Privacy Policy

1. Introduction

McCaigs AI (“we”, “us”, “our”), owned and operated by McCaigs Group Ltd, is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and safeguard your information in compliance with:

• UK GDPR
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Relevant Scots Law

By using our website or Services, you agree to the data practices described in this Policy. For questions or data-related concerns, please contact us via: https://mccaigs.ai/contact.

2. Data We Collect

We may collect the following categories of personal data:

3. How We Use Your Personal Data

We use your data for the following purposes:

• To provide and maintain our AI services
• To create and manage user accounts
• To process payments and subscriptions
• To improve model accuracy, reliability, and safety
• To ensure compliance with safety, legal, and regulatory obligations
• To analyse usage for service improvements
• To respond to enquiries submitted through the contact page
• To detect fraud and security threats

We do not use your personal data for automated decision-making that produces legal or significant effects.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract – to deliver the Services you have requested
• Consent – where you opt into cookies or marketing
• Legitimate interests – service improvement, fraud prevention
• Legal obligation – compliance with UK law

5. Sharing Your Data

We may share personal data with:

• Service providers (hosting, analytics, payment processors)
• Legal authorities where required by law
• Internal company entities within McCaigs Group Ltd

We do not sell personal data to third parties. Where data is transferred outside the UK, we ensure adequate protection such as Standard Contractual Clauses (SCCs).

6. Data Retention

We retain personal data only for as long as necessary:

• Account data: while your account remains active
• Billing records: 6+ years (legal requirement)
• AI interaction logs: anonymised or deleted after operational use
• Contact forms: retained only until resolved

You may request deletion at any time (see Section 8).

7. Data Security

We implement technical and organisational measures including:

• Encryption
• Access restrictions
• Secure servers
• Regular audits
• AI safety monitoring

No system is fully secure, but we work to industry standard practices.

8. Your Rights (UK GDPR)

You have the right to:

• Access your data
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with the UK ICO (Information Commissioner’s Office)

To exercise your rights, contact us via: https://mccaigs.ai/contact.

9. Children’s Privacy

Our Services are not intended for children under 13 without parental supervision. We do not knowingly collect data from children without lawful grounds.

10. Changes to This Policy

We may revise this Privacy Policy from time to time. Material changes will be communicated, and the “Last Updated” date will reflect amendments.

11. Contact

All privacy-related communication must be submitted via our contact page: https://mccaigs.ai/contact.