Data-Controller: castleai.uk
Contact: mailto:email@castleai.co.uk

Summary:
castleai.uk processes personal data only where necessary to deliver services, respond to communications, and maintain security.

1. Website
No analytics, advertising, or tracking cookies are used. Web servers may log basic connection details such as IP address and browser type for security and reliability. Logs are retained briefly and then deleted automatically.

2. Communication
If you contact us by email or phone, we will use the information you provide only to respond and maintain correspondence records in line with our retention policy. All communication systems are protected by encryption and hosted within the UK or EEA.

3. CCTV
CCTV is used at our premises for safety and crime prevention. Footage is retained for up to 30 days unless required for investigation. Access is restricted to authorised personnel only.

4. Your Rights
You may request access, correction, or deletion of your personal data by emailing email@castleai.co.uk. All requests are handled in line with the UK GDPR and Data Protection Act 2018.

5. Supervisory Authority
If you are not satisfied with our handling of personal data, you can raise a concern with the Information Commissioner's Office at ico.org.uk.