Policy Overview

Company Name: Gravitai Ltd  

Company Registration No: 08609434  

Registered Office: 1st Floor, 314 Regents Park Road, London, N3 2LT, United Kingdom. 

Document: Privacy Policy 

Last Updated: December 10th, 2024

Gravitai Ltd ("we", "us", or "our”) respects the privacy of our users ("user" or "you"). This set Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites such as follows like https://www.gravitai.com, https://www.purplejuice.com or any other websites belonging to the Gravitai group, including any other single media form, media channel, mobile website, or mobile application related or connected there to set (collectively, the "Site"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about changes by updating the "Last Updated" date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated policy on the site, and you waive the right to receive specific notice of each such change or modification.

You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have then accepted the changes in any revised Privacy Policy by your continued use of the Site after the date such revised the Privacy Policy is posted.

In effect, this policy explains what information is collected, why it is collected and how we use it.

Information 'We' Collect

We may collect information about you in a variety of ways. The majority of the data we collect is directly provided by users when they register and use our services. Other data is collected by recording interactions with our services. The information we may collect on the Site includes the following as per described:

Account & Contact Data: When you register on our website or decide to use one of our services or to subscribe to one of our services, or fill in one of our contact forms, you voluntarily give us certain information. This typical contains fields such as name, company name, email address, and sometimes phone number, postal address (when an invoice or delivery is required), your business sector or interest in Gravitai/The Purple Juice Co. In the event that a payment is also further processed, we never record or store credit card information from our customers, and rely on trusted third-party PCI-DSS-Compliant Payment Processors for processing, which also can refer to recurring payment processing for credit cards.

Personal Data: Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, career/working history, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site, such as online chat and message boards.

Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

Browser Data: When you visit our website, and access our online services, we detect and store your browser language and geolocation in order to customise your experience according to your country in certain circumstances or preferred language. The servers which are used also passively record a summary of the information sent by your browser for statistical, security and legal purposes: your IP address, time, date and your visit of the page or resource you have then accessed, your browser version and platform, and the web page that referred you to our website in the instance. Your browser may also be used to store and retrieve your current session data, with the help of a session cookie.

In addition to this, some forms on our website may be protected by Google reCAPTCHA. This technology relies on heuristics that are based on technical characteristic of your browser and device, and may also use specific Google cookies. You can further look at Google's Privacy Policy and Terms of Use which will be shared below.

Financial Data: Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site.

Transactional & Payment Data: Information related to purchases made on our Site, including billing address, shipping address, payment method details (credit card numbers, expiration dates, etc.), purchase history, and any other information related to transactions.

Consultation Data: For clients who use our consultative services, we may further collect detailed information about your business needs, objectives, projects, and any other data shared during consultation sessions. This may include business plans, project specifics, and potentially sensitive company information.

Job Application Data: When you apply for a posted role or job via our websites or via a employee agency, we usually collect your contact information such as (name, email. phone) and any other information which you choose to share with us, in your introduction letter or Curriculum Vitae. If we decide to send you a job proposition, we will also ask you to provide extra detail in the even as required to fulfil our legal obligations and personal management requirements. Information which is not relevant to the job application process will never be asked and in particular we will never ask for information related to racial, ethnic origin, political opinions, religious beliefs, trade union membership or sexual preferences.

Customer Service Interactions: Records of communication between you and our set customer service team, including emails, chat logs, and phone calls, to address your enquiries, provide key assistance, and improve our service offerings.

How Information Is Used

Having accurate information about you permits us to provide you with a smooth, efficient, and customised experience. Specifically, we may use information collected about you via the Site to:

Account & Contact Data: We us your submitted contact information so that we can then further provide our services, answer your requests and for billing and account management reasons. We also may use this information for set purposes such as Marketing and Communications. In these circumstances however, our marketing messages always come with a way for you to opt-out at any time. We also use this data in aggregated/anonymised forms in order to analyse all the service trends. If you have registered your information to participate in an event which we have published on our website, we may further transfer your name, email, address, phone number and company name to our local organisers and to the sponsors of the event for both direct Marketing purposes and in order to facilitate preparations in organising the event. If you have further expressed interest in using Odoo or otherwise asked to be contacted by an Odoo Service provider, we may also transfer your name, email address, phone number and company name to one of our recommended suppliers in your region or as per your requirement request which has been registered with us, for the purpose of contacting you to offer their assistance.

