Governance & Privacy

Privacy Policy

Last revised: January 1, 2026. This policy outlines how Chipperycuriousvalt collects, utilizes, safeguards, and isolates enterprise product information and personal user data.

1. Overview and Data Controller

Chipperycuriousvalt Commerce Solutions Ltd ("Chipperycuriousvalt", "we", "us", or "our") operates as a data controller under the UK Data Protection Act 2018 and the General Data Protection Regulation (EU GDPR) regarding personal contact information collected via this website. For enterprise catalog payloads submitted to our studio engines, we act as a data processor on behalf of our enterprise clients.

Our registered office is located at 84 Commercial Street, Tech Quarter, London E1 6LY, United Kingdom. Company Registration Number: #14892014. If you have questions concerning this policy, reach our Data Protection Officer at [email protected].

2. Information We Collect

We process two categories of data across our studio infrastructure:

  • Personal Contact Data: Name, work email address, phone number, company name, and job title submitted voluntarily through our intake forms, contract negotiations, or customer service tickets.
  • Technical Usage Metadata: IP addresses, browser agent headers, processing latency metrics, and interface engagement events gathered automatically via server logs to monitor platform health and mitigate malicious traffic.
  • Client Catalog Data: Product titles, bill-of-materials, CAD specs, and supplier spreadsheets uploaded to generate listing copy. We maintain strict zero-training isolation: your proprietary product specifications are never used to train public foundation models or shared across commercial tenants.

3. Lawful Bases for Processing

In accordance with Article 6 of the GDPR, our processing of your information relies upon:

  • Contractual Necessity: Processing required to establish accounts, deliver AI listing generation services, and fulfill commercial agreements.
  • Legitimate Interests: Monitoring security anomalies, debugging latency, preventing denial-of-service attempts, and managing standard B2B communications.
  • Legal Compliance: Retaining financial transaction records for statutory auditing, taxation, and regulatory reporting requirements.
  • Explicit Consent: Setting non-essential performance cookies or sending opt-in technical briefings.

4. Third-Party Sub-Processors

We employ certified third-party infrastructure providers to operate the studio. All sub-processors operate under strict Data Processing Addendums (DPAs) incorporating standard contractual clauses:

Processor Category Service Purpose Location / Safeguards
Cloud Hosting & Storage Encrypted database storage and server execution United Kingdom & EU Data Centers (ISO 27001 Certified)
Inference Infrastructure Private tenant model compute for copy generation Isolated VPC clusters with zero-data-retention agreements
Transactional Messaging Delivery of verification emails and contact updates EU / UK Standard Contractual Clauses (SCCs)

5. Your Rights Under GDPR & CCPA

Depending on your jurisdiction, you retain statutory rights concerning your personal data:

  • Right of Access: You may request a complete copy of all personal records we maintain regarding your identity.
  • Right to Rectification: You may demand immediate correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of personal contact records where statutory retention obligations do not apply.
  • Right to Restrict Processing: You may restrict processing while a verification dispute is under evaluation.
  • Right to Data Portability: You may receive your personal data in a structured, commonly used, machine-readable format.
  • California Privacy Rights (CCPA/CPRA): California residents have the right to know what personal information is collected, request deletion, and opt-out of any prospective sale of information. Chipperycuriousvalt does not sell personal information or customer catalog data.

6. Data Retention Schedules

Personal contact inquiries submitted through our website are retained for a maximum duration of 24 months following the conclusion of commercial dialogue, after which they are purged. Technical server logs are rotated and deleted after 90 days. Client catalog files processed through our batch API are purged within 30 days of generation completion unless retained in active client-designated storage volumes.

7. Data Protection Officer (DPO) Contact

To exercise any statutory rights, submit formal inquiries, or file a compliance concern, contact our privacy governance team:

Attention: Data Protection Officer
Entity: Chipperycuriousvalt Commerce Solutions Ltd
Email: [email protected]
Address: 84 Commercial Street, Tech Quarter, London E1 6LY, United Kingdom