Rainsmith Privacy Policy

1 Scope of this policy

This policy applies to rainsmith.ai (the “Website”), enquiries and demo requests submitted to us, and our related business communications. Rainsmith is the controller of the personal data described here, meaning that we decide why and how it is used.

This policy does not govern documents, prompts, outputs or other content processed on behalf of customers through the Rainsmith platform. That processing is governed by the relevant customer agreement and data processing terms. Requests about personal data handled on a customer’s behalf should be directed to that customer.

Third-party websites and services linked from the Website have their own privacy notices. This policy does not govern their independent processing.

2 Personal data we collect

Information you give us

When you complete a form, request a demonstration, subscribe to updates or contact us, we collect the details you provide. These may include your name, work email address, telephone number, employer, job title, professional interests and the content of your enquiry. We also record your communication preferences and any consent you give.

If you communicate with us through social media, we receive the information you make available through that interaction, such as your profile name, business details and message. Please avoid including confidential client material or sensitive personal data in ordinary website enquiries.

Information collected through the Website

Our Website and its service providers may collect your IP address, browser and device details, pages visited, referral information, dates and times of visits, interactions with forms and links, and information needed to identify technical errors or security threats.

We do not currently use cookies on the Website.

Information from other sources

We may receive business contact details from your organisation, someone who introduces us, event organisers or business partners. We may also obtain professional contact information from publicly available sources, such as an organisation’s website or a professional profile, to understand an enquiry or contact a relevant business prospect. The information may include your name, employer, role, work contact details and the context of the introduction or interaction.

Where we collect information from another source, we provide the required privacy information within the period required by applicable law, unless a lawful exception applies.

3 How we use personal data

We use the information described in section 2 to:

• Operate, maintain and secure the Website, investigate technical problems and prevent misuse.
• Respond to questions, arrange demonstrations and discuss whether Rainsmith may meet your organisation’s needs.
• Send requested information and, where permitted, relevant news, event invitations and marketing communications.
• Understand Website engagement and improve our Website, communications and business development activities.
• Manage our business relationships, records, privacy requests and communication preferences.
• Meet legal requirements, resolve disputes and protect legal rights.

We may use statistics that no longer identify individuals to understand Website performance and report on our business. Removing a name alone does not necessarily make information anonymous. Where information can still reasonably be linked to someone, we continue to treat it as personal data.

The UK lawful bases for these purposes are set out in section 8. If we intend to use personal data for a new purpose, we will provide any further notice and obtain any consent required by law before doing so.

4 How we disclose personal data

We disclose personal data where necessary to the following categories of recipients:

• Service providers that help us host and secure the Website, manage business contacts, deliver communications, organise meetings or events, and analyse Website performance. Their access is limited to the services they provide and is subject to appropriate contractual requirements.
• Professional advisers, including lawyers, accountants and insurers, where needed for advice, compliance or the protection of our business.
• Authorities, courts or other parties where disclosure is legally required or reasonably necessary to address unlawful activity, protect rights or respond to a legal claim.
• Parties involved in a proposed or completed financing, merger, acquisition or other business reorganisation, together with their advisers, subject to appropriate confidentiality and data protection arrangements.
• Other recipients where you ask us to share information or give valid consent for a specific disclosure.

We do not disclose information to advertising partners.

5 How we protect personal data

We use technical and organisational measures appropriate to the personal data we hold and the risks involved. These measures are intended to protect against unauthorised access, disclosure, alteration and loss. No website, transmission method or storage system can be guaranteed to be completely secure.

6 International transfers

Rainsmith is based in the United States. Personal data collected through the Website is processed in the United States and the United Kingdom. A transfer between these countries may involve data protection laws that differ from those where you are located.

Where an international transfer requires a legal transfer mechanism, we rely on the following arrangements as applicable to the transfer:

• Adequacy arrangements. We may transfer personal data to a country or recipient covered by an applicable adequacy decision or regulation. For a UK-to-US transfer, this can include the UK Extension to the EU-US Data Privacy Framework where the receiving organisation holds a current certification covering the UK Extension and the transfer is within its scope.
• Contractual safeguards. Where an adequacy arrangement does not cover the transfer, we use appropriate contractual safeguards, such as the European Commission’s Standard Contractual Clauses with the UK Addendum for UK transfers, or the UK International Data Transfer Agreement. We carry out any assessment and apply any additional measures required by law.
• Limited exceptions. In exceptional circumstances, we may rely on a specific legal exception where its conditions are met, such as your explicit consent after the required information has been provided, or a transfer necessary for the establishment, exercise or defence of legal claims.

