Privacy and Terms

1. Scope of this notice

Satrix.ai is a trading name of Engivision Limited, which operates this website and is the controller of the personal data described here. As a UK company we process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and our supervisory authority is the Information Commissioner's Office. A group notice published at engivision.org applies as a baseline across the websites Engivision Limited operates. This page is the specific notice for this website and for the products published under the Satrix.ai brand, including those published on their own domains: where it adds to, or differs from, the group notice, this page governs, and where this page is silent, the group notice applies. A product with a notice of its own governs its own site on the same terms, and falls back to this page and then to the group notice for anything it does not address.

We publish in more than one language and offer our services internationally. Where the data protection law of another country applies to that activity, including the EU General Data Protection Regulation under its Article 3(2), we process the personal data of those readers in accordance with it as well, and they may complain to their own national supervisory authority as described in section 10.

This notice covers the website only. Where we act as a processor of client material under a separate engagement, that engagement's contract and data processing terms govern instead.

2. Personal data we collect, and why

We collect a limited amount of personal data. The main circumstances are described below, and where we add a form, feature or tool to the site, the personal data it involves falls within the same categories and is used for the same purposes. We do not buy personal data, we do not sell it, and we do not use it for advertising or profiling.

2.1 The contact form

The contact form asks for your name, email address, company name and your message. We use it to answer your enquiry and, if it leads anywhere, to discuss and perform an engagement. The lawful basis is Article 6(1)(b) UK GDPR, taking steps at your request before entering a contract, and, for general correspondence that will never become a contract, Article 6(1)(f), our legitimate interest in responding to business enquiries addressed to us.

2.2 The newsletter

If you subscribe to our newsletter we collect your email address and use it to send you that newsletter. The lawful basis is your consent, Article 6(1)(a) UK GDPR, together with regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. You can withdraw consent at any time, through the unsubscribe link in any issue or by writing to us. Withdrawing consent does not affect the lawfulness of anything sent before you withdrew it. We keep a minimal suppression record of unsubscribed addresses so that we do not contact you again by mistake; the lawful basis for that record is Article 6(1)(c), our legal obligation not to send further marketing.

2.3 Interactive tools

The interactive tools we publish on this site do not ask for your name or email address. They process the answers and free-text you type into them in order to generate a response. Section 3 explains this in more detail, because it involves sending that text to a third party.

2.4 Technical data

Our hosting provider records standard server and request information, including IP address, user agent, requested URL, timestamp and referrer, and our analytics provider records aggregated, cookieless page view data. When you use an interactive tool we hold your IP address transiently in memory in order to apply a rate limit and prevent abuse; it is not written to a database and is discarded shortly afterwards. The lawful basis for all technical data is Article 6(1)(f), our legitimate interest in operating a secure, working website and understanding its use in aggregate.

3. Interactive and AI-assisted tools

Some of the tools we publish on this site generate their output using a large language model service operated by Google. When you use such a tool, the answers you select or the text you type are transmitted to that service for the sole purpose of generating a response, and the generated text is returned to your browser.

We do not store your inputs or the generated output. They are not written to any database of ours and are not associated with your name or email address, because these tools do not ask for either. The provider processes the transmitted text under its own service terms.

Because the text leaves our systems, please do not enter confidential information, client information, privileged material, personal data about other people, or anything else you would not send to a third-party service. These tools are an illustrative aid, not a confidential channel.

They do not make any decision about you. They produce general commentary for you to read and evaluate. There is no automated decision-making producing legal or similarly significant effects within the meaning of Article 22 UK GDPR anywhere on this website.

4. Who we share personal data with

We do not sell personal data and we do not disclose it to third parties for their own marketing. We do use service providers, who process personal data on our behalf or receive technical data as a consequence of how the site is delivered. They fall into the categories below, with our current providers named as examples rather than as an exhaustive list:

• Hosting, content delivery and form handling,currently Netlify, Inc. in the United States, which serves this site and receives and stores the submissions made through the forms on it.
• Language model, productivity and webfont services,currently provided by Google. These respectively generate the output of our interactive tools as described in section 3, host the email in which any correspondence you send us is stored, and serve the typefaces used on this site, which means the provider receives the IP address of your device when a page loads.
• Website analytics, currently a cookieless service provided by Cloudflare, Inc. in the United States, reporting aggregated page views and performance data.

