Privacy Notice
Last updated: 16 October 2026
This privacy notice explains how Inginuiti Limited (“Inginuiti”, “we”, “us” or “our”) collects, uses and protects your personal data when you visit www.inginuiti.com (the “website”), request a demonstration, enquire about Model Context Protocol (MCP) integration or otherwise get in touch with us. It also explains how we use cookies on the website.
Who we are
Inginuiti Limited is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Inginuiti Limited is a company registered in England and Wales (company number 16924444). Our registered office is 128 City Road, London, EC1V 2NX, United Kingdom.
Our Data Protection Lead is Halide Bey, Co-Founder and CTO. You can contact us about anything in this notice at privacy@inginuiti.com.
The personal data we collect
We provide technology to businesses, so we only collect limited business and technical information:
- Contact and identity details, such as your name, work email address, firm, job title and, where you provide it, your telephone number.
- Enquiry details, such as the information you give us when you request a demo or MCP onboarding, book a meeting through our scheduling tool, email us or take part in a product evaluation.
- Technical and usage information, such as your IP address, browser and device type, the pages you view and the website that referred you. We only collect analytics information through cookies if you agree to it.
- Recruitment information, such as your CV and employment history, if you apply for a role with us.
We do not intentionally collect special category data (for example, information about health, religion or political opinions), and the website is not intended for children.
How we use your personal data
We use your personal data for the following purposes, relying on the lawful bases set out in Article 6 of the UK GDPR:
- To respond to your enquiries, arrange demonstrations and onboarding calls, and send you the information you ask for. We rely on our legitimate interests in responding to business enquiries, or on taking steps at your request before entering into a contract.
- To understand which organisations visit our website and which pages interest them, using Leadfeeder analytics cookies. We only do this with your consent, which you can withdraw at any time.
- To manage our relationships with clients, prospective clients and partners. We rely on our legitimate interests in running and developing our business.
- To send you relevant business updates. We rely on our legitimate interests, or on your consent where the Privacy and Electronic Communications Regulations (PECR) require it. You can opt out of these messages at any time.
- To operate and secure the website and our platform, including authenticating users and preventing unauthorised access. We rely on our legitimate interests in keeping our systems secure.
- To comply with our legal and regulatory obligations, where the law requires us to.
Cookies and similar technologies
Cookies are small text files placed on your device when you visit a website. We also use your browser’s local storage, which works in a similar way.
We use a small number of strictly necessary items that the website needs to work. Your cookie preference is saved in your browser’s local storage for 12 months, so that we do not ask you on every page. When you book a meeting, our scheduling provider, Cal.com, sets a session cookie so that you can choose a time slot.
With your consent, we also use analytics cookies from Leadfeeder, a service provided by Dealfront Group GmbH. Leadfeeder matches the IP address of your visit against business records to identify the organisation you are visiting from, and records the pages you view, the time of your visit and how you arrived at the website. It sets a cookie called _lfa, which lasts for one year and recognises returning visits, and a short-lived test cookie, and it stores a related value called _lfa_expiry in your browser’s local storage. None of this is used unless you select “Accept” in our cookie banner.
You can change your choice at any time by selecting “Cookie Preferences” at the bottom of any page. If you withdraw your consent, we remove the Leadfeeder cookies from your browser. You can also block or delete cookies in your browser settings.
Who we share your personal data with
We do not sell, rent or trade your personal data. We share it only with service providers who act on our instructions and help us run the website and our business:
- the provider that hosts our website;
- Dealfront Group GmbH (Durlacher Allee 73, 76131 Karlsruhe, Germany), which provides Leadfeeder website analytics if you consent to analytics cookies;
- Google Cloud Platform, Railway Corp. and Mastra, for cloud hosting, application deployment and workflow infrastructure;
- WorkOS, Inc., for single sign-on and authentication on our platform;
- Cal.com, Inc., for booking demonstrations and onboarding calls;
- Resend, Inc., for sending emails, including enquiries submitted through our website forms;
- Google Workspace (including Gmail, Google Drive and Google Sheets) and Slack Technologies, LLC, for internal communication, document storage and recording enquiries;
- our professional advisers, such as lawyers, accountants, auditors and insurers in the United Kingdom, where necessary.
All of these providers are bound by written terms that require them to keep your personal data secure and to use it only in line with our instructions and UK data protection law.
International transfers
We are based in the United Kingdom. Leadfeeder data is hosted in the European Union (in Ireland). Some of our other service providers, including Google, Railway, Mastra, WorkOS, Cal.com, Resend and Slack, may process or store data in the United States or elsewhere outside the UK.
Whenever your personal data is transferred outside the UK, we make sure it is protected by relying on UK adequacy regulations (which cover the European Economic Area and US organisations certified under the UK Extension to the EU-US Data Privacy Framework), or on the Information Commissioner’s Office International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses. Contact us at privacy@inginuiti.com if you would like more information about these safeguards.
How long we keep your personal data
We keep personal data only for as long as we need it:
- Demo and MCP enquiries from prospective clients are kept for up to 24 months after our last meaningful contact with you, and are then securely deleted or anonymised.
- The Leadfeeder cookie lasts for up to one year if you accept analytics cookies. We review the company visit information held in Leadfeeder regularly and delete it when we no longer need it.
- Records about clients and partners are kept for the length of our agreement and for six years after it ends, in line with the limitation period for contract claims in England and Wales.
How we protect your personal data
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include encryption in transit and at rest, role-based access controls and multi-factor authentication on our internal systems.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct personal data that is inaccurate or incomplete;
- ask us to delete your personal data where we no longer have a lawful reason to keep it;
- object to our use of your personal data where we rely on legitimate interests, including for business communications;
- ask us to restrict how we use your personal data in certain circumstances;
- ask for your personal data in a portable, machine-readable format;
- withdraw your consent at any time where we rely on it, for example for analytics cookies.
To exercise any of these rights, email privacy@inginuiti.com. We will respond within one month.
How to complain
If you have a concern about how we handle your personal data, please contact us first at privacy@inginuiti.com so that we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. You can contact the ICO at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.
