Who we are
Gnomic Limited, referred to in this policy as “Gnomic”, “we”, “us” or “our”, is a software and AI studio registered in England and Wales under company number 15898888.
Our registered office is in Winchester, United Kingdom.
For personal data collected through this website, enquiry forms, callback requests and Pathfinder assessments, Gnomic Limited acts as the data controller.
The data we collect
We may collect personal data in the following ways.
Information you provide to us
This may include your name, email address, phone number, company name, role, project details, enquiry information, callback requests, Pathfinder responses and any other information you choose to send to us.
Information collected automatically
When you use our website, we may collect limited technical and usage information, such as pages viewed, approximate location, device type, browser information, referral source and interaction data. We use this to understand how the website is used and to improve its performance.
Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy. Where cookies require consent, we will ask for your permission before using them.
How we use your data
We use personal data to:
- respond to enquiries and callback requests;
- generate and deliver Pathfinder reports;
- understand your project, business need or service request;
- provide proposals, estimates and agreed services;
- manage client relationships and project delivery;
- improve our website, services and user experience;
- keep appropriate business, accounting and legal records;
- meet our legal and regulatory obligations.
We do not sell your personal data.
We do not use your personal data for unrelated marketing without a lawful basis. Where consent is required for marketing communications, we will ask for it first.
Pathfinder and AI-generated reports
Pathfinder is an assessment tool designed to help users clarify a software, AI, automation or digital project before committing to a full engagement.
When you complete Pathfinder, we use the information you provide to generate a report based on your responses. This may include information about your business, project goals, current systems, operational challenges, technical requirements, budget expectations and decision-making context.
Pathfinder reports may be generated or supported using automated tools, including AI-assisted systems. These tools help structure and summarise the information you provide, identify relevant project considerations and produce an initial report.
Pathfinder reports are intended to provide general business and project guidance. They do not make legal, financial, employment, credit, healthcare or similarly significant decisions about you.
Pathfinder outputs may be reviewed by Gnomic where appropriate, particularly where a report leads to a follow-up enquiry, proposal or client engagement.
We do not use Pathfinder responses to train third-party AI models unless this is expressly stated and you have agreed to it.
Our lawful basis for processing
Under UK GDPR, we rely on different lawful bases depending on how and why we use your data.
For enquiries, callback requests and early project discussions, we usually rely on our legitimate interests in responding to prospective clients and managing business communications.
For Pathfinder reports, we rely on legitimate interests where the report is generated in response to your request, or contract performance where Pathfinder forms part of an agreed service.
For client work, proposals, project delivery and account management, we rely on contract performance or steps taken before entering into a contract.
For accounting, tax, legal and compliance records, we rely on legal obligation where applicable.
For cookies, analytics and marketing communications that require opt-in permission, we rely on consent.
How long we keep your data
We keep personal data only for as long as reasonably necessary for the purpose it was collected.
Enquiry and callback data is usually kept for up to 24 months, unless you become a client or there is a clear business reason to keep it for longer.
Pathfinder responses and generated reports are usually kept for up to 12 months, unless you ask us to delete them sooner or they become part of an agreed client engagement.
Client, project, contract, invoice and accounting records are usually kept for up to 6 years after the end of the relevant relationship, unless a longer period is required for legal, regulatory or dispute-related reasons.
Website analytics data is kept only for as long as needed to understand website performance and improve our services. Where possible, analytics data is aggregated or anonymised.
Who we share data with
We use a limited number of trusted service providers to help us operate our website, manage communications, deliver reports, host systems, provide analytics and run our business.
These providers may include hosting companies, email and communication platforms, analytics providers, form tools, cloud software providers, AI-assisted processing tools and professional advisers.
Where a provider processes personal data on our behalf, we use appropriate contractual safeguards and require them to handle personal data in line with UK data protection requirements.
We may also share information where required by law, regulation, legal process or to protect our legal rights.
International transfers
Some of the tools and providers we use may process personal data outside the UK or EEA.
Where this happens, we will only transfer personal data where appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
Your rights
Under UK data protection law, you have rights over your personal data. These may include the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data;
- restrict how we use your data;
- object to certain processing;
- request data portability;
- withdraw consent where processing is based on consent.
These rights are not absolute and may depend on the circumstances.
To exercise your rights, email hello@gnomic.dev.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, email system or online service can be guaranteed to be completely secure. Please take care when sending sensitive or confidential information to us.
Updates to this policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal obligations or how we handle personal data.
The latest version will always be published on this page.
Contact
For questions about this Privacy Policy or how we handle personal data, contact:
Gnomic Limited
Winchester
United Kingdom