Privacy Policy

Smart AI Core is the controller responsible for personal data collected through this website, related enquiries and direct communications with us.

If you have questions about this policy or want to exercise your data protection rights, contact us at info@smartaicore.com.

This policy applies to the website at https://smartaicore.com, enquiry forms, email communications and related online marketing activity for Smart AI Core.

We may collect the following types of personal data:

• Identity and contact details, such as your name, email address, phone number and company name.
• Enquiry details, such as enquiry type, property type, project location, project requirements, messages, preferences, budget context and timescales you choose to share.
• Communication records, such as emails, form submissions, call notes and follow-up actions.
• Referral and attribution data, where you reach the website through a partner referral link or QR code (for example a code displayed in a partner taxi). This may include the referral code, the associated partner company or driver identifier, the page you landed on, the time of the visit and whether the visit later led to an enquiry.
• Technical and usage data, such as IP address, browser type, device type, pages viewed, approximate location, referral source, session data and interaction events.
• Cookie, analytics and advertising data collected through tools such as Google Analytics, Google tags and related Google advertising or conversion measurement services, where enabled.
• Admin and security data for authorised website administrators, such as Firebase Authentication account details, sign-in status and access tokens.

We do not intentionally collect special category data through this website. Please do not send sensitive personal information, access codes, passwords, unnecessary security footage or confidential building security details through the general enquiry form.

We collect personal data when you submit a form, email us, ask for a quote, make a partnership enquiry, discuss a project with us or use the website.

We also collect some data automatically through cookies, tags, server logs and similar technologies. This may include Google Analytics and Google tag data used to understand website performance, measure advertising and improve future marketing.

If you visit through a partner referral link or scan a partner QR code, we record that the visit came from that referral and store a first-party referral cookie on your device so that, if you later submit an enquiry, we can attribute it to the correct referral partner.

We use or may use cookies, pixels, tags and similar technologies to operate the website, understand how visitors use it, measure advertising performance and improve our services.

Google Analytics and Google tags may collect information such as pages visited, session duration, referral source, device and browser information, approximate location, interaction events and conversion events. Advertising tags may help us understand whether advertising leads to website visits or enquiries.

We also use a first-party referral cookie (named “sac_ref”) when you arrive through a partner referral link or QR code. This cookie stores only a short referral code, is readable only by this website, lasts for up to 90 days and is used to attribute any enquiry you later submit to the partner who referred you. It does not track your browsing on other websites and is not used for third-party advertising.

We do not sell personal information. We do not give enquiry details to Google or other advertising providers for them to contact you directly. Google may process tag and cookie data under its own terms and policies, depending on the services enabled, your consent choices and your Google settings.

Where the law requires consent for analytics, advertising or similar non-essential cookies, those technologies should only be used after consent has been given through the website cookie controls. You can restrict cookies through your browser settings and use Google privacy controls or browser add-ons to limit Google Analytics processing.

We share personal data only where needed for the purposes described in this policy. Recipients may include:

• Website hosting and infrastructure providers, including our VPS hosting provider in Poland.
• Google services, including Firebase, Firestore, Firebase Authentication, Google Analytics and Google tags where configured.
• Brevo, used for sending and receiving website enquiry emails and related notifications.
• Professional advisers, accountants, insurers, legal advisers and compliance providers.
• Trusted subcontractors, installers or technical partners where needed to respond to a project, quote or partnership enquiry.
• Referral partners, such as taxi companies participating in our referral programme, who may receive limited information needed to administer the arrangement. This is normally limited to referral performance data such as visit and enquiry counts attributed to their referral links. We do not give referral partners your enquiry contact details for their own marketing.
• Smart Home Training Center or related training contacts where your enquiry specifically concerns training, certification or installer network opportunities.
• Regulators, law enforcement, courts or public authorities where we are legally required or need to protect legal rights.

We require service providers to handle personal data appropriately and only for authorised purposes. We do not sell personal data.

The website is hosted on a VPS in Poland. Poland is in the European Economic Area. Transfers of personal data from the UK to the EEA are currently permitted under UK adequacy regulations, subject to the provider using appropriate contractual, security and operational measures.

Enquiry and admin data may also be processed through Google Firebase, Firestore and Brevo. These providers may process data in the UK, EEA or other countries depending on account configuration, service features and their data processing terms.

Where personal data is transferred outside the UK or EEA, we expect appropriate safeguards to be used, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or equivalent lawful transfer mechanisms.

We keep personal data only for as long as reasonably necessary for the purpose it was collected, unless a longer period is required for legal, tax, accounting, insurance or dispute reasons.

• General enquiries are normally kept for up to 24 months after the last meaningful contact, unless the enquiry becomes a project or legal record.
• Quote, project, contract and accounting records may be kept for up to 7 years after the relevant transaction or project ends.
• Analytics data is retained according to the settings in the relevant Google Analytics property, commonly up to 14 months unless configured differently.
• Referral visit and attribution records are kept for as long as needed to administer the referral partner programme and any related payments or reporting, and the referral cookie itself lasts for up to 90 days.
• Marketing consent and suppression records may be kept while consent remains valid and for a reasonable period afterwards to evidence your choices.
• Server logs and security records are kept for a reasonable period needed for security, diagnostics and legal protection.

We use technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls, authentication, secure hosting, restricted admin access and provider security controls.

No website, email system or internet transmission is completely secure. If you need to send highly sensitive project or security information, contact us first so we can agree a more suitable method.

Under UK data protection law, you may have the right to:

• Access a copy of your personal data.
• Ask us to correct inaccurate or incomplete personal data.
• Ask us to erase personal data in certain circumstances.
• Ask us to restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Receive certain data in a portable format.
• Withdraw consent where processing is based on consent.
• Object to direct marketing at any time.

To exercise your rights, email info@smartaicore.com. We may need to verify your identity before responding.

If you are unhappy with how we handle personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator. The ICO website is ico.org.uk.

This website is not intended for children and we do not knowingly collect personal data from children through the website.

We do not use website enquiry data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Smart AI Core may design or support systems involving cameras, access control, smart locks, gates, networks or automation. Where a client operates those systems, the client may be the controller for personal data captured by them.

If we process personal data on behalf of a client as part of a project, the relevant project contract, support terms or data processing agreement should set out the responsibilities, instructions and safeguards for that processing.

We may update this policy when our services, providers, legal obligations or website features change. The date at the top shows when it was last updated.