Privacy Policy

Last updated: 28 December 2025

Media Stream AI Limited is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use gpu.mediastreamai.com.

1. Information We Collect

1.1 Information You Provide

When you use our quote request forms or contact us, we collect:

  • Name and professional title
  • Work email address
  • Company name and size
  • Technical requirements (GPU cluster preferences, node counts)
  • Timeline and current cloud provider information
  • Any additional information you choose to provide in messages

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

  • IP address and location data (country/region level only)
  • Browser type and version
  • Device information (desktop/mobile, operating system)
  • Pages visited, time spent, and navigation paths
  • Referring website (if you clicked a link to reach us)
  • Date and time of access

1.3 Information We Do NOT Collect

We respect your privacy and do NOT collect:

  • Personal email addresses (only work emails)
  • Financial information or payment details (billing handled separately)
  • Precise GPS location data
  • Social media profiles or activity
  • Third-party tracking for advertising purposes

2. How We Use Your Information

2.1 Primary Uses

We use your information to:

  • Provide quotes and proposals - Generate custom GPU infrastructure pricing based on your requirements
  • Respond to inquiries - Answer technical questions and provide support
  • Deliver services - Provision and manage GPU infrastructure for customers
  • Improve our platform - Analyze usage patterns to enhance user experience
  • Send service updates - Notify you about capacity, maintenance, or important changes (if you're a customer)

2.2 Legal Basis (GDPR)

Under GDPR, we process your data based on:

  • Consent - You voluntarily submit forms and agree to our terms
  • Contract performance - Necessary to provide services you request
  • Legitimate interests - Improving our services and preventing fraud
  • Legal obligations - Compliance with UK and EU data protection laws

2.3 What We Do NOT Do

  • ❌ Sell your data to third parties
  • ❌ Share your information with advertisers
  • ❌ Send unsolicited marketing emails (we only contact leads who requested quotes)
  • ❌ Use your data for purposes beyond those stated in this policy

3. Data Storage & Security

3.1 Where Your Data is Stored

Your data is stored in:

  • UK Data Centers - Primary storage in Manchester and Liverpool
  • EU Data Centers - Backup in Düsseldorf, Germany and Marseille, France
  • 100% Sovereign - All data remains within UK/EU jurisdictions
  • No US Cloud Providers - We do not use AWS, Azure, or GCP for personal data storage

✓ GDPR Compliant • ✓ UK Data Protection Act 2018 • ✓ EU-UK Adequacy Decision

3.2 Security Measures

We protect your data with:

  • TLS/SSL encryption for all data in transit
  • AES-256 encryption for data at rest
  • Role-based access controls (only authorized staff can access data)
  • Regular security audits and penetration testing
  • Automated backup systems with 30-day retention
  • 24/7 security monitoring and incident response

3.3 Data Retention

  • Quote requests - Stored for 2 years or until you request deletion
  • Customer data - Retained for duration of service + 7 years (legal requirement)
  • Analytics data - Anonymized after 26 months
  • Email communications - Stored for 3 years for business records

4. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of all personal data we hold about you

Right to Rectification

Correct any inaccurate or incomplete information

Right to Erasure ("Right to be Forgotten")

Request deletion of your data (subject to legal retention requirements)

Right to Restrict Processing

Limit how we use your data while we verify or investigate an issue

Right to Data Portability

Receive your data in a machine-readable format (e.g., CSV, JSON)

Right to Object

Object to processing based on legitimate interests or direct marketing

Right to Withdraw Consent

Withdraw consent at any time (does not affect prior lawful processing)

To exercise any of these rights, contact us at privacy@mediastreamai.com. We will respond within 30 days.

5. Cookies & Tracking Technologies

5.1 Cookies We Use

Essential Cookies (Always Active)

Required for basic website functionality (session management, security)

Duration: Session only

Analytics Cookies (Optional)

Help us understand how visitors use our site (page views, time on site, bounce rate)

Duration: 26 months • Used: Google Analytics (anonymized)

Preference Cookies (Optional)

Remember your choices (e.g., cookie consent, form prefills)

Duration: 12 months

5.2 Managing Cookies

You can control cookies through:

  • Our cookie banner (appears on first visit)
  • Your browser settings (most browsers allow blocking/deleting cookies)
  • Cookie Policy page for detailed management

5.3 Third-Party Services

We use minimal third-party services:

  • Google Analytics - Website analytics (IP anonymization enabled)
  • Netlify - Website hosting (analytics disabled)

We do NOT use advertising networks, social media pixels, or retargeting cookies.

6. Data Sharing & Disclosure

6.1 When We Share Data

We only share your information in these limited circumstances:

  • Service Providers - Trusted partners who help operate our business (e.g., email services, CRM systems). All providers are GDPR-compliant and bound by data processing agreements.
  • Legal Requirements - If required by law, court order, or government request (we will notify you unless legally prohibited)
  • Business Transfers - In the event of a merger, acquisition, or sale of assets (you will be notified and can opt out)
  • With Your Consent - Any other sharing only occurs with your explicit permission

6.2 International Transfers

All data remains within UK/EU. We do NOT transfer data to:

  • United States or other non-EU countries
  • Jurisdictions without adequate data protection

7. Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect information from individuals under 16 years of age. If you believe we have collected data from a child, please contact us immediately at privacy@mediastreamai.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our data practices
  • New legal requirements or regulations
  • Improvements to our services

We will notify you of significant changes via:

  • Email (if you're a customer or have requested quotes)
  • Prominent notice on our website
  • Updated "Last modified" date at the top of this page

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Data Protection Officer

Media Stream AI Limited

Email: privacy@mediastreamai.com

Subject line: "Privacy Inquiry - GPU Portal"

Postal Address

Media Stream AI Limited

United Kingdom

Supervisory Authority

You have the right to lodge a complaint with:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

We aim to respond to all privacy requests within 30 days. For urgent matters, please indicate "URGENT" in your subject line.