Privacy Policy

1. Controller Identity

Technova Information Ltd is the data controller. Registered address: Tay House, 300 Bath Street, Glasgow, Scotland, G2 4JR, United Kingdom. Data Protection Officer: info@technovainfo.co.uk. Company No. SC822077.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, company name, and country submitted via our contact, quote, or support ticket forms.
• Technical data: API key hashes, server IDs, and job metadata associated with your compute workloads.
• Usage and billing data: resource consumption logs, billing records, and payment details.
• Audit logs: redacted activity logs for security and compliance. We do not store raw prompts or model responses by default.

3. Legal Basis

Our processing relies on:

• Legitimate Interests (Art. 6(1)(f) UK/EU GDPR) — for processing form submissions, sending quotes, and responding to support tickets, supported by a Legitimate Interests Assessment (LIA).
• Contract (Art. 6(1)(b)) — for processing necessary to deliver services under your service agreement.
• Legal Obligation (Art. 6(1)(c)) — for retaining billing and audit records as required by law.
• Consent (Art. 6(1)(a)) — for analytics and marketing cookies, as described in our Cookie Policy.

4. Data Residency

Customer compute and storage data is processed in the region you select. UK customer data stays in the United Kingdom (Glasgow and London); US-region workloads are processed in Texas, USA. Data does not move between regions without your explicit consent.

5. How We Use Email — Feishu (Lark) SMTP

When you submit a contact inquiry, quote request, or support ticket via our website, the information you provide (name, email, company, message, ticket details) is sent by email to the relevant Technova mailbox (sales@technovainfo.co.uk, info@technovainfo.co.uk, or support@technovainfo.co.uk) using the Feishu (Lark International) SMTP email service, operated by Feishu Corporation (an affiliate of ByteDance Ltd.). Feishu acts as a sub-processor for the sole purpose of transmitting these emails to our mailboxes.

Feishu's email infrastructure may process email metadata (sender, recipient, subject line) in data centres located outside the UK and EEA. The substance of your message is transmitted over an encrypted (TLS/SSL) connection. We have assessed this transfer under the UK Addendum to the EU Standard Contractual Clauses and Feishu's data processing terms.

If you do not wish your data to be transmitted via Feishu's email service, you may contact us directly by emailing the relevant address from your own email client instead of using the website forms.

6. Data Retention

Form submissions (contact inquiries, quote requests, support tickets) and their email records are retained for 24 months after resolution, then deleted. Default zero retention of prompts/responses. Hashed audit logs are retained for 12 months for compliance, then automatically purged.

7. International Transfers

UK and EEA customer compute and storage data is not transferred outside the United Kingdom or EEA. Customers opting into the US Texas region are informed at provisioning time, and their data is processed in the United States under an agreed data processing workflow.

Email transmissions via Feishu (Lark) SMTP may involve limited processing of email metadata outside the UK/EEA, as described in Section 5. This transfer is safeguarded by the UK Addendum to the EU Standard Contractual Clauses.

8. Data Subject Rights

Under Articles 15-20 of the UK GDPR and EU GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You also have the right to withdraw consent at any time for processing based on consent. See our Data Subject Rights page to submit a request.

9. Sub-Processors

We use the following sub-processors to deliver our services. A full list is maintained in our Data Processing Agreement.

• Feishu (Lark International) — email delivery (SMTP) for contact forms, quote requests and support tickets. subprocessor privacy policy: larksuite.com/en-US/privacy

10. 72-Hour Breach Notification

In the event of a personal data breach, we notify the ICO (UK) and the relevant supervisory authority in the EEA, as well as affected data subjects, within 72 hours of becoming aware, per Art. 33-34 UK/EU GDPR.

11. Contact DPO & Complaints

Contact our DPO at info@technovainfo.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk, or to your local EEA data protection authority.