Clachan AI

Privacy policy

Last updated 29 September 2026

This notice explains what personal data this website collects, why, and what your rights are. It is written to meet the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

Clachan Software Ltd, trading both as Clachan AI and as Clachan, is the data controller for this website. Our registered office is 21 Young Street, Edinburgh EH2 4HU, and you can reach us about anything in this notice at .

What we collect, and why

  • Early-access requests. If you ask for early access, we collect the email address you give us. The website sends it to our mailbox as an email and keeps no copy. We use it to reply, to tell you when access is available and to ask about your needs. Our lawful basis is our legitimate interest in responding to enquiries about our product. You can ask us to stop at any time.
  • Contact messages. If you write to us through the contact page, we collect your name, email address and message. The website sends them to our mailbox as an email and keeps no copy. We use them to reply to you. Our lawful basis is our legitimate interest in responding to enquiries.
  • Server logs. Like most websites, our server records each request it receives: the page asked for, the time, your IP address and the identifying string your browser sends. We use these logs to keep the site secure and to diagnose faults. Our lawful basis is our legitimate interest in running a secure service.
  • Bot check on the forms. The forms on the home page and the contact page use Cloudflare Turnstile to tell people from the automated programs that flood contact forms with spam. Nothing is fetched from Cloudflare until you press a form's button. At that point your browser loads the check from Cloudflare, which processes your IP address and details of your browser and connection to decide whether you are a person; for that purpose Cloudflare acts as our processor. Cloudflare also uses those details for its own purpose of improving Turnstile, for which it is a controller in its own right, as its Turnstile privacy statement describes. We learn only whether the check passed. Our lawful basis is our legitimate interest in keeping our mailbox usable.
  • Nothing else. This site sets no cookies of its own, runs no analytics and stores nothing in your browser. Everything else the pages need, fonts included, is served from our own servers.

Who we share it with

The site is hosted by OVHcloud on servers in London, United Kingdom. Cloudflare, Inc. runs the bot check when you send a form, as described above. We do not sell personal data, and we do not share it with anyone else unless the law requires us to.

Transfers outside the UK

Your data is stored in the United Kingdom. Where a provider we use processes data outside the UK, we rely on the UK's adequacy regulations or on the UK International Data Transfer Agreement.

How long we keep it

  • An early-access email address is kept until early access ends or you ask us to remove it, and in any case for no more than 24 months after we last hear from you.
  • A contact message is kept for as long as we need it to deal with your enquiry, and in any case for no more than 24 months after we last hear from you.
  • Server logs are kept for a short period, normally a matter of days and never more than 30 days.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, object to our using it, or ask for it in a portable form. Email and we will respond within one month. We do not make automated decisions about you.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first.

Changes

If this notice changes, we will publish the new version here and update the date at the top.