Privacy Policy

1. Introduction

Navitec Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

We are registered in England and Wales under company number 16885355, with our registered office at 86-90 Paul Street, London EC2A 4NE.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when you:

• Fill out our contact form (name, email address, company name, message)
• Communicate with us via chat (conversation content, contact details)
• Subscribe to our newsletter or updates
• Correspond with us by email or other means

3.2 Information Automatically Collected

When you visit our website, we automatically collect:

• Website usage data (pages visited, time spent, navigation paths)
• Technical information (IP address, browser type, device type, operating system)
• Referral source (how you arrived at our website)

This information is collected through cookies and similar technologies. See our Cookie Policy for more details.

4. How We Use Your Information

We use your personal data for the following purposes:

• Responding to enquiries: To answer questions and provide information about our products and services
• Customer support: To provide assistance through our chat widget and email correspondence
• Website improvement: To analyse how our website is used and improve user experience
• Marketing communications: To send relevant updates about our products and services (with your consent)
• Legal compliance: To comply with legal obligations and respond to lawful requests
• Business operations: To manage our business relationships and contracts

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
• Contractual necessity: Processing is necessary to fulfil a contract with you or take steps before entering into a contract
• Legitimate interests: Processing is necessary for our legitimate business interests (e.g., website analytics, security), provided your rights do not override these interests
• Legal obligation: Processing is necessary to comply with legal requirements

6. Third-Party Services

We use the following third-party service providers who may process your personal data:

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: 3 years from last contact, or until you request deletion
• Chat conversations: 3 years from conversation date, or until you request deletion
• Analytics data: 26 months (HubSpot default retention period)
• Marketing consent: Until withdrawn, or 3 years of inactivity

8. Your Rights Under GDPR

If you are located in the UK or European Economic Area, you have the following rights:

• Right of access: Request a copy of your personal data we hold
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent
• Right not to be subject to automated decision-making: Including profiling

To exercise any of these rights, please contact us at privacy@navitecai.com. We will respond within one month of your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure hosting infrastructure with access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure data processing agreements with third-party providers

10. International Data Transfers

Some of our service providers are located outside the UK and European Economic Area. When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the UK Information Commissioner's Office
• Other legally approved transfer mechanisms

11. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@navitecai.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, please contact us first at privacy@navitecai.com. We will investigate and respond to your concerns.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: