Savvy Algo Studio

Legal

Privacy Policy

How we collect, use, share, and protect personal data — and the rights you have over it across the UK, EU, USA, and GCC.

Last updated: June 16, 2026

1. Who We Are

Savvy Algo Studio ("Savvy Algo Studio", "we", "us", or "our") builds and operates production AI systems for businesses worldwide. This Privacy Policy explains how we handle personal data collected through our website at savvyalgostudio.com, our contact and inquiry forms, and the course of providing our services.

For the purposes of data protection law, Savvy Algo Studio acts as a data controller for personal data collected through this website and our own business operations. When we process personal data on behalf of a client as part of a paid engagement, we act as a data processor, and that processing is governed by the data processing terms in the relevant agreement rather than this Policy.

2. Scope and Jurisdictions

We provide services to, and process personal data relating to individuals in, multiple regions. This Policy is designed to comply with, and grants you rights under, the following frameworks where they apply to you:

  • United Kingdom — the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
  • European Union / EEA — the EU General Data Protection Regulation (Regulation (EU) 2016/679, "EU GDPR").
  • United States — the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and comparable state laws including those of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA).
  • GCC region — the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the Saudi Personal Data Protection Law (KSA PDPL), the Bahrain PDPL (Law No. 30 of 2018), Qatar Law No. 13 of 2016, and applicable free-zone regimes such as the DIFC and ADGM data protection regulations.

3. Personal Data We Collect

Information you provide

  • Identity and contact details — name, email address, phone number, company name, and job title — when you submit a contact or inquiry form, request a proposal, or email us.
  • The content of your messages, project requirements, and any other information you choose to share with us.

Information collected automatically

  • Usage and device data — IP address, browser type, device type, referring pages, and pages viewed — collected through analytics and our hosting infrastructure.
  • Cookies and similar technologies, as described in Section 6.

We do not intentionally collect special category data (such as health, biometric, or financial account data) through this website. Please do not submit such data through our forms.

4. How We Use Personal Data and Our Legal Bases

We use personal data to respond to inquiries, provide and improve our services, manage client relationships, send service and (where permitted) marketing communications, maintain the security of our systems, and comply with legal obligations.

Where UK or EU GDPR applies, we rely on the following legal bases under Article 6(1):

  • Consent — for non-essential cookies and optional marketing communications. You may withdraw consent at any time.
  • Contract — to respond to a request and to provide services you or your organisation have engaged us for.
  • Legitimate interests — to operate, secure, and improve our website and business, where those interests are not overridden by your rights.
  • Legal obligation — to comply with applicable laws, including tax and accounting requirements.

We do not sell personal data, and we do not "share" it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

5. How We Share Personal Data

We share personal data only with service providers and processors who help us operate our business, under contracts that require them to protect it and use it only on our instructions. These include:

  • Hosting and infrastructure providers (including Cloudflare) that serve and secure this website.
  • Analytics providers (including Google Analytics) that help us understand site usage.
  • Form and productivity tools (including Google services) used to receive and manage inquiries submitted through our forms.
  • Professional advisers, and authorities where disclosure is required by law.

6. Cookies and Analytics

We use strictly necessary cookies to operate the site and, with your consent where required, analytics cookies to measure and improve performance. You can control cookies through your browser settings and, where presented, through our cookie controls. Disabling some cookies may affect how the site functions.

7. International Data Transfers

We operate globally, so personal data may be transferred to and processed in countries other than your own, including the United States. Where we transfer personal data out of the UK, EEA, or a GCC jurisdiction, we put appropriate safeguards in place — such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms recognised under applicable GCC law — and we transfer only to jurisdictions or recipients that provide an adequate level of protection.

8. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this Policy — for example, to respond to your inquiry, fulfil a contract, or meet legal, tax, and accounting requirements — after which we delete or anonymise it.

9. Your Privacy Rights

United Kingdom and European Union / EEA

Subject to conditions in the UK and EU GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ('right to be forgotten').
  • Restrict or object to processing, including processing based on legitimate interests.
  • Data portability.
  • Withdraw consent at any time, without affecting prior lawful processing.
  • Lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EEA, your local Data Protection Authority.

United States

Depending on your state of residence, you may have the right to know what personal data we collect and how we use it, to access and delete it, to correct inaccuracies, to opt out of any sale or sharing of personal data or targeted advertising, and to not be discriminated against for exercising these rights. As noted above, we do not sell or share personal data.

GCC region

Under the UAE PDPL, KSA PDPL, and comparable GCC laws, you may have the right to be informed about processing, to access and obtain a copy of your data, to request correction or deletion, to restrict or object to processing, to withdraw consent, and to request that your data be transferred. Residents may also have the right to complain to the relevant national data protection authority.

To exercise any of these rights, contact us at sales@savvyalgostudio.com. We will respond within the timeframes required by applicable law and may need to verify your identity before acting on a request.

10. Children's Privacy

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Security

We implement technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. For more detail, see our Security page. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of any breach as required by law.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the site after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

For any privacy question or to exercise your rights, contact us at sales@savvyalgostudio.com.

Call Now