Privacy Policy & GDPR Overview

We take your privacy seriously and want you to understand how and why we use your personal data. When you use our website, we may collect information such as contact details, account information, and usage data. We use this data to provide and improve our services, respond to your requests, maintain security, and meet our legal obligations.

Under the General Data Protection Regulation (GDPR), we only process your personal data when we have a valid legal basis. This may include: performing a contract with you (for example, managing your account or processing an order), complying with legal duties, protecting our legitimate interests (such as improving our services or preventing fraud), or when you have given us your explicit consent for specific purposes.

The data controller responsible for your personal data is [Company Name], registered at [Company Address]. This means we decide how and why your data is processed and are responsible for safeguarding it. If you have any questions or concerns about how we handle your data, you can contact us using the details provided in the full Privacy Policy below.

As a user, you have important rights under GDPR. These include the right to access your personal data, request correction of inaccurate information (rectification), ask for your data to be deleted (erasure), request that we limit how we use your data (restriction), receive your data in a portable format (portability), and object to certain types of processing, including direct marketing. You may also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority.

This introduction is only a summary. The following sections of our Privacy Policy explain in more detail what data we collect, how we use it, how long we keep it, who we share it with, and how you can exercise your rights. We encourage you to read the full policy carefully so you can make informed choices about your personal data.

Privacy Policy – Personal Data We Collect and Use

We collect and process personal data only to the extent necessary to provide our services in a GDPR-compliant manner. Depending on how you use our website, we may collect the following categories of data:

  • Identification and contact data (mandatory for contracts and support): name, surname, billing details, email address, telephone number, postal address. We collect this data when you create a customer account, place an order, or contact our customer support. Without this information, we cannot process your request or fulfil a contract.
  • Account and communication data (mandatory for accounts, optional for preferences): login details, password (stored in encrypted form), communication history, your preferences and settings. Basic account data is required to operate your account; additional profile information is optional and can be changed or deleted at any time.
  • Newsletter and marketing data (optional, based on consent): email address, name, marketing preferences, records of consent and unsubscription. You provide this data voluntarily via newsletter sign-up forms. You can withdraw your consent at any time by using the unsubscribe link or contacting us.
  • Technical and usage data (mostly collected automatically): IP address (shortened or pseudonymised where possible), device and browser information, access times, pages visited, clicks, and referring URLs. This data is collected via cookies, server logs, and analytics tools to ensure the security and proper functioning of the website and to understand how our services are used.
  • Cookie and tracking data (optional, except strictly necessary cookies): information stored in cookies or similar technologies. Strictly necessary cookies are required for the website to function and are therefore mandatory. Analytics, preference, and marketing cookies are used only with your prior consent, which you can manage via our cookie banner or browser settings.

We use your personal data for clearly defined purposes:

  • Providing and improving our services: to process orders, manage customer accounts, deliver digital or physical products, and ensure the technical operation and security of our website.
  • Customer support and communication: to respond to your inquiries, handle complaints, provide assistance, and send important service-related notifications (e.g. changes to terms, security alerts). These communications are not based on marketing consent but on our contractual or legal obligations.
  • Marketing with your consent: to send newsletters, special offers, and information about our products and services that may interest you. This processing is based on your explicit consent, which you can withdraw at any time without affecting the lawfulness of processing before withdrawal.
  • Analytics and statistics: to measure website traffic, understand how visitors use our pages, and improve content and user experience. Where possible, we use aggregated or pseudonymised data. Non-essential analytics cookies are only activated with your consent.
  • Security and fraud prevention: to protect our systems, prevent misuse, detect and investigate suspicious activities, and comply with legal obligations (e.g. accounting, tax, or regulatory requirements).

Some data is mandatory because we cannot provide our services without it (for example, contact and billing details for orders, login data for accounts, or strictly necessary cookies for basic website functions). Other data is optional and you provide it voluntarily (for example, additional profile information, newsletter subscription, or acceptance of analytics and marketing cookies). If you choose not to provide optional data, you may not receive certain benefits (such as personalised offers), but you can still use our core services.