You can request information about the arrangements relevant to your personal data, including a copy of applicable safeguards, by contacting hello@rainsmith.ai.

7 How long we keep personal data

We keep personal data for the period needed for the purpose for which it was collected, taking account of legal obligations and the need to establish or defend legal claims. We determine the period by reference to the type of information, the nature of our relationship with you, the purpose for retaining it and any relevant legal requirements.

• For enquiries and business contacts, we consider whether the enquiry is open, whether there is an ongoing business relationship or discussion, and when we last had meaningful contact.
• For marketing, we consider your preferences and whether our communications remain relevant. If you opt out, we may retain limited information on a suppression list so that we can respect your choice.
• For Website logs, analytics and security records, we consider the period needed to investigate incidents, resolve errors and assess Website performance.
• For compliance and legal records, we consider the applicable recordkeeping requirements and the period for which a dispute or claim may reasonably require the information.

When information is no longer needed, we delete it or make it anonymous. Where copies remain in backups pending scheduled removal, we restrict their use to recovery, security or legal requirements.

8 Provisions for the United Kingdom and United States

United Kingdom

Where UK data protection law applies, we rely on the following lawful bases. When we rely on legitimate interests, we assess those interests against your rights and reasonable expectations.

You can choose whether to provide information in an enquiry or marketing form. If you do not provide information needed to respond, we may be unable to deal with your request. Any legally or contractually required information will be identified when it is requested.

United States

US state privacy rights depend on your state of residence, the context in which information is collected and whether the relevant law applies to Rainsmith. Where those laws apply, you may have rights to confirm processing, access, correct, delete or obtain a portable copy of your personal data, and to opt out of sales, targeted advertising or certain profiling. You may also have rights concerning sensitive personal data and to appeal a decision on a request.

If we use your personal data for profiling in connection with decisions that have legal or similarly significant effects, we will notify you and explain any applicable right to opt out of that processing.

Sections 2 to 4 describe the information covered by this policy, its sources, uses and recipients; section 7 describes retention. We will not unlawfully discriminate against you for exercising your rights. You may submit an appeal to hello@rainsmith.ai; where applicable, we will explain the outcome and how to contact the relevant state authority.

9 Children

The Website is intended for a professional audience and is not directed to anyone under 18. We do not knowingly collect personal data through the Website from children under 18. If you believe a child has provided information to us, contact hello@rainsmith.ai so we can investigate and take appropriate steps, including deletion where required.

10 Your privacy rights

Subject to the conditions and exceptions in applicable law, you may have the right to access your personal data, correct inaccurate information, request deletion, restrict processing or receive a portable copy. You may also have the right to object to processing based on legitimate interests. Where UK law applies, you can object at any time to use of your personal data for direct marketing, including related profiling.

You can unsubscribe from marketing emails through the link in the email or by contacting hello@rainsmith.ai. If we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out lawfully before withdrawal. We may still send non-marketing responses or notices where appropriate.

To make a privacy request, email hello@rainsmith.ai. You may use an authorised agent where the law permits. We may request information reasonably necessary to verify identity or authority and will use it for that purpose. We respond within the applicable legal period and explain any permitted extension or refusal. For UK rights requests, the usual response period is one month, subject to the conditions and extensions allowed by law.

You can also send a privacy complaint to hello@rainsmith.ai. For complaints covered by UK data protection law, we acknowledge receipt within 30 days, investigate without undue delay, keep you informed and communicate the outcome. You have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to another competent regulator where applicable.

11 Changes to this policy

We may update this policy as our Website, business or legal obligations change. We will publish the updated version here and revise the date at the top. Where a change requires additional notice or consent, we will provide that notice or request consent as required by law.

12 Contact us

Rainsmith Inc

Email: hello@rainsmith.ai