Job Application Data: We will only process this information for our recruitment process, in order to evaluate and follow-up with your application, and in the course of preparing your contract, if we decide to send you a proposition. You may contact us at any time to request the deletion of your information which has been previously submitted.

Browser Data: This automatically recorded data is anonymously analysed in order to maintain and improve our services. Google reCAPTCHA may also be used for security purposes, in order to prevent abuse of our services. In that case we only process the anonymous score that further reCAPTCHA determines based on your browser and device. We will only correlate this data with your personal data when required by law or for security purposes, if you have violated any of our additional policies which have been set out as standard.

Customer Database: We only collect and process this data on your behalf, which is done in order to perform the services you have subscribed to, and based on the instructions you explicitly gave when you registered or configured your service or products. Our staff or Editorial Team may have access to this information in a limited and reasonable manner in order to solve any issue with our services, or at your explicit request for support reasons, or required by law, or to ensure the security of our services in case of violation of our said policies in order to keep services secure.

In summary, here is a list of circumstances where data collected could be used by us:

• Create and manage your account
• Deliver targeted advertising, coupons, newsletters and other promotional information
• Email you regarding your account or order
• Order fulfilment to manage purchases, payments, orders or delivery related to the Site
• Reviewing candidates in the process of resumes and hiring decisions
• Generating a personal profile to you for more stylised visits to the site
• Understanding your business needs, providing advice and maintaining records
• Analysing business trends, customer preferences and information to improve our website
• Increase the efficiency and operation of the Site and/or services
• Monitor and analyse usage/trends to improve our offerings
• Notify you in updates to our policies such as the Privacy Policy or Terms and Conditions
• Offer new products/services and recommendations to you
• Perform other business activities as needed
• Prevent fraudulent transactions, monitor against theft and protect against criminal activity
• Process payments and refunds
• Request feedback and contact you about the use of our site
• Resolve disputes and troubleshoot problems
• Respond to product and customer service requests
• Send you a newsletter or other marketing updates, rewards offers or promotions
• Solicit support for the site

To provide customer support, address your enquires, resolve disputes, collect essential feedback, and improve our product and service offerings based on your interactions via our internal team.

Accessing Your Data

You have the right to access and update personal data you have previously provided to us, as also set in other sections of this Privacy Policy on this Site. You can do so at any time by further contacting us or if you wish us to permanently delete your personal information for a legitimate purpose, please contact our team to do so through regulated formats on this website on our contact information at the bottom of this policy. We will take the reasonable steps to ensure that your personal data is permanently deleted except when we are required to keep it for legal reasons (typically, for administration, billing and tax reporting circumstances).

Disclosure of Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This includes exchanging information with other entities for fraud protection and credit risk reduction.

Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Marketing Communications: With your consent, or with an opportunity for you to then withdraw consent, we may send your marketing communications, newsletters, information, updates, offers, rewards, and discounts, for marketing purposes, as permitted by law.

Online Postings: When you post comments, contributions or other content to the Site, your posts may be viewed by all users and may be publicly distributed outside the Site in perpetuity.

Third-Party Advertisers: We may use third-party advertising companies to serve ads when you visit the Site. These companies may use information about your visits to the Site and other set websites that are contained in web cookies in order to provide advertisements about goods and services of interest to you and could be personalised.

Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honour this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us in association with the Site in question you are browsing.

Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.

Offer Wall: Our Site may display a third-party hosted "offer wall." Such an offer wall allows third-party advertisers to offer virtual currency, gifts, or other items to users in return for the further acceptance and completion of an advertisement offer. Such an offer wall may appear in our Site and be displayed to you based on certain data, such as your geographic area or certain  demographic information. When you click on an offer wall, you will leave our Site. A unique identifier, such as your user ID, will be shared with the offer wall provider to prevent fraud and properly credit your account.

Data Retention

Data Retention​: We retain your personal data only for as long as is necessary for the purposes set out in this privacy policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Customer & Order Data​: We retain personal data related to customer profiles and orders for a period necessary to fulfil the orders and maintain business records as per legal requirements. This period may extend beyond the completion of the transaction to cover warranties, returns, and support related issues.

Consultation Data​: Data collected during consultative services will be retained for a period that aligns with the duration of the consultancy contract and as required for post-service support, analysis, or as stipulated by law.

Financial Records​: Financial records, including transaction data, invoices, and payment records, are retained in accordance with legal and regulatory requirements for financial record keeping.