We retain personal data only for as long as necessary for the purposes described above:

  • Customer account and contract data: stored for the duration of the contractual relationship and then for the period required by applicable law (typically 5–10 years for accounting and tax records, depending on local regulations).
  • Customer support communications: stored for the time needed to resolve your request and for a limited period afterwards (usually up to 3 years) to document our communication and handle any follow-up questions or legal claims.
  • Newsletter and marketing data: stored until you withdraw your consent or unsubscribe. We may keep a limited record of your consent and unsubscription for a longer period (usually up to 3 years) to demonstrate compliance with GDPR.
  • Analytics and technical logs: stored in a pseudonymised or aggregated form for a limited period (typically 14 months for analytics tools and up to 12 months for security logs), unless a longer retention is required for security or legal reasons.
  • Cookie data: stored for the lifetime of each cookie as specified in our Cookie Policy or until you delete cookies from your browser or change your preferences.

After the relevant retention period expires, we either securely delete your personal data or irreversibly anonymise it so that it can no longer be linked to you.

We may share your personal data with carefully selected third parties who act as our processors and help us provide our services, such as hosting providers, email and newsletter platforms, payment processors, and analytics or security tools. These partners process data only on our instructions, under written data processing agreements, and with appropriate technical and organisational measures in place. We do not sell your personal data to third parties, and we do not allow our processors to use your data for their own independent marketing purposes.

Your GDPR Privacy Rights

Under the GDPR, you have clear rights regarding your personal data. You can request access to the data we hold about you, ask us to correct inaccurate or incomplete information, and request deletion of your data where legally permitted. You may also ask us to restrict processing in certain situations, and you have the right to object to our processing, including any use of your data for direct marketing purposes.

You can request data portability by asking us to provide your personal data in a structured, commonly used and machine-readable format, or to transmit it to another controller where technically feasible. Where we rely on your consent (for example, for certain marketing or optional services), you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before you withdrew consent, but we will stop the relevant processing going forward.

To exercise any of your rights, please contact us using one of the following methods: email at privacy@example.com, our online contact form available on the “Contact” or “Privacy” page of our website, or by postal mail to our registered address (please mark the envelope “Data Protection Request”). For security, we may need to verify your identity before fulfilling your request. We aim to respond within one month, in line with GDPR requirements, and will inform you if we need more time due to complexity or volume.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with your local supervisory authority (data protection authority) in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement. You also retain the right to seek a judicial remedy. We encourage you to contact us first so we can try to resolve any concerns directly and promptly.

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include encryption, access controls, regular security reviews, and staff training. If we transfer your data outside the EU/EEA, we do so only where adequate safeguards are in place, such as adequacy decisions, standard contractual clauses, or equivalent mechanisms, to ensure your data receives a level of protection essentially equivalent to that in the EU.

Privacy Policy & GDPR Statement

Last Updated: September 2026

Data Controller: The Genius Robot Company

Website: https://www.thegeniusrobotcompany.co.uk

Email: Hello@thegeniusrobotcompany.co.uk

Telephone: +44 (0) 203 355 8624

1. Introduction and Scope

The Genius Robot Company ("we", "us", "our") takes the protection of your personal data seriously. This Privacy Policy details how we collect, process, and protect personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

This policy applies to information collected when you:

Visit and navigate ⁠www.thegeniusrobotcompany.co.uk⁠.

Engage with our advertisements and sponsored content across digital platforms, including LinkedIn.

Complete and submit our website contact forms or native LinkedIn Lead Gen Forms.

Participate in our Business Skills Action Workshops, executive coaching, or L&D advisory services.

2. The Data We Collect

We only collect personal information required to facilitate our B2B commercial advisory, training engagements, and marketing operations:

Contact Details: Full name, business email address, telephone number, job title, and organization name.

