Privacy Policy
This policy explains what personal data No Ifs, Only Bots collects through this website, why we collect it, who we share it with, and the rights you have over it.
At a glance
We collect only what we need to answer your enquiry and run this site. We don’t sell your data. Analytics load only after you consent. You can access, correct or delete your data at any time by emailing us. Where we process your customers’ data during a paid engagement, we act as your processor under a separate data-processing agreement.
Who we are
No Ifs, Only Bots (“we”, “us”, “our”) is an AI implementation agency and a venture of ESS ENN Associates. For personal data collected through this website, we are the data controller.
- Registered office: SCO 197, Sector 7C, Chandigarh 160019, India
- Contact: info@noifsonlybots.com
- Where we operate: United States, United Kingdom, European Union, Australia and India
Personal data we collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity & contact | name, work email, company name | you, via our forms |
| Enquiry content | your message, help-centre URL, project details | you |
| Engagement data | ticket logs and system access you grant us to deliver a project | you / your systems |
| Technical & usage | pages viewed, device and browser, approximate location, referring site | analytics, after consent |
We don’t intentionally collect special-category data through this site. Please don’t include sensitive personal information in the contact form.
Controller or processor?
The role we play depends on the data:
- As a controller — for personal data you give us through this website (enquiries, analytics), we decide how and why it’s processed, and this policy applies.
- As a processor — when we handle your end-users’ or employees’ data as part of a paid engagement (for example, your support ticket logs), we act on your documented instructions under a separate Data Processing Agreement. Your own privacy notice governs that data; ours does not.
How and why we use your data
We use personal data to:
- respond to your enquiry and, where relevant, prepare a proposal;
- deliver, support and improve the services you ask for;
- operate, secure and improve this website;
- send you information you’ve asked for, or (for existing business contacts) relevant updates you can opt out of at any time;
- meet our legal, tax and accounting obligations.
Legal bases (UK & EU GDPR)
We rely on one or more of these lawful bases:
- Consent — for analytics cookies and any optional marketing. You can withdraw it at any time.
- Contract — to respond to your request and deliver services to you.
- Legitimate interests — to run, secure and grow the business, including limited business-to-business outreach, balanced against your rights and interests (a balancing assessment is available on request).
- Legal obligation — where the law requires us to process or retain data.
Cookies & analytics
We use Google Consent Mode with analytics defaulted to denied, so Google Analytics only loads after you click Accept analytics. Full detail is in our Cookie Notice, and you can change your choice any time via the Cookie settings link in the footer.
Who we share data with
We don’t sell personal data. We share it only with the service providers (“sub-processors”) that help us run the site and business, under contract, and where the law requires:
| Provider | Purpose | Notice |
|---|---|---|
| Google (Analytics 4) | website analytics, after consent | policy |
| Formspree | processing & delivering contact-form submissions | policy |
| Hostinger | website hosting | policy |
International data transfers
Because we operate across regions, your data may be processed outside your country, including outside the UK/EEA. Where it is, we use appropriate safeguards — such as the UK IDTA or EU Standard Contractual Clauses, or transfers to countries with an adequacy decision.
How long we keep it
- Enquiry & contact data — up to 24 months after our last contact, then deleted or anonymised.
- Engagement data — for the term set in the relevant contract / DPA, then returned or deleted.
- Analytics — per our GA4 retention setting (up to 14 months), aggregated thereafter.
- Accounting records — for as long as the law requires.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- have it corrected or deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time;
- not be subject to a decision based solely on automated processing that has legal effects.
To exercise any of these, email info@noifsonlybots.com. We respond within the timeframe the law allows (usually one month). You can also complain to a supervisory authority — in the UK the ICO, or your local EU data-protection authority.
How we protect your data
- data minimisation and role-based access controls;
- encryption in transit and at rest;
- audit logging and vendor due diligence;
- VPC or on-premise deployment options for sensitive engagements.
No method of transmission or storage is perfectly secure, but we take measures appropriate to the risk.
Children
This website and our services are intended for businesses and the professionals who run them. They are not directed to children, and we don’t knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date above and, for material changes, take reasonable steps to let affected people know.
Contact
Questions about this privacy policy? Email info@noifsonlybots.com or write to No Ifs, Only Bots, SCO 197, Sector 7C, Chandigarh 160019, India. For data-protection requests, please put “Privacy” in the subject line so we can route it quickly.