Simuka — Privacy Policy

Last updated: 24 August 2026

This policy explains how Simuka AI Ltd handles personal data collected through our website. It is drafted under UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. If you are located in the EU/EEA, this policy is also drafted in accordance with the EU GDPR.

1. Who we are

This website (simuka.ai / simuka.co.uk) is operated by Simuka AI Ltd (“Simuka”, “we”, “us”, “our”), a company incorporated in England and Wales (company number 17408886, incorporated 19 August 2026). Registered office: 17 Alexandra Road, Ashford, England, TW15 1TW.

Simuka is an AI consulting business. For the purposes of UK data protection law, Simuka is the “data controller” of personal data collected through this website.

Simuka AI Ltd is established in the UK. Because we offer services to individuals and businesses in the EU, including Spain, we are required under Article 27 of the EU GDPR to designate a representative established in the EU. Our EU representative is Ana de Oliveira, based in Barcelona, Spain, contactable at privacy@simuka.ai for EU data protection matters.

Contact: privacy@simuka.ai

2. Scope of this policy

This policy covers personal data we collect from visitors to our website — primarily through our contact form. It does not cover personal data we process on behalf of clients while delivering consulting engagements; that is governed separately by the terms agreed with each client.

3. What we collect

When you use the contact form on our website, we collect:

  • Your name

  • Your email address

  • Any other information you choose to include in your message (for example, company name or phone number)

We do not currently use analytics, tracking, or marketing cookies on this website beyond those strictly necessary for it to function, set by our website platform, Squarespace. If this changes — for example, if we add analytics — we will update this policy and add a cookie notice before any non-essential cookies are used.

4. Why we use it, and our legal basis

We use the information you submit to respond to your enquiry and to correspond with you about a potential or ongoing engagement.

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR) — responding to enquiries directed to us is necessary for our legitimate interest in running our business, and does not override your rights. Where you ask us to take steps ahead of a contract (for example, a proposal or pilot terms), we may also rely on Article 6(1)(b), steps taken prior to entering into a contract.

5. Who we share it with

Squarespace, Inc., our website hosting and forms provider, processes contact form submissions on our behalf as a data processor. Squarespace is based in the United States, so your data may be transferred and stored outside the UK. Squarespace provides contractual safeguards for this transfer — see Squarespace's privacy policy for detail.

We do not sell your data, and we do not share it with any other third party except where required by law.

6. How long we keep it

We keep enquiry data for as long as reasonably needed to respond to you and, where an engagement follows, for the duration of that relationship plus a reasonable period afterwards (typically up to 6 years) to meet legal, accounting, or tax obligations. Where no engagement follows, we delete or anonymise enquiry data after 12 months.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Have inaccurate data corrected

  • Have your data erased in certain circumstances

  • Restrict or object to our processing

  • Receive your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at privacy@simuka.ai. We will respond within one month, as required by law.

8. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at privacy@simuka.ai. We will acknowledge your complaint within 30 days and aim to resolve it directly.

If you remain unsatisfied, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

ico.org.uk | 0303 123 1113

If you are located in the EU/EEA, you may also lodge a complaint with the supervisory authority in your own EU member state. As our EU representative is based in Spain, you may also contact the Agencia Española de Protección de Datos (AEPD), Edificio Cuzco IV, Paseo de la Castellana, 141, 28046 Madrid, Spain — aepd.es | +34 900 293 183.

9. Children

Our website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised.

11. Contact us

Questions about this policy or your data: privacy@simuka.ai