Deletion of Data​: Upon said expiration of the data retention periods, your personal data will be deleted or anonymised. If the data is anonymised, it may be used for statistical analysis and business planning internally as part of training and upskilling processes.

Your Rights​: You have the right to request deletion of your personal data. If you wish for us to delete your data, please contact us using the contact information provided in this policy. Note that we may need to retain certain information for record-keeping purposes, to complete transactions, or to comply with our legal obligations.

Review & Update of Retention Policies​​: We regularly review our data retention policies and then practices to ensure they comply with our business needs, legal requirements, and your rights. Changes to our retention periods will be communicated through updates to this privacy policy.

Data Security

We are committed to protecting the security of your personal information. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use, or disclosure. To ensure this, we evoke various technical and organisational further  measures to assure that this is of paramount importance.

Encryption​​: We use encryption technology to ensure that your data is secure during transmission and storage in each format.

Secure Servers​​: Our servers are secured and maintained in accordance with industry standards to prevent unauthorised access or attacks. We take this extremely seriously, to ensure that every given chance is used to minimise potential risks where applicable server-side.

Regular Security Audits​​: We conduct regular security audits and continuously monitor all our systems for vulnerabilities. This includes access to personal data across controls as data which is collected is strictly limited to personnel who require it to perform their job functions. We further enforce strict internal policies and procedures to prevent unauthorised access.

Internal Training​​: We provide regular training to our employees about the importance of data security and privacy, and how to handle personal data securely.

Data Protection Policies​​: We maintain internal policies and procedures designed to protect your data from unauthorised access, use, or disclosure.

Confidentiality: Employees and contractors are bound by confidentiality agreements and are obligated to respect the privacy of any personal information they access.

Incident Response Plan: In the unlikely event of a data breach, we have an incident response plan to promptly address security breaches. We will notify affected individuals and relevant authorities as required by law.

User Responsibility: While we take every reasonable measure to protect your data, the security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Updates to Security Measures: Our security policies and procedures are regularly reviewed and updated to reflect changes in technology and threats. Changes to our security measures will be communicated through updates to this privacy policy.

While we do everything within our power to protect, it is important to remember that no system can be completely secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We do however take it extremely seriously, and with our background and this Site being built on the Odoo framework, would highly recommend that you additionally take a look at Odoo's Security Policy in addition.

Third-Party Providers

To ensure that we can support our operations, we in circumstances, rely on third-party suppliers as they help us with various services and through products such as but not limited to, payment processing, web audience analysis, cloud hosting, marketing and communications etc. At some points, we might share data with these service providers to ensure alignment, however we make sure that they use it in compliance with Data Protection legislation, and that the processing is carried out for us in a limited capacity, including being purpose specific to the requirement set.

Your Rights

As a data subject, you have certain rights regarding the personal data we hold about you. We are committed to honouring these rights in compliance with GDPR and other key relevant data protection laws. Below are the rights you may exercise:

Rights to Access: You have the right to request access to the personal data we hold about you. This enables you to receive a copy of the personal data we have about you and to check that we are lawfully processing it.

Right to Rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete based on previous data/information which you have previously given us.

Right to Erasure: In certain circumstances, you have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.

Right to Restrict Processing: You have the right to request the restriction of processing of your personal data. This means you can request us to suspend the processing of your personal data in the following scenarios: if you want us to establish the accuracy of the data, where the data is unlawful, but you do not want us to erase it, where you need us to hold the data even if we no longer require it as you need to establish, exercise, or defend legal claims or you have objected to the use of our data, but we need to verify whether we have overriding legitimate grounds.

Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

Right to Object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground.

Rights Related to Automated Decision Making and Profiling: You have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How to Exercise Your Rights: If you wish to exercise any of the rights set out above, then please contact us. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

No Fee Usually Required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Time Limit to Respond: We try to respond to all legitimate requests within one month. It can on occasion may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.

Children's Policy

Gravitai Ltd recognises the importance of protecting the privacy and safety of children. Our Site and services are not directed towards children, and we do not knowingly collect personal data from children under the age of eighteen (18). Our products and services are designed for and directed towards adults and are not intended for children.

Age Restriction: We do not intentionally collect or maintain data about anyone under the age of eighteen (18). If we learn that we have collected personal information from a child under the age of eighteen (18) without verification of parental consent, we will delete that information quickly as possible to ensure that we are adhering to our policy practices.

Parental Notice: If you believe that we might have any information from or about a child under the age of eighteen (18), please contact us. We urge parents and guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children to never provide personal data on our Site without their permission.

