, uses, stores and protects personal data when you visit our website or use our Services. It is written to reflect the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Unitorna AI is the data controller for the personal data described in this policy. You can contact us about privacy matters at [email protected].

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of information:

We do not knowingly collect special category data. Please do not send us sensitive information unless we specifically request it.

3. How we use your data

We use personal data only where we have a lawful basis to do so. These include performing a contract with you, complying with legal obligations, pursuing our legitimate interests in operating and improving a secure service, and, where required, your consent. Typical purposes include creating and administering accounts, providing the Services, responding to enquiries, preventing fraud and misuse, and analysing site performance.

4. Cookies and similar technologies

We use cookies and similar technologies to keep the website working, remember your preferences and understand how the site is used. Where a cookie is not strictly necessary, we will ask for your consent before setting it. You can manage your preferences through your browser settings at any time.

5. Sharing your data

We do not sell personal data. We may share it with carefully selected service providers who process data on our behalf, such as hosting, analytics, customer support and secure communication providers. These providers are bound by written contracts and may only act on our instructions. We may also disclose information where required by law, by a court order or to protect the rights, property or safety of Unitorna AI, our users or others.

6. International transfers

Some of our service providers may be located outside the United Kingdom. Where we transfer personal data internationally, we will ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as required by UK data protection law.

7. Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including the purposes of satisfying any legal, accounting or reporting requirements. When data is no longer required, we delete or anonymise it securely.

8. Security

We apply appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration and disclosure. These include encryption in transit, access controls and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security, and you should also protect your own credentials carefully.

9. Your rights

Under UK data protection law you have the right to:

We will respond to valid requests within one month, as required by law. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

The Services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be published on this page, with the date of the most recent revision shown above.