Privacy Policy

1. Who We Are

This Privacy Policy explains how Globestart Commerce, a trading style of INNOVO AI LTD ("we", "us", "our"), collects, uses and protects your personal data.

INNOVO AI LTD is registered in England and Wales under company number 14862227, with registered office at:

2nd Floor College House
17 King Edwards Road
Ruislip, London
United Kingdom, HA4 7AE

For the purposes of UK data protection law (including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018), we are the "data controller" of your personal data when you use our website and services.

2. Personal Data We Collect

We may collect and process the following categories of personal data, depending on how you interact with us:

2.1 Identity Data

• Full name
• Date of birth
• Nationality
• Copies of identification documents (e.g. passport, ID card) where required for Know Your Customer (KYC) checks

2.2 Contact Data

• Email address
• Phone number
• Postal address (including business and residential addresses)
• Country of residence

2.3 Business Information

• Company name and details
• Business activities and business model
• Shareholder and director details
• Documentation required to form or manage a company

2.4 Financial and Transaction Data

• Payment details (e.g. transaction IDs, billing address)
• Limited bank information as needed for invoicing (we do not store full card details; payments may be processed by third-party providers)

2.5 Technical and Usage Data

• IP address, browser type and version, time zone setting, device information
• Information about how you use our website (pages visited, time spent, navigation)
• Cookies and similar technologies (see Cookies section)

2.6 Communication Data

• Emails, messages and other communications you send to us
• Notes of calls or meetings with you

3. How We Collect Your Data

We collect personal data in the following ways:

Directly from you when you:

• Fill in forms on our website
• Purchase a package
• Provide documents for company formation, address services or KYC
• Contact us by email, phone, messaging or other channels

Automatically, when you visit our website:

• Through cookies and similar technologies (see Cookies and Tracking)

From third parties, for example:

• Payment processors
• Banks and financial institutions
• Identity verification providers (where used)
• Public sources such as corporate registries

4. How We Use Your Personal Data

We use your personal data for the following purposes and legal bases:

4.1 To provide our services to you

• Processing your orders and payments
• Forming your UK company and providing address services
• Assisting with banking and payment gateway applications
• Delivering advisory, audits and store build services

Legal basis: Performance of a contract; steps taken at your request prior to entering a contract.

4.2 To comply with legal and regulatory obligations

• Identity verification and KYC checks where required
• Record-keeping for tax, accounting and compliance

Legal basis: Compliance with a legal obligation.

4.3 To communicate with you

• Responding to your queries or support requests
• Sending you important updates about your services or changes to our policies

Legal basis: Performance of a contract; legitimate interests (to manage our relationship).

4.4 To improve our services and website

• Analysing how visitors use our website and services
• Improving user experience and service performance

Legal basis: Legitimate interests (to develop and grow our business).

4.5 Marketing (limited)

• With your consent (where required), we may send newsletters or offers related to our services.
• You can opt out at any time by using the unsubscribe link or contacting us.

Legal basis: Consent; legitimate interests (for existing business customers, where permitted by law).

5. Sharing Your Data

We may share your personal data with:

Service providers and partners who help us deliver our services, such as:

• Company formation agents and corporate service providers
• Banks, payment service providers and payment gateways
• Accountants, legal advisors and compliance consultants
• IT and hosting providers, email and communication tools, CRM systems

Regulatory and government bodies, where required:

• Companies House
• Tax authorities
• Law enforcement or regulatory authorities, if required by law

Corporate transactions

If we sell, transfer or merge parts of our business, your data may be transferred to the new owner, who must continue to protect your data in line with this policy.

We do not sell your personal data to third parties.

6. International Transfers

Because we work with clients and partners in different countries, your personal data may be transferred outside the UK or European Economic Area (EEA).

When we transfer your data internationally, we will ensure that appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government or European Commission, or
• Standard contractual clauses or other recognised safeguards, combined with appropriate technical and organisational measures.

7. Data Retention

We keep your personal data only for as long as necessary to:

• Provide our services and manage our relationship with you
• Comply with legal, tax and regulatory requirements
• Resolve disputes and enforce our agreements

Specific retention periods may vary, but as a guideline:

• Company and KYC records may be retained for at least 5–7 years after the end of the relationship, in line with legal and regulatory expectations.
• Basic contact and billing information may be kept for accounting and tax purposes for a similar period.

When data is no longer needed, we will securely delete or anonymise it.

8. Your Rights

Under data protection law (including UK GDPR), you may have the following rights:

• Right of access – to request a copy of the personal data we hold about you.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure – to request deletion of your data in certain circumstances.
• Right to restrict processing – to limit how we use your data in certain cases.
• Right to data portability – to receive your data in a commonly used format or have it transferred to another controller, where technically feasible.
• Right to object – to object to processing based on legitimate interests or to direct marketing.
• Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These measures may include:

• Secure storage and access controls
• Encryption and secure communication channels where appropriate
• Limited access to personal data for staff and contractors on a need-to-know basis

However, no system is completely secure. You are also responsible for keeping your own devices and communications secure.

10. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Enable core site functionality
• Understand how visitors use our website
• Improve performance and user experience

Where required by law, we will ask for your consent before placing non-essential cookies. You can manage your cookie preferences through your browser settings and, where provided, our cookie banner or settings tool.

11. Third-Party Links

Our website may contain links to third-party websites (for example, banks, payment gateways or other service providers). We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies before providing any personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page.

We encourage you to review this page periodically to stay informed about how we handle your data. Significant changes may be notified to you by email or site notice where appropriate.