Privacy Policy

GEN3BLOCK Limited (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller:

GEN3BLOCK Limited

Company Number:

16443115

ICO Registration Number:

ZB960703

UKPRN:

10099894

Contact:

privacy@gen3block.com

Address:

Office 426 Kingsfield Close, Kings Heath Industrial Estate, Northampton, NN5 7QS, United Kingdom

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email, phone number)
• Company information and job title
• Educational background and qualifications
• CV/Resume information for job applications
• Payment and billing information
• Communication preferences

3.2 Technical Information

• IP address and location data
• Browser type and version
• Device information
• Website usage data and analytics
• Cookies and similar technologies

3.3 Special Categories of Data

We do not intentionally collect special categories of personal data (sensitive data) unless specifically required for our services and with your explicit consent.

4.1 Lawful Bases for Processing

We process your personal data based on the following lawful bases:

• Consent — for marketing communications and non-essential cookies
• Contract — to provide our services and fulfil our obligations
• Legitimate Interest — for AI readiness assessment data, business development, and improvement of services
• Legal Obligation — to comply with legal requirements

4.2 Purposes of Processing

• Providing AI consultancy and development services
• Processing job applications and recruitment
• Delivering training and educational programs
• Customer support and communication
• Marketing and business development (with consent)
• Website analytics and improvement
• Legal compliance and fraud prevention

We do not sell your personal data. We work with the following categories of data processors:

• Cloud Hosting (AWS) — infrastructure, data storage, and platform hosting; servers located in the EU/UK region
• Analytics (Google Analytics 4) — website usage analytics; data is pseudonymised and subject to Google's Data Processing Terms
• Email Communications — transactional and marketing emails where consent has been given
• Legal Authorities — when required by law or to protect our rights
• Professional Advisors — lawyers and accountants bound by confidentiality obligations

We do not use Meta, LinkedIn, or other advertising tracking pixels at this time. If this changes, this policy will be updated accordingly.

5.1 International Transfers

If we transfer your data outside the UK, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard Contractual Clauses
• Certification schemes and codes of conduct

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Customer Data — for the duration of our relationship plus 7 years for legal compliance
• Job Applications — 12 months from the application date
• Marketing Data — until you withdraw consent or 3 years of inactivity
• Website Analytics — 26 months from collection

Under UK GDPR, you have the following rights:

• Right of Access — request copies of your personal data
• Right to Rectification — correct inaccurate or incomplete data
• Right to Erasure — request deletion of your data
• Right to Restrict Processing — limit how we use your data
• Right to Data Portability — receive your data in a portable format
• Right to Object — object to processing based on legitimate interests
• Right to Withdraw Consent — withdraw consent at any time

To exercise these rights, contact us at privacy@gen3block.com. We will respond within 30 days.

We use cookies and similar technologies to:

• Ensure website functionality
• Analyse website performance
• Personalise your experience
• Provide targeted advertising (with consent)

You can manage cookie preferences through your browser settings. Some cookies are essential for website functionality. See our Cookie Policy for full details.

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and role-based permissions
• Incident response procedures
• Regular backups and disaster recovery plans

In the event of a personal data breach:

• Affected individuals will be notified without undue delay where required by law
• The ICO will be notified within 72 hours where the breach is likely to result in a risk to rights and freedoms

When you use our AI Readiness Assessment platform, we collect and process your assessment responses in the following ways:

• Assessment responses are collected to generate your personalised readiness report
• Data is securely stored and processed on our platform
• Results are used solely to generate insights for your organisation
• Data may be aggregated and anonymised for benchmarking purposes
• No individual organisation is identifiable within aggregated data
• Assessment data is never sold to third parties

The lawful basis for processing assessment data is Legitimate Interest — to deliver the readiness analysis you have requested.

Our platform uses automated processing to generate readiness scores and insights from your assessment responses. In relation to this:

• This automated processing does not produce legal or similarly significant decisions
• All outputs are advisory in nature and require human interpretation
• You retain the right to request human review of any assessment output
• AI-generated insights are informational only and do not constitute legal, financial, or professional advice
• Users remain responsible for all decisions and actions taken based on platform outputs

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our website
• Email notification for material changes
• In-app notifications where applicable

If you have concerns about how we handle your personal data, you can:

• Contact us directly at privacy@gen3block.com
• Lodge a complaint with the Information Commissioner's Office (ICO)

ICO Contact: ico.org.uk  |  0303 123 1113