Legal
Privacy Policy
Last updated
We collect very little, we use it for the reason we collected it, and we tell you exactly who else touches it. This policy describes what that means in practice.
Who we are
G22 Neural is an AI engineering firm registered in Sri Lanka. For the purposes of data protection law we are the controller of the personal data described in this policy. You can reach us at hello@g22neural.com.
What we collect
We collect only what you give us and what our hosting infrastructure records automatically. We do not buy data, we do not scrape profiles, and we do not run advertising or cross-site tracking.
- Consultation requests: name, work email, company, role, LinkedIn profile, optional company website, company size, industry, the operational problem you describe, preferred call time, and how you found us.
- Email correspondence you send us, retained as part of the business record.
- Analytics: aggregate page views and referrers via Vercel Analytics, which does not use cookies and does not build a profile of individual visitors.
- Server logs: IP address and request metadata, retained briefly for security and abuse prevention, including rate limiting on our contact form.
Why we use it
Consultation details are used to prepare for and hold the consultation, and to follow up on it. Our lawful basis is the steps taken at your request prior to entering a contract, and our legitimate interest in responding to business enquiries.
Analytics and server logs are used to keep the site working and secure, and to understand which pages are read. Our lawful basis is legitimate interest.
We do not use your details for automated decision-making, and we do not sell or rent personal data to anyone.
How long we keep it
Consultation requests are retained for 24 months from your last contact with us, then deleted. Correspondence relating to an engagement is retained for the period required by contract and applicable record-keeping law. Server logs are retained for 30 days.
Client data handled during engagements
Data you share with us during a project is separate from this policy and is governed by the engagement contract and NDA. In that relationship we act as a processor, not a controller: we process your data only on your documented instructions, on infrastructure you approve, with access limited to the engineers assigned to your engagement and every access logged.
We do not use client data to train models for other clients. We return or destroy client data on request at the end of an engagement.
Security
Data is encrypted in transit and at rest. Access is limited to the people who need it, and administrative actions are logged. We work under NDA from first data access, and where a client maintains a security control list, that list becomes a design input at the start of a build rather than a review at the end.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the relevant authority without undue delay.
PDPA statement
We operate in accordance with Sri Lanka's Personal Data Protection Act No. 9 of 2022. Under that Act you have the right to be informed about how your data is used, to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased where there is no continuing lawful basis to hold it, to object to processing based on legitimate interest, and to withdraw consent where consent is the basis of processing.
To exercise any of these rights, write to hello@g22neural.com. We will respond within 21 days. If you are not satisfied with our response, you may complain to the Data Protection Authority of Sri Lanka.
Where we transfer personal data outside Sri Lanka, for example to a hosting region operated by our processors, we do so under contractual safeguards requiring an equivalent standard of protection.
Changes to this policy
We update this policy when our practices change. The date at the top of this page reflects the current version. Material changes affecting people who have already contacted us will be communicated by email.