Privacy policy

1. Who we are

Swyz is a trading name of M Corp Ltd, a company registered in England and Wales (company number 14031850), registered office 369 Hagley Road West, Quinton, Birmingham, England, B32 2AL. In this policy, "Swyz", "we", "us" and "our" mean M Corp Ltd.

We are the data controller for personal data we collect through swyz.ai, when you contact or book a call with us, and when we run our business with clients and suppliers. Our lead contact for data protection is Meekael, the founder.

Contact us about privacy at team@swyz.ai or by post at the address above.

When we act for our clients. When we build and run automations for a client, we often process data about their customers, tenants or staff on their instructions. In that case the client is the controller and we are their processor. The client's own privacy notice explains how that data is used, and a data processing agreement between us governs how we handle it. If you have a question about data a business holds about you, contact that business first. We will help them respond.

2. What we collect

You give us:

• Contact and booking details: name, email address, company name and website, and what you tell us about your business when you book a discovery call or message us.
• Client details: billing contact, invoice and payment records, contracts, and the messages we exchange while working together.
• Supplier details: contact and payment details of freelancers and suppliers we work with.

Collected automatically when you visit swyz.ai:

• Technical data: IP address, browser and device type, pages visited and referring site, via our website host's server logs.
• Cookies: see section 4.

From others:

• Public business information, for example from LinkedIn or Companies House, when we research a business before a call.
• People who refer or introduce you to us.

We do not ask for special category data (such as health, religion or ethnicity) and ask you not to send it. We do not collect payment card details.

3. Why we use it and our lawful basis

UK and EU GDPR require a lawful basis for each use of your data.

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment. Where we rely on consent, you can withdraw it at any time.

4. Cookies

Cookies are small files stored on your device. Under the Privacy and Electronic Communications Regulations (PECR), we only set cookies that aren't strictly necessary if you agree.

We currently use only strictly necessary cookies, which make the site work and don't need your consent. We do not use analytics, advertising or cross-site tracking cookies. If we add analytics, we'll ask for your consent first and update this policy.

You can block or delete cookies in your browser settings, though parts of the site may then not work.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the business, under contracts that require them to protect it and use it only on our instructions.

We may also share data with professional advisers, insurers, the police, regulators or courts where the law requires it, or to protect our rights. If M Corp Ltd is ever sold or merged, data may pass to the new owner under this policy.

6. International transfers

Our providers in section 5 (Netlify, Formspree, Google and Anthropic) may process data in the US and other countries outside the UK and EU.

When data leaves the UK or EU, we make sure one of these safeguards is in place:

• the destination has an adequacy decision or regulations, including the UK Extension to the EU-US Data Privacy Framework where the US provider is certified
• the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses

You can ask us for a copy of the safeguards that apply to your data.

7. How long we keep it

When the period ends, we securely delete the data or anonymise it so it no longer identifies you.

8. Your rights (UK and EU)

Under UK GDPR, and EU GDPR where it applies, you have the right to:

• Access: get a copy of the personal data we hold about you
• Rectification: have inaccurate data corrected
• Erasure: have your data deleted in some circumstances
• Restriction: ask us to limit how we use your data
• Portability: receive data you gave us in a machine-readable format
• Objection: object to processing based on legitimate interests, and to direct marketing at any time
• Withdraw consent: wherever we rely on consent

To use any of these rights, email team@swyz.ai. It's free. We may need to confirm your identity. We'll respond within one month, or tell you within that month if we need up to two more months for a complex request.

Complaints

If you're unhappy with how we've handled your data, tell us first at team@swyz.ai with "Complaint" in the subject line. We'll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

You can also complain to the UK regulator at any time: the Information Commissioner's Office, ico.org.uk/make-a-complaint, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you're in the EU, you can contact your local data protection authority.

9. US privacy rights

This section applies to US residents to the extent that the California Consumer Privacy Act as amended by the CPRA (CCPA), or a similar US state privacy law, applies to us.

What we collect (CCPA categories), in the last 12 months:

Sources, purposes and retention are in sections 2, 3 and 7. We use this information only for the business purposes in section 3.

We do not sell or share personal information, as the CCPA defines those terms, including for cross-context behavioural advertising. We have not done so in the last 12 months. We do not knowingly sell or share data of anyone under 16. We do not use sensitive personal information to infer characteristics about you. We honour Global Privacy Control (GPC) browser signals as an opt-out request.

Your rights. California residents can ask us to:

• tell them what personal information we have collected, used and disclosed, and give them a copy
• delete or correct their personal information
• opt out of sale or sharing (which we don't do)
• limit use of sensitive personal information (which we don't use for that purpose)

We will not discriminate against you for using these rights. Residents of other states with privacy laws, such as Virginia, Colorado, Connecticut and Texas, have similar rights: to access, correct, delete and port their data, and to opt out of targeted advertising, sale and profiling.

How to make a request. Email team@swyz.ai. We'll confirm receipt within 10 business days and respond within 45 days, or tell you if we need another 45. We'll verify your identity by matching details you give us with what we hold. You can use an authorised agent with your signed permission. If we refuse your request and your state gives you the right to appeal, reply to our decision with "Appeal" in the subject line and we'll respond within the time your state's law sets.

10. Security

We protect your data with measures suited to the risk, including encryption in transit (HTTPS), access limited to people who need it, and multi-factor authentication on the accounts we use. No system is perfectly secure. If a breach is likely to put you at risk, we'll tell you and the ICO as the law requires.

11. Automated decisions and AI

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Some client automations use AI to read or summarise messages; a person at the client's business stays responsible for any decision that matters.

12. Children

Our website and services are for businesses and are not aimed at children. We do not knowingly collect personal data from anyone under 16. If you think we have, contact us and we'll delete it.

13. Links to other sites

Our site may link to other websites. Their own privacy policies apply when you visit them.

14. Changes to this policy

We'll update this policy when our practices or the law change, and change the date at the top. If a change is significant, we'll tell clients by email.

15. Contact