We may change or add providers within these categories. We may also disclose personal data to our professional advisers where necessary, to a successor entity if the business is transferred, and to a court, regulator or law enforcement body where we are legally required to do so or where disclosure is necessary to establish, exercise or defend legal claims.

5. International transfers

Providers of the kind described in section 4 are typically established in, or process personal data in, the United States. Personal data is therefore transferred outside the United Kingdom and outside the European Economic Area.

Those transfers are made under Chapter V of the UK GDPR, and where the EU GDPR applies under its Chapter V, relying on one or more of the following: an adequacy decision or adequacy regulations covering the recipient country or framework, including the EU-US Data Privacy Framework and its UK Extension where the recipient is certified under it; or the International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses, incorporated into our agreement with the provider. You can ask us which mechanism applies to a particular provider.

6. How long we keep personal data

• Form submissions and related correspondence:twenty-four months from our last substantive exchange with you, after which they are deleted, unless they relate to a live or prospective engagement or to a legal claim, in which case they are kept for as long as that engagement or claim requires and for the limitation period that follows it.
• Newsletter subscription: until you unsubscribe, and thereafter only the minimal suppression record described in section 2.2.
• Inputs to and output from our interactive tools: not retained by us at all, and any transient rate-limiting record is discarded shortly after the request.
• Server and analytics data: for the period our providers retain it, which for server logs is short-term and for analytics is aggregated and not linked to an identifiable individual.
• Records we must keep by law, such as accounting records relating to a paid engagement: for the period required by UK company and tax law.

7. Your rights

Subject to the conditions and exemptions in the applicable data protection law, you have the right to: be informed about how we use your personal data, which is the purpose of this notice; obtain access to a copy of the personal data we hold about you; have inaccurate personal data rectified; have personal data erased; restrict our processing of it; receive the personal data you provided to us in a portable format and have it transmitted to another controller; object to processing carried out on the basis of legitimate interests, and object at any time and without qualification to processing for direct marketing; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, write to privacy@satrix.ai. We will respond within one month, and will tell you if we need to extend that period or if we need information from you to confirm your identity. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

8. Cookies and local storage

This website sets no cookies of its own, and no advertising, tracking or cross-site profiling cookies of any kind. Our analytics provider is chosen precisely because it operates without cookies and without fingerprinting. If we ever introduce a cookie or similar technology that is not strictly necessary, we will ask for your consent before it is set.

Some pages store a small value in your browser's local storage, recording a preference you have expressed, such as the language you chose, so that a later visit behaves the way you asked. Such values contain no identifier and are not read by anyone but your own browser. We treat them as strictly necessary for a service you have explicitly requested, within regulation 6(4) of the Privacy and Electronic Communications (EC Directive) Regulations 2003, which is why this site does not present a consent banner. You can clear them at any time through your browser settings.

9. Security

The site is served over an encrypted connection and with security headers appropriate to it. Server-side endpoints restrict requests to this site's own origin, apply rate limits, and validate input before acting on it. Output generated by a language model is sanitised before it is displayed. Access to our accounts and mailboxes is protected by multi-factor authentication.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting you, we will notify the Information Commissioner's Office and, where the law requires it, you, within the applicable time limits.

10. Complaints

If you are unhappy with how we have handled your personal data, please raise it with us first at privacy@satrix.ai so that we have the chance to put it right.

You also have the right to complain to a supervisory authority. Ours is the Information Commissioner's Office in the United Kingdom, ico.org.uk. If you are elsewhere, you may complain instead to the data protection or privacy authority for your own country of residence or place of work.

11. Changes to this notice

We may update this page as the website changes or as our providers change. The date at the top records when it was last revised. Material changes affecting how we use personal data already collected will be notified to affected individuals where the law requires it.

