Privacy Policy

At Lotus AI Labs, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, get in touch with us, or interact with our services.

1. Information We Collect

When you visit our website, we may collect the following information:

• Personal Information: If you contact us by email or book a call through our scheduling link, we collect your name, email address, and any other information you choose to provide.
• Usage Data (cookieless, always on): We use Cloudflare Web Analytics — a privacy-first, cookieless analytics service — to understand website usage in aggregate, such as page views, the site that referred you, general browser and device type, and approximate country. Cloudflare Web Analytics does not use cookies, does not fingerprint individual visitors, and does not track you across other websites or build a profile of you.
• Google Analytics 4 (only with your consent): If you accept analytics cookies via our consent banner, we also use Google Analytics 4 (provided by Google Ireland Limited). GA4 sets cookies on your device and collects information such as your IP address (used by Google to derive approximate location and not stored by us), device and browser details, the pages you view, and certain interactions — for example clicking a “Start My Audit” / “Audit My Recovery” call-to-action or an outbound link. Because our sign-up flow lives on a separate domain (pacman-app.lotusailabs.com), we use GA4 cross-domain measurement so we can understand the journey from this website through to sign-up as a single session. GA4 does not run, and these cookies are not set, unless and until you give consent; you can withdraw your consent at any time (see “Cookies and Tracking Technologies” below).

2. How We Use Your Information

We may use your information for the following purposes:

• To Respond to Inquiries: We use the information you send us by email or through our scheduling link to respond to your inquiries or requests.
• To Analyse Website Usage: Aggregate, cookieless analytics help us understand how our website is performing so we can improve user experience and site performance.
• To Measure Our Funnel (with consent): Where you consent, Google Analytics 4 helps us understand which campaigns and pages lead to sign-ups across our website and the PACMAN app, attribute visits to marketing sources (for example a LinkedIn campaign via UTM tags), and measure conversion.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you contact us by email or book a call, you consent to our use of your personal data to respond to you. Google Analytics 4 and its cookies are used strictly on the basis of your consent, given through our cookie-consent banner; we do not load Google Analytics until you accept, and you may withdraw your consent at any time.
• Legitimate Interests: We use privacy-first, cookieless website analytics (Cloudflare Web Analytics) based on our legitimate interest in understanding aggregate website traffic and improving our services. This baseline does not rely on cookies and runs regardless of your consent choice.

4. Cookies and Tracking Technologies

Our cookieless baseline analytics (Cloudflare Web Analytics) does not store information on your device to track you. We do not use advertising or cross-site advertising cookies on this website. Google Analytics 4 sets cookies (for example _ga and _ga_<id>) only after you accept them via our consent banner. We implement Google Consent Mode, so storage stays denied until you opt in. You can withdraw consent at any time by clearing this site’s stored preference in your browser (which brings the banner back so you can choose again) or by blocking/deleting cookies in your browser settings. Any cookies set by third-party services you actively choose to use — for example, our scheduling provider when you book a call — are governed by those providers’ own policies. See our cookie policy for the full list and details.

5. Data Sharing and Transfers

We do not sell your personal data. We share it only with the service providers that help us operate this website and respond to you — for example, Cloudflare (hosting and privacy-first analytics), Google (Google Analytics 4, where you consent), and our email and scheduling providers. Delivering the website may also involve providers (such as our content delivery network and web-font provider) that necessarily process technical data like your IP address in order to serve the page. We are based in the EU and handle personal data in line with the GDPR. Google Analytics 4 is provided by Google Ireland Limited; where Google or another provider processes personal data outside the European Economic Area (for example on servers in the United States), such transfers are made under appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses together with supplementary measures.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Aggregate, cookieless analytics data is retained in line with Cloudflare’s data retention policy. Google Analytics 4 user- and event-level data is retained according to the retention period configured in our GA4 property (Google offers retention of up to 14 months for this data), after which it is automatically deleted by Google; aggregated reporting may persist longer.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: You have the right to request access to the personal data we hold about you.
• Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Erasure: You have the right to request deletion of your personal data, subject to certain conditions.
• Restriction of Processing: You have the right to request that we limit the processing of your personal data.
• Data Portability: You have the right to request a copy of your personal data in a structured, commonly used format.
• Withdraw Consent: Where we rely on your consent — including for Google Analytics 4 and its cookies — you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority. As we are based in Ireland, the lead supervisory authority is the Irish Data Protection Commission (dataprotection.ie).

To exercise any of these rights, please contact us: [email protected]

8. Security

We take reasonable measures to protect your personal data from unauthorised access, use, or disclosure. However, no internet-based service can be completely secure, and we cannot guarantee absolute security.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: [email protected]