Transactions by Minors: Any transactions on our Site are meant to be conducted by adults or individuals of legal age in their respective jurisdiction. If a transaction is made by a minor, it should be assumed that it is made under the supervision and consent of the responsible parent or guardian to adhere to best policy practice.

Cookies Technology

Gravitai Ltd uses cookies and similar tracking technologies to track the activity on our Site and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Site. 

Purpose of Cookies: The information collected by cookies and similar technologies are used for various purposes, across the use of our Site.

Essential Cookies: These cookies are essential to provide you with services available through our Site and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those allotted services.

Functionality Cookies: These cookies allow our Site to remember choices you make when you use our Site, such as remembering your login details or language preference. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use our Site.

Analytics & Performance Cookies: These cookies are used to collect information about traffic to our Site and how users use our Site. The information gathered does not identify any individual visitor. It includes the number of visitors to our Site, the websites that referred them to our Site, the pages they visited on our Site, what time of day they visited our Site, whether they have visited our Site before, and other similar information. We use this information to help operate our Site more efficiently, to gather broad demographic information, and to monitor the level of activity.

Testing & Advertising Cookies: These cookies track your browsing habits to enable us to show advertising which is more likely to be of interest to you. These cookies use information about your browsing history to group you with other users who have similar interests. Based on that said information, and with our permission, third-party advertisers can place cookies to enable them to show adverts which could be relevant to your interests while you are on third-party websites.

Managing Cookies: You can manage your cookies preferences by adjusting your said browser settings. Each browser is a little different, but usually, these settings are found in the 'options' or 'preferences' menu.

You can opt out of targeted advertising by contacting Facebook, Google and Bing. Please note that if you choose to disable cookies, some portions of our Site may not work as intended and may affect your experience when browsing and searching for content, products or said services.

International Users

Gravitai Ltd operates globally and may transfer, store, and process your information within our family of companies or to third-party service providers based in various countries around the world. We understand that data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. 

We also comply with certain legal frameworks relating to the transfer of data, such as the key European Union (EU) General Data Protection Regulation (GDPR) standards.

Data Transfer Compliance: When we transfer personal data from the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we rely on various legal bases to lawfully transfer that data, including contracts and agreements that ensure the protection and confidentiality of your information. Gravitai commits to:

EU/US & Swiss U.S Privacy Shield Frameworks: Although the EU-U.S. Privacy Shield Framework has been invalidated, we continue to comply with its key principles for data received from the EU and Switzerland, respectively.

Standard Contractual Clauses: We use Standard Contractual Clauses approved by the official European ​Commission or other suitable safeguard to permit data transfers from the EEA to other countries, in question when it does occur for users.

Binding Corporate Rules (BCRs): For transfers of data​within our corporate group, we may rely on Binding ​Corporate Rules, a set of principles governing data ​protection and privacy, approved by European data protection authorities.

Your Rights & Choices: If you are located in the EEA, the UK, or Switzerland, you have certain rights and protections under the law regarding the processing of your personal data. Gravitai is always committed to providing you with the same level of control over your data no matter where you live. You can review, modify, or object to the processing of your personal data by contacting us.

Data Protection Officer (DPO): To ensure the highest level of commitment to data protection, Gravitai has appointed a Data Protection Officer (DPO). If you have any questions about your data, our privacy practices, or if you need to exercise your rights, you can contact us further.

Social Media Platforms

Communication, engagement and the actions taken through external social media platforms that this website and its owners participate on are customs to the said terms and conditions as well as the privacy policies held with each social media platform respectively. 

Users are advised to use social media platforms wisely and communicate/engage upon them with due care and caution regarding their privacy and personal details. Gravitai will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email, in the event of a query, question or any other legitimate reason. 

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using social sharing buttons that they do so at their discretion. They note that the social media platform may also indeed track and save your request to share a web page respectively through your social media platform account via the of content which has been shared.

Business Transfers

If Gravitai, or substantially all its assets, were acquired, or in the unlikely event that Gravitai Ltd goes out of business or enters bankruptcy, said user information would be one of the assets that are transferred or acquired by a third party. You acknowledge that such transfers may indeed occur and that any acquirer of Gravitai Ltd may continue to use your personal information as outlined in this policy once the transfer has been completed.

Changes to Our Policy

Although changes are likely to be minor, Gravitai may change its Privacy Policy from time to time, and In Gravitai Ltd’s sole discretion. Gravitai encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.