Privacy information for visitors, enquiries and clients of Marhala AI.

Last updated: 18th July 2026

1. Who we are

Marhala AI Ltd (“we”, “us”, or “our”) is the controller of personal data collected through this website and our integrated dashboard services.

Company Name: Marhala AI Ltd
Contact Email: [email protected]
Role: Data Controller under the Data Protection Act 2018 (DPA 2018) and UK GDPR.

2. Applicable Law

This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What Personal Data We Collect

We collect and process the following:

• Contact Information: Name, company/university name, email address, and phone number provided via contact forms.

• Technical Data: IP address, browser type, and usage patterns collected via cookies.

• Google User Data: If you choose to integrate your Google Analytics account with the Marhala AI dashboard, we access your Google Analytics property data (specifically via the analytics.readonly scope).

4. How We Use Personal Data & Google User Data

We use your data to:

Respond to enquiries and manage recruitment or service interests.
Dashboard Integration: Display your Google Analytics data within your Marhala AI dashboard to provide unified insights.
Google API Disclosure: Marhala AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell your Google user data to third parties or use it for serving advertisements.

5. Lawful Bases for Processing

Under UK GDPR, we rely on the following bases:

Consent: For the use of non-essential cookies and the specific integration of Google Analytics.
Contractual Necessity: To take steps at your request before entering into a contract.
Legitimate Interests: For administrative purposes and maintaining business records.
Legal Obligation: Where we must comply with UK law.

6. Cookies and Analytics

We use Google Analytics to monitor aggregate site usage.

7. Data Sharing, Transfers & Google Data Protection

We may share data with trusted service providers (hosting, email, analytics) under strict data processing agreements. We do not sell, rent, or trade your personal data or Google User Data to third parties.
International Transfers: If data is transferred outside the UK/EEA, we ensure “appropriate safeguards” (such as Standard Contractual Clauses approved by the UK Information Commissioner's Office) are in place.
Google API Disclosure & Limited Use: Marhala AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Data Security and Technical Protection Mechanisms

We implement robust technical and organisational measures to ensure a level of security appropriate to the risk of processing personal and sensitive data. These specific mechanisms include:

Encryption in Transit: All data transmitted between your browser, the Google API, and our servers is encrypted using Secure Sockets Layer/Transport Layer Security (HTTPS/TLS 1.3).
Encryption at Rest: Access tokens, refresh tokens, and any stored Google User Data are encrypted at rest using industry-standard AES-256 encryption algorithms.
Access Control: Access to Google User Data tokens is strictly restricted to automated system processes necessary to populate your dashboard. No human personnel at Marhala AI can view or access your raw Google API credentials or tokens.
Data Isolation: Google Analytics property data is fetched dynamically and isolated to your specific session; it is never aggregated, combined, or exposed to other users.

9. Data Retention

We retain personal data only as long as necessary for the purposes outlined, such as handling your enquiry or maintaining your active dashboard account.

10. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of your data.

• Rectification: Correct inaccurate data.

• Erasure: Request deletion of data (“Right to be forgotten”).

• Withdraw Consent: You can disconnect your Google Analytics integration at any time via your account settings.

To exercise these rights, contact [email protected].

11. Complaints

If you are unhappy with our data usage, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.