Privacy Policy
Neural Natives Limited · Last updated: September 2026
1. Who We Are
Neural Natives Limited is a company registered in England and Wales, with its registered office at 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. We provide businesses with consulting and software in the field of artificial intelligence (AI). Our offerings include neuralnatives.ai and Entirely at hello-entirely.com.
Neural Natives Limited is the controller for the processing described in this policy. For privacy enquiries, contact hello@neuralnatives.ai.
2. Scope
This policy covers our website at neuralnatives.ai and personal data we process for our own business enquiries. This includes the Entirely WhatsApp appointment assistant available through hello-entirely.com and at events, together with the handling of related enquiries. Neural Natives Limited is the controller for these activities. Entirely is our own contact channel for prospective business partners.
Where we process data on behalf of our clients, their privacy information and our agreements with them apply.
3. What Data We Process and Why
3.1 Visiting Our Website
When you visit neuralnatives.ai, our hosting provider collects technical information in server logs. This includes your Internet Protocol (IP) address, anonymised where possible, browser and browser version, operating system, the address of the referring page, pages visited, and the date and time of access.
We need this information to provide the website, maintain its security and resolve technical problems. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR): our legitimate interest in a secure and functional website. Logs are automatically deleted within 30 days.
3.2 Contact by Email
When you email us, we process your name, email address and message content to handle your enquiry and reply.
For business enquiries, we rely on Article 6(1)(f) GDPR: our legitimate interest in handling enquiries and business correspondence. Where processing is necessary to perform a contract with you personally or to take steps towards such a contract at your request, we rely on Article 6(1)(b) GDPR.
We retain correspondence for as long as necessary to handle the enquiry or an ongoing business relationship. Records required by law or necessary to establish, exercise or defend legal claims are retained only as long as required by the applicable retention requirements or necessary in light of the relevant limitation periods and any ongoing proceedings. Entirely records follow the specific retention periods in Section 3.4.
3.3 Cookies and Tracking
Our website at neuralnatives.ai is hosted on Webflow, which may use strictly necessary cookies. These cookies may process personal data. We use them without consent only where they are essential to provide a service you expressly request.
On neuralnatives.ai, we do not use analytics tools, social media plugins, advertising cookies or other tracking services such as Google Analytics, Meta Pixel or Google Ads. The information about Webflow hosting concerns neuralnatives.ai.
3.4 Entirely demo and appointment assistant
Purpose and data. Entirely is an artificial intelligence (AI) assistant operated by Neural Natives Limited to arrange meetings about possible collaboration or pass related enquiries to our founders. We process your WhatsApp number, messages, replies and timestamps, plus any name, company, role, email address, meeting topic and scheduling details you provide. Providing information is voluntary; without necessary details, we may be unable to handle your request. Please do not send sensitive personal data.
How we use it. We retain conversation history so you can resume your enquiry after a break without repeating information. Meetings are entered in Google Calendar; relevant enquiries may be forwarded to our founders through WhatsApp. If you request a meeting or related contact, we store necessary contact details, the meeting topic and agreed next steps in Airtable to manage your enquiry and any resulting project discussions. We do not add people who merely test the assistant or copy full chats into Airtable or Calendar. Authorised founders and staff may read conversations to handle enquiries or resolve service problems. We do not use these contacts for marketing or conversations to train AI models.
Legal basis. Under the General Data Protection Regulation (GDPR), we rely on Article 6(1)(b) for steps you request towards a contract with you personally. For business representatives and contact administration, we rely on Article 6(1)(f): our legitimate interest in handling business enquiries, enabling you to resume conversations and discussing potential projects. Abuse prevention relies on Article 6(1)(f), our interest in protecting the service and limiting financial losses caused by misuse.
Abuse prevention. We automatically check messages and limited recent conversation context to detect misuse and limit the costs it causes. Detected violations are recorded with your number, reason, time and supporting context. We retain limited incident records to investigate misuse and review safeguards. The first two violations within 14 days trigger warnings; a third blocks the assistant for up to 90 days. Retaining a record of a past block does not extend the block. This affects only access to the assistant. For direct contact or human review of a mistaken block, email hello@neuralnatives.ai. Incorrect records and blocks are corrected.
Retention. We delete data when no longer needed, subject to these maximum periods for active systems under our control. These retention periods take precedence over the general correspondence periods in Section 3.2:
| Records | Deletion deadline |
|---|---|
| Chats and conversation context, including copies forwarded to founders | Up to 90 days after the last substantive exchange |
| Calendar entries | As needed to follow up on the requested meeting, for up to 12 months after the meeting or cancellation. Deleted entries remain recoverable in Google Calendar’s trash for a further 30 days. |
| Airtable contact and enquiry records | Up to 12 months after the last substantive exchange about your enquiry or a potential project |
| Abuse-prevention records: context extracts, violations and block history | Up to 90 days after the respective message, violation or start of a block. Blocks end after at most 90 days. |
| Technical and security logs | 30 days after the event |
Necessary contact records may be kept longer for a confirmed future meeting, later contact you expressly requested or an active customer contract. We document the reason and review date. Records required by law or necessary to establish, exercise or defend legal claims are retained only as long as required by the applicable retention requirements or necessary in light of the relevant limitation periods and any ongoing proceedings.
Google Cloud completes deletion of residual copies, including internal backups, within 180 days after our deletion makes the data unrecoverable by us, unless law requires retention. This does not extend our active use. After restoring backups, we reapply deletions before use. Your own WhatsApp copies follow your settings and WhatsApp's terms.
Separately, Microsoft Azure may retain selected inputs and outputs for up to 30 days for human review of suspected misuse of its model service.
Sections 4–6 explain our service providers, international transfers and your privacy rights, including your right to object.
4. Data Sharing
We do not sell personal data. We share it only where necessary for the purposes described in this policy, with service providers acting on our behalf, with professional advisers bound by confidentiality, or where required by law.
We use Webflow as a processor to host neuralnatives.ai.
For Entirely, authorised founders and team members of Neural Natives have access where necessary to handle enquiries, administer appointments or investigate misuse. We use Google Cloud for application hosting and storage, Microsoft Azure for language-model processing, Twilio and the WhatsApp Business services for message delivery, Google Workspace and Google Calendar for scheduling, and Airtable (Formagrid Inc.) for meeting-related contact records. Langfuse supports configured rule management and service monitoring; Sentry supports error monitoring where enabled.
These services receive only the data required for their configured function. We use appropriate processing terms for service providers acting on our behalf. WhatsApp also processes information about your use of its service under its own terms and privacy information.
5. International Transfers
Our website at neuralnatives.ai is hosted by Webflow Inc. Webflow uses Amazon Web Services in the United States and Cloudflare's global content delivery network. Technical server logs may therefore be processed in the United States. Our email correspondence is not processed through Webflow. For international transfers, we use appropriate safeguards, including applicable adequacy decisions or Standard Contractual Clauses. Transfers to the United Kingdom are covered by a European Commission adequacy decision.
The information about Webflow hosting above concerns neuralnatives.ai. Entirely involves additional providers for messaging, cloud services, scheduling and contact management. This may involve processing in the United Kingdom, the United States and other countries outside the European Economic Area (EEA).
Airtable's standard hosting is in the United States unless European data residency has been configured. Choosing a European hosting location for some data does not exclude all international processing. We rely on applicable adequacy decisions or contractual safeguards, including the European Commission's Standard Contractual Clauses and the relevant United Kingdom transfer terms where required. For Airtable, the applicable clauses form part of our executed data processing agreement.
You may contact hello@neuralnatives.ai for information about these safeguards or a copy, subject to protection of