LinkedIn Campaign & Lead Form Data: Work role, seniority level, industry sector, company size, and commercial requirements submitted via LinkedIn Lead Gen forms or ad engagements.

Website Analytics & Device Information: IP address, browser type, device identifiers, referring website, and pages viewed, gathered automatically via cookies and the LinkedIn Insight Tag.

Inquiries & Correspondence: Diagnostic feedback, masterclass booking requests, and details provided during discovery calls.

We do not collect sensitive or special category data, including health, biometric, political, religious, or racial information.

3. Lawful Basis for Processing

Under Article 6 of the UK GDPR, we process your personal data under the following legal bases:

Consent (Art. 6(1)(a)): You give clear permission by submitting a website form or LinkedIn Lead Gen form to receive business skills frameworks, consultation callbacks, or commercial proposals.

Legitimate Interests (Art. 6(1)(f)): For targeted B2B commercial outreach, campaign performance measurement, IT security, and improving our professional workshops.

Contractual Necessity (Art. 6(1)(b)): To perform pre-contract assessments, deliver agreed training workshops, and provide executive coaching sessions.

Legal Obligation (Art. 6(1)(c)): To maintain accurate commercial invoicing, financial records, and tax compliance under UK law.

4. How We Use Your Information

Your information is used strictly to:

Respond to business inquiries and provide detailed information regarding workshops and advisory solutions.

Deliver requested corporate resources, including the Executive ROI Framework.

Arrange diagnostic calls, coaching sessions, and live deal simulations.

Analyze campaign effectiveness, track ad attribution, and manage ad delivery through LinkedIn Campaign Manager.

Maintain internal business administration and client service records.

We do not sell, rent, or trade personal data to third parties, advertising networks, or data brokers.

5. Third-Party Service Providers

We partner with selected third parties who handle data on our behalf under compliant Data Processing Agreements:

LinkedIn Ireland Unlimited Company: Provider of LinkedIn Campaign Manager, Lead Gen Forms, and the LinkedIn Insight Tag for professional ad delivery and conversion tracking.

Webnode AG: Website hosting provider and content management platform.

Enterprise Communication Suites: Cloud-based business software for corporate email correspondence, secure document management, and meeting scheduling.

6. Data Storage and Retention

LinkedIn Lead Gen Submissions: Data captured via LinkedIn native forms is maintained within LinkedIn Campaign Manager for up to 90 days before automatic deletion by LinkedIn.

Client and Inquiry Records: Stored securely within our operational CRM for the duration of the commercial engagement and retained for up to 2 years following the last active communication, unless deletion is requested earlier.

Statutory Financial Records: Retained for 6 years to satisfy UK corporate tax and auditing requirements.

7. Cookies and Tracking Technologies

Our website uses standard operational cookies and tracking tags, including the LinkedIn Insight Tag:

Necessary Cookies: Enable core site features, page navigation, and secure server access.

Analytics Cookies: Track aggregate traffic patterns and evaluate user journeys across our site.

Marketing Pixels: Allow LinkedIn to attribute visits to specific ad campaigns and measure conversion actions.

You can manage or disable cookies at any time via your browser settings or through our site cookie consent prompt.

8. Your Data Protection Rights

Under UK and EU GDPR legislation, you retain the following rights:

Right of Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request prompt correction of inaccurate or incomplete records.

Right to Erasure: Request the deletion of your personal data where there is no statutory reason for continued processing.

Right to Restrict or Object: Restrict data processing or object to direct marketing communications at any time.

Right to Withdraw Consent: Withdraw previously granted consent without affecting the legality of prior processing.

9. Contact Us and Supervisory Authority

To exercise any data rights or raise questions regarding our privacy practices, contact us at:

The Genius Robot Company

Email: Hello@thegeniusrobotcompany.co.uk

Telephone: +44 (0) 203 355 8624

Location: London, United Kingdom

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the UK data regulator:

Information Commissioner's Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: https://ico.org.uk | Telephone: 0303 123 1113