Privacy Policy

Neural AI Ltd. ("Neural AI", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our website (neuralai.mt), why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act (Chapter 586 of the Laws of Malta).

1. Who We Are

Controller: Neural AI Ltd.
Registered address: Block LS3, Malta Life Sciences Park, San Gwann, SGN 3000, Malta
Email: privacy@neuralai.mt
Website: https://neuralai.mt

If you have any questions about how we handle your data, please contact us at the address above.

2. What Information We Collect

2.1 Contact form

When you submit our contact form at /contact-us, we collect:

• Full name
• Email address
• Company name (optional)
• Phone number (optional)
• The message you send us

This information is used solely to respond to your enquiry.

2.2 Calendly booking

When you book a meeting through our embedded Calendly widget, the booking is processed by Calendly Inc. Calendly may collect your name, email address, and any information you voluntarily provide. Please refer to Calendly's Privacy Policy for details of how they process your data.

2.3 Website usage data

We may collect anonymised, aggregated data about how visitors use our website (pages visited, time on site, referral source) to improve our content and services. This data cannot be used to identify you individually.

2.4 Cookies and local storage

We use a small number of cookies and browser local storage entries to operate our website. Please see our Cookie Policy for full details.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• To respond to your enquiry — when you contact us via our form or by email.
• To fulfil a service engagement — when you become a client and we deliver AI, data, or consulting services.
• To schedule meetings — when you book time via Calendly.
• To improve our website — using anonymised usage analytics.
• To comply with legal obligations — including tax, accounting, and regulatory requirements.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contractual necessity (Art. 6(1)(b) GDPR): Processing required to deliver services you have engaged us for.
• Legitimate interests (Art. 6(1)(f) GDPR): Responding to enquiries, improving our website, and protecting our legal rights — where those interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c) GDPR): Where applicable law requires us to process or retain data.
• Consent (Art. 6(1)(a) GDPR): Where you have explicitly given consent, such as opting in to marketing communications. You may withdraw consent at any time.

5. Data Retention

We retain personal data only for as long as necessary:

• Contact form submissions: Up to 24 months from the date of your enquiry, or longer if it leads to an ongoing commercial relationship.
• Client project data: For the duration of our engagement plus up to 7 years, as required by Maltese accounting and tax law.
• Website analytics: Aggregated and anonymised; not subject to deletion timescales.

6. Data Sharing and Third Parties

We share personal data with trusted third parties only where necessary to operate our business:

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

We may disclose personal data if required to do so by law or in response to valid requests from public authorities.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You may ask us to delete your data where there is no legitimate reason for us to continue processing it.
• Right to restriction: You may ask us to restrict processing of your data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of data you have provided to us.
• Right to object: You may object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email privacy@neuralai.mt. We will respond within 30 days. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) of Malta.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website is served over HTTPS and hosted on Cloudflare's infrastructure.

No method of transmission over the internet is completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at privacy@neuralai.mt.

9. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or our data practices:

Neural AI Ltd.
Block LS3, Malta Life Sciences Park
San Gwann, SGN 3000, Malta
Email: privacy@neuralai.mt
Phone: +356 7909 4887