Privacy Policy

1. Introduction

This Privacy Policy explains how AlgoRisk AI Ltd ("we," "us," or "our") collects, uses, and shares your personal data when you visit StartupShield.uk (the "Site") or use our diagnostic tools. We are committed to protecting your personal data and your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect and process the following categories of data:

• Business Profile Data: Information about your business, such as industry (SIC code), team size, business stage, and insurance requirements provided during the diagnostic process.
• Contact Data: If you request a connection to a third-party provider, we may collect your name, business email address, and phone number.
• Technical Data: IP address, browser type, device information, and usage patterns collected via essential site functionality.

3. How We Use Your Data

We use your data for the following lawful purposes:

• Informational Mapping: To identify typical insurance considerations based on your business profile (Contractual Necessity).
• Facilitation: To connect you with third-party regulated insurance providers at your explicit request (Consent/Contractual Necessity).
• Platform Improvement: To analyze how our educational content is used and to improve our diagnostic logic (Legitimate Interests).

4. Data Sharing & Third Parties

We do not sell your personal information. We only share your data with:

• Authorized Providers: Third-party regulated insurance brokers or carriers when you have explicitly requested to be connected for a quote. These firms are independent data controllers and will have their own privacy policies.
• Technical Service Providers: Cloud infrastructure providers (e.g., Google App Engine) used to host the platform.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Diagnostic business data (non-personal) may be retained in aggregate form to improve our informational models.

6. Your Rights

Under the UK GDPR, you have the following rights:

• The right to access your personal data.
• The right to rectification of inaccurate data.
• The right to erasure ("right to be forgotten").
• The right to restrict processing.
• The right to data portability.
• The right to object to processing based on legitimate interests.

7. Contact & Data Requests

To exercise any of your rights or to ask questions about our data practices, please use the contact functionality provided on the primary StartupShield dashboard. We aim to respond to all valid data requests within one month.