Lorelight

Privacy Policy

Last updated: May 21, 2025

1. Introduction

French Together Limited ("we", "our", or "us"), registered in England and Wales (No 14846069) with its registered office at 69 Church Way, North Shields, Tyne + Wear, United Kingdom, NE29 0AE, values your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Lorelight service ("Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

We are the data controller and responsible for your personal data. If you have any questions about this Privacy Policy, please contact us using the details provided at the end of this document.

2. Data We Collect

We may collect several different types of information for various purposes to provide and improve our Service to you:

2.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:

Email address
First name and last name
Company name
Billing address
Payment information
Phone number
Usage data and preferences

2.2 Usage Data

We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

2.3 Tracking & Cookies Data

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

2.4 Service Data

To provide our AI monitoring service, we process information about the brands, people, products, topics, and organizations that you choose to monitor ("Monitored Entities"). This includes:

Names, descriptions, and other identifiers of Monitored Entities
Prompts you create to query AI systems about Monitored Entities
Results and mentions of Monitored Entities in AI system responses
Analysis data related to sentiment, context, and importance of mentions

3. How We Use Your Data

We use the collected data for various purposes:

To provide and maintain our Service
To notify you about changes to our Service
To provide customer support
To gather analysis or valuable information so that we can improve our Service
To monitor the usage of our Service
To detect, prevent and address technical issues
To process payments and prevent fraud
To provide you with news, special offers and general information about other goods, services and events which we offer
To comply with legal obligations
To enforce our terms and conditions and protect our rights and property
To create aggregated statistical data and other aggregated and/or inferred information, which we may use to improve our services

4. Legal Basis for Processing

Under the UK and EU data protection laws, we need a legal basis to process your personal data. Our legal bases for processing include:

Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract.
Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests.
Consent: You have given consent to the processing of your personal data for one or more specific purposes.
Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Where we rely on legitimate interests, these include:

Improving and personalizing our Service
Managing our customer relationships
Marketing our products and services
Preventing fraud and ensuring the security of our systems
Administrative and legal purposes

5. Data Sharing and Disclosure

We may share your information in the following situations:

5.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include payment processing, data analysis, email delivery, hosting services, and customer service.

5.2 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

5.3 Legal Requirements

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

5.4 Protection of Rights

We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

5.5 Aggregated and Anonymized Data

We may share aggregated and anonymized information derived from our Service with partners, affiliates, and advertisers. This information cannot be used to identify you.

6. International Data Transfers

Our operations are primarily based in the United Kingdom, but we may process, store, and transfer your personal data in countries outside the UK and European Economic Area (EEA). These countries may have data protection laws that are different from those in your country.

When we transfer your personal data internationally, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, including:

Using specific contracts approved for use in the UK and EU (Standard Contractual Clauses)
Transferring to countries that have been deemed to provide an adequate level of protection
Where we use providers based in the US, we may transfer data to them if they are part of frameworks that ensure appropriate data protection

7. Data Security

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

For users who terminate their accounts, we will delete or anonymize their personal data within 30 days of account termination, except where we need to retain specific information for legal or legitimate business purposes.

9. Your Data Protection Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

Access: You have the right to request copies of your personal data.
Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Erasure: You have the right to request that we erase your personal data, under certain conditions.
Restriction: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Object: You have the right to object to our processing of your personal data, under certain conditions.
Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Withdraw Consent: Where we rely on consent as the legal basis for processing, you have the right to withdraw consent at any time.

If you wish to exercise any of these rights, please contact us using the details provided at the end of this document. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.

10. Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us so that we can take necessary actions.

11. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

For significant changes to this Privacy Policy, we will make reasonable efforts to provide notification, such as through email (for account holders) or through prominent notice on our Service.

13. Contact Us

If you have any questions about this Privacy Policy, or if you would like to exercise any of your rights regarding your personal data, please contact us at:

French Together Limited
69 Church Way
North Shields, Tyne + Wear
United Kingdom, NE29 0AE
[email protected]

14. Supervisory Authority

If you are not satisfied with our response to your complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
https://ico.org.uk