Privacy Policy

1. Who we are

This Privacy Policy explains how Field Foundry Ltd collects, uses, and protects your personal data when you use our services or contact us, in line with UK data protection laws.

Field Foundry Ltd is responsible for handling your personal data (the “Data Controller”).

2. Legal basis

We may process the following kinds of personal data in order to provide you services:

Profile/Identity Data: Data relating to your first name and last name when you create an account with us.

Contact Data: Data relating to your phone number, addresses and email addresses.

Marketing and Communications Data: Your preferences in receiving marketing information and other information from us.

We collect and process your Personal Data on the basis of your consent and to perform our contractual obligations to provide services to you.

We may use AI-assisted tools for specific operations, including:

Document Analysis: To improve the accuracy and efficiency of our internal workflows.

Correspondence Drafting: To assist in generating timely responses to inquiries.

Report Preparation: To synthesise data into business reports.

All AI-generated output is reviewed and approved by a human employee before being finalised.

3. Marketing

You will receive marketing and new content communications from us if you have created an account and chosen to opt into receiving those communications. If you change your mind, you can always choose to opt out of marketing messages at any time by sending an email to admin@fieldfoundry.com.

4. Your rights

You have the following rights under data protection laws in relation to your personal data:

Right to be informed: You are entitled to understand why we collect and use your personal data, how long we keep it, and who we may share it with.

Right of access: You may request a copy of the personal data we hold about you to confirm that it is being processed lawfully.

Right to rectification: If any personal data we hold about you is incorrect or incomplete, you have the right to ask us to rectify it.

Right to erasure: You can request that we delete your personal data in situations where there is no valid reason for us to continue using it, including if you have exercised your right to object, if the data has been processed unlawfully, or if we are legally obliged to remove it.

Right to object: You have the right to oppose the processing of your personal data. If you make such a request, we will stop processing your data unless we have compelling legitimate grounds to continue.

Right to restrict processing: You can ask us to limit the way we use your personal data or temporarily stop processing it.

Right to data portability: You have the option to request that your personal data be transferred directly to you or to another organization of your choice. If you exercise this right, we will provide the data in a structured, widely used, and machine-readable format.

If you wish to make a request under any of these rights, please contact us at admin@fieldfoundry.com.

5. Security measures

We implement a variety of security measures to ensure the security of your Personal Data on our systems.

To provide our services, your data may be transferred to and processed in countries outside the UK and the European Economic Area (EEA), including the United States and other global locations where our service providers maintain operations.

Standard Contractual Clauses (SCCs): International transfers to a named processor are protected by SCCs incorporated in their Data Processing Addendum.

Adequacy Framework: We reference and rely upon the EU-US Data Privacy Framework and the UK-US Data Bridge where applicable to ensure lawful data transfer to the United States.

6. Third-party data sharing

We may share your personal data with trusted third-party service providers who support us in delivering our services. These may include email service providers and cloud and IT infrastructure service providers. We share this data based on our legitimate interests and, where necessary, for the performance of our contract with you.

The selection and use of these third parties are conducted strictly in line with our internal data protection policies. We ensure that all processors provide sufficient guarantees to implement appropriate technical and organisational measures.

We may use AI-assisted tools to help with our communications and workflow (if you have not opted out of this usage, as per the Terms and Conditions). All work and correspondence is reviewed and approved by an employee.

Named Processor: Anthropic

We may use Anthropic Ireland, Limited as a data processor for the AI-assisted operations mentioned above. While the entity is based in Ireland, your data may be processed on servers located in the United States. We confirm that personal data submitted to these AI tools is not used by the provider to train their global AI models.

All such third parties are contractually required to keep your data secure and only process it on our instructions, in accordance with applicable data protection laws. We ensure that appropriate safeguards are in place to protect your data when shared.

Data sharing with these providers is carried out on the basis of our legitimate interests and contractual necessity as described above.

7. Data retention

We will keep your personal data only for as long as it is reasonably needed to achieve the purposes for which it was collected. In certain situations, such as if a complaint is made or if we believe there may be a legal dispute, we may retain your data for a longer period than usual.

8. Contact us

You can reach out to us with questions about your data at admin@fieldfoundry.com or by post to QMB Innovation Centre, Suite 7, Lab 2, First Floor, 42 New Road, London E1 2AX.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.