Privacy Policy

1. Who we are

Hekma Labs (“Hekma Labs”, “we”, “us”) is an AI product development lab and AI solutions provider. We are the data controller for personal data processed through hekmalabs.com and in connection with our sales and client relationships.

2. Scope

This policy covers our website, our contact form, and communications with prospective and existing clients. Our products, including Wisely and AIM, may have their own privacy notices, which apply when you use them. Where we process personal data on behalf of a client as part of a project, we act as a processor under that client’s instructions and our agreement with them.

3. Data we collect

Information you give us

• Contact details such as your name, email address and company name.
• Enquiry details: your organisation type, area of interest and the message you send.
• Information shared during calls, meetings, proposals and project delivery.

Information collected automatically

• Technical data such as IP address, browser type, device information and pages visited.
• Security and anti-abuse signals, for example submission timing on our contact form.

We do not intentionally collect special category data and ask that you do not send it through our website.

4. How we use data

• To respond to enquiries and provide proposals and quotes.
• To deliver, support and improve our services and products.
• To manage client relationships, contracts and invoicing.
• To keep our website and services secure and prevent spam and abuse.
• To send occasional updates about our work where you have agreed or where the law permits. You can opt out at any time.
• To comply with legal obligations.

5. Legal bases

Where data protection laws such as the GDPR or UK GDPR apply, we rely on:

• Consent, for example when you submit our contact form or opt in to updates.
• Contract, to take steps at your request before entering into a contract, and to perform it.
• Legitimate interests, such as running and securing our business, where these are not overridden by your rights.
• Legal obligation, where we must retain or disclose information by law.

6. AI & your data

We do not use personal data you send through this website, or client confidential data, to train general-purpose AI models. Where our services use third-party AI model providers, we select providers and configurations that do not retain or train on customer inputs wherever such options are available, and we describe the specific processing in our client agreements.

7. Sharing & processors

We do not sell personal data. We share it only with:

• Service providers that help us operate, such as hosting, email delivery, CRM, analytics and AI infrastructure, under contracts that protect your data.
• Professional advisers such as lawyers and accountants, where necessary.
• Authorities, where required by law or to protect our rights and users.
• A successor entity in the event of a merger, acquisition or restructuring, subject to this policy.

8. International transfers

We work with clients and providers worldwide, so your data may be processed outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

9. Retention

We keep enquiry data for up to 24 months after our last interaction unless a business relationship follows, in which case we keep records for the duration of the relationship and as required for legal, tax and accounting purposes. We then delete or anonymise the data.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege practices. No method of transmission or storage is completely secure, but we work continuously to protect your information.

11. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and obtain a copy.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing, including direct marketing.
• Data portability.
• Withdraw consent at any time, without affecting earlier processing.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@hekmalabs.com. We may need to verify your identity before acting on a request.

12. Cookies

Our website uses only the cookies and similar technologies that are strictly necessary for it to function and stay secure. If we introduce analytics or marketing cookies, we will update this policy and, where required, ask for your consent first.

13. Children

This website is not directed at children, and we do not knowingly collect children’s personal data through it. Wisely, our learning platform for juniors, has its own privacy notice and parental safeguards.

14. Changes

We may update this policy from time to time. The “last updated” date above shows when it last changed. For material changes, we will take reasonable steps to let you know.

15. Contact

Questions about this policy or our data practices? Email privacy@hekmalabs.com.