12. Terms of use

These terms are an agreement between you and Engivision Limited, a private limited company registered in England and Wales and trading as Satrix.ai, and they apply whenever you access this website. If you do not agree to them, please do not use the site.

The site is provided for general information about Engivision Limited and its Satrix.ai brand, and our services are directed at businesses and professionals rather than at consumers. We may change, suspend or withdraw any part of the site at any time and without notice. We do not guarantee that it will be available uninterrupted or that it will be free of errors.

You agree not to misuse the site, including by attempting to gain unauthorised access to it, by introducing malicious code, by scraping or automated bulk access that places an unreasonable load on it, or by using any tool published on it other than as an ordinary interactive user.

13. Intellectual property

All content on this site, including text, articles, published documents, frameworks, logos, layout and design, is owned by Engivision Limited or used under licence, and is protected by copyright and other intellectual property rights. You may read, download and print the material for your own reference, and you may quote from it with attribution and a link. You may not otherwise reproduce, republish or redistribute it, in whole or in substantial part, without our written consent. Third-party names and marks referred to in our analysis remain the property of their owners and are used for identification and commentary only.

14. No legal advice

Engivision Limited trading as Satrix.ai is not a law firm. It is not authorised or regulated by the Solicitors Regulation Authority in the United Kingdom, nor by the equivalent bar association, law society or legal regulator of any other country, and it does not provide legal advice, representation or other reserved legal services in any jurisdiction. Nothing on this website is legal advice, and nothing on it creates a solicitor-client, lawyer-client or any other professional relationship between you and us.

Our work is technical: designing, building and auditing systems that legal professionals use. Decisions about a legal matter remain the responsibility of the qualified professional who is instructed on it. You should take advice from a lawyer admitted in your own jurisdiction before acting on anything you read here.

15. Case studies and published material

Where we publish case studies, audits, analysis or measurements of past work, they describe the methods used, the checks performed and the figures recorded at the time. They are published so that the claims we make about our work can be examined.

They are illustrative and historical. They are not a promise, warranty or guarantee of any particular result, and results in any other matter will differ with the facts, the jurisdiction, the systems used and the people involved. Figures given are measurements of the run described, not a benchmark, an industry average or a projection for anyone else.

Those documents describe our own process and our own work product. They are not a statement about, or a characterisation of, any other party, and nothing in them should be read as an allegation against any identified or identifiable person. Where a matter is referenced, it is referenced for the purpose of describing the technical process applied to it. If you believe anything we have published is factually inaccurate or affects you, write to us and we will review it promptly.

16. AI-generated output

Output produced by the interactive tools on this site is generated by a large language model. It can be incomplete, out of date or wrong, it may present inaccurate statements confidently, and it is not reviewed by us before you see it. It is general commentary offered for your own evaluation. It is not advice of any kind, legal, financial, regulatory or otherwise, and it must not be relied on without independent verification by a qualified person.

17. Limitation of liability

The site and its content are provided on an "as is" and "as available" basis. To the fullest extent permitted by law, we exclude all warranties, conditions and representations that are not expressly set out in these terms, including as to accuracy, completeness, fitness for a particular purpose and uninterrupted availability.

To the fullest extent permitted by law, we are not liable for any loss of profit, loss of business, loss of anticipated savings, loss of data, or any indirect or consequential loss arising out of your use of, or inability to use, this site or your reliance on anything published on it.

Nothing in these terms excludes or limits our liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited.

18. Third-party links

This site links to third-party websites, in particular from our published feeds and from the sources listed in our articles. Those links are provided for reference. We do not control those sites, we are not responsible for their content or their privacy practices, and a link is not an endorsement.

19. Governing law and jurisdiction

These terms, and any dispute or claim arising out of or in connection with them or with your use of this site, whether contractual or non-contractual, are governed by and construed in accordance with the law of England and Wales, and are subject to the exclusive jurisdiction of the courts of England and Wales. Nothing in these terms affects rights that cannot be excluded or limited under the law that applies to you.

20. How to contact us

For data protection matters, including any request to exercise your rights, write to privacy@satrix.ai. For anything else, use the contact form on this site.