Privacy Policy.

Who we are

Avantgard.ai ("Avantgard", "we", "us", "our") is a research-based strategic boutique focused on AI-first enterprise transformation. Our registered address and primary place of business spans Europe and the United States.

For the purposes of applicable data protection law (including the EU General Data Protection Regulation, "GDPR", and, where applicable, the UK GDPR), Avantgard acts as the data controller for personal data collected through this website and in connection with our services.

Data we collect

We collect the following categories of personal data:

Contact and enquiry data — name, email address, company name, and message content you voluntarily provide through our contact form or by corresponding with us directly.

Usage data — information your browser automatically sends, including IP address, browser type, pages visited, referring URL, and time spent on pages. This data is collected in aggregated, anonymised form where possible.

Communication data — records of our correspondence with you, including emails and messages.

We do not collect sensitive personal data ("special categories" under GDPR) and we do not knowingly collect data from individuals under the age of 16.

How we use your data

We use the data we collect for the following purposes:

Responding to enquiries — to reply to messages submitted through our contact form and to communicate with prospective and current clients. Legal basis: legitimate interests (Article 6(1)(f) GDPR) or, where applicable, performance of a contract.

Improving our website — to understand how visitors use our site and to improve its performance, content, and user experience. Legal basis: legitimate interests.

Legal and compliance obligations — to comply with applicable laws, respond to lawful requests from authorities, and enforce our agreements. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

We do not sell, rent, or trade personal data with third parties for marketing purposes.

Data sharing and processors

We may share your personal data with a limited number of trusted third-party service providers ("processors") who assist us in operating this website and delivering our services. These include:

Hosting and infrastructure — Vercel, Inc. (United States). Vercel hosts this website and processes server logs. Data transfers to the US are covered by Vercel's data processing addendum and applicable transfer mechanisms.

Analytics — we use Vercel Analytics, a privacy-preserving analytics solution that does not use cookies and does not collect personally identifiable information.

Email service providers — where you contact us via email, messages are processed by your email provider and ours.

All processors are bound by data processing agreements and are required to process personal data only on our instructions and in accordance with applicable law.

International transfers

Some of our service providers are located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or that the recipient country has been deemed adequate by the European Commission.

You may request a copy of the relevant transfer mechanism by contacting us using the details in section 9.

Data retention

We retain personal data only for as long as is necessary for the purposes described in this policy, or as required by law.

Contact enquiry data is retained for up to 3 years from your last interaction with us, after which it is securely deleted or anonymised.

Legal and compliance records may be retained for longer periods where required by applicable law.

Cookies

This website uses a minimal number of cookies and similar technologies. For full details of the cookies we use, the purposes for which they are used, and how to manage your preferences, please see our Cookie Policy.

Your rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

Right of access — to obtain a copy of the personal data we hold about you.

Right to rectification — to request correction of inaccurate or incomplete data.

Right to erasure — to request deletion of your personal data in certain circumstances.

Right to restriction — to request that we restrict processing of your data in certain circumstances.

Right to data portability — to receive your data in a structured, machine-readable format.

Right to object — to object to processing based on legitimate interests.

Right to withdraw consent — where processing is based on your consent, to withdraw it at any time without affecting the lawfulness of prior processing.

Right to lodge a complaint — you have the right to lodge a complaint with your local supervisory authority. In the EU, you may contact the supervisory authority of your member state.

To exercise any of these rights, please contact us using the details in section 9 below.

Contact us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us at:

Email: privacy@avantgard.ai

You can also reach us through the contact form at avantgard.ai/contact.

We aim to respond to all requests within 30 days. Where a request is particularly complex or we receive a number of requests, we may extend this period by a further two months, in which case we will notify you.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acknowledgment of the updated policy.