Privacy Policy

Last Updated: [Insert Date]

This Privacy Policy explains how ACTAI Global collects, uses, and protects personal data when you interact with our Website and marketing communications.

1. Information We Collect

We collect the following categories of personal data:

A. Information You Provide

Name
Email address
Company name
Job title
Event interests
Any information submitted through forms

B. Automatically Collected Information

IP address
Browser type
Device information
Pages visited and interactions

2. How We Collect Data

We collect data via:

Website forms
Newsletter signups
Event registrations
Cookies and analytics tools
HubSpot marketing and CRM tools

3. How We Use Your Data

We use personal data only for:

Marketing communications
Event announcements and updates
Newsletters and promotions
Audience insights and campaign optimization

We do not sell personal data.

4. Legal Bases for Processing (GDPR)

For individuals in the EU/EEA, we process data based on:

Consent (marketing communications)
Legitimate interests (business growth and engagement)
Legal obligations, where applicable

5. Your Privacy Rights

GDPR Rights (EU/EEA)

You have the right to:

Access your data
Correct inaccurate data
Request deletion
Restrict or object to processing
Data portability
Withdraw consent at any time

CCPA / CPRA Rights (California)

You have the right to:

Know what personal data is collected
Request deletion
Opt out of data sharing (we do not sell data)
Non-discrimination for exercising rights

Requests can be made via info@actai.global

6. Cookies & Tracking Technologies

We use cookies for:

Website functionality
Analytics
Marketing performance

You may control cookies through your browser settings.

7. Third-Party Processors

We use trusted third-party processors, including:

HubSpot (CRM and marketing automation)
Analytics providers
Hosting and infrastructure partners

All processors are contractually obligated to protect your data.

8. International Data Transfers

Your data may be processed outside your country of residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs).

9. Data Retention

We retain personal data only as long as necessary for marketing purposes or as required by law. You may request deletion at any time.

10. Data Security

We implement reasonable technical and organizational safeguards to protect personal data from unauthorized access, loss, or misuse.

11. Children’s Privacy

Our Website is not intended for individuals under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes take effect upon posting.

13. Contact Us

ACTAI Global
Email: info@actai.global

DATA PROCESSING ADDENDUM (DPA)

Appendix A to the Terms of Use & Privacy Policy

Last Updated: 12/20/2025

This Data Processing Addendum (“DPA”) forms part of the Terms of Use and Privacy Policy of ACTAI Global and applies to the processing of Personal Data subject to data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act / CPRA (CCPA).

1. Definitions

For purposes of this DPA:

“Personal Data” means any information relating to an identified or identifiable individual.
“Processing” means any operation performed on Personal Data.
“Controller” means the entity that determines the purposes and means of Processing.
“Processor” means the entity that Processes Personal Data on behalf of the Controller.
“Data Protection Laws” means GDPR, UK GDPR, CCPA/CPRA, and other applicable global privacy laws.

Unless otherwise stated, terms have the meanings defined in GDPR.

2. Roles of the Parties

ACTAI Global acts as a Data Controller with respect to Personal Data collected through its Website and marketing activities.
Third-party service providers, including HubSpot, act as Data Processors or Sub-processors processing data on our behalf.

Where applicable, partners or sponsors submitting Personal Data through the Website may also act as Controllers.

3. Scope & Purpose of Processing

Personal Data is processed solely for the following purposes:

Marketing communications
Event promotion and updates
Newsletter distribution
Audience engagement and analytics
CRM and campaign optimization

Processing does not include selling personal data or using it for unrelated purposes.

4. Categories of Data Subjects & Data

Data Subjects

Website visitors
Event attendees
Marketing subscribers
Business contacts

Categories of Personal Data

Name
Email address
Company and job title
Event interests
IP address and usage data

5. Processor Obligations (GDPR Article 28)

All Processors engaged by ACTAI Global shall:

Process Personal Data only on documented instructions
Ensure confidentiality of personnel
Implement appropriate technical and organizational security measures
Assist with data subject rights requests
Assist with data protection impact assessments where required
Delete or return data upon termination of services

6. Sub-processors

We may engage Sub-processors to support our operations, including HubSpot and hosting providers.

We ensure that:

Sub-processors are bound by written agreements
Equivalent data protection obligations apply
Updated Sub-processor lists are available upon request

7. International Data Transfers

Where Personal Data is transferred outside the EEA, UK, or Switzerland, we rely on:

Standard Contractual Clauses (SCCs)
Adequacy decisions where applicable
Other lawful transfer mechanisms

8. Data Security

We implement appropriate safeguards, including:

Access controls
Encryption where appropriate
Secure hosting environments
Vendor risk assessments

Security measures are reviewed periodically.

9. Data Subject Rights Assistance

Processors must assist ACTAI Global in fulfilling requests relating to:

Access
Correction
Deletion
Restriction
Objection
Data portability

Requests can be submitted to info@actai.global.

10. Personal Data Breach Notification

In the event of a Personal Data breach, Processors must notify ACTAI Global without undue delay and provide sufficient information to meet regulatory obligations.

11. Data Retention & Deletion

Personal Data shall be retained only as long as necessary for marketing and business purposes or as required by law.

Upon termination of services, data will be securely deleted or returned unless legally required to retain it.

12. CCPA / CPRA Compliance

For California residents:

Personal Data is processed as a Service Provider relationship
Data is not sold or shared for cross-context behavioral advertising
Processing is limited to business purposes defined herein

13. Audits & Compliance

Upon reasonable request, Processors shall make available information necessary to demonstrate compliance with this DPA.

14. Liability

Each party’s liability under this DPA is subject to the limitations set forth in the Terms of Use, except where prohibited by law.

15. Precedence

In the event of conflict, this DPA shall prevail over the Privacy Policy or Terms of Use with respect to data protection matters only.

16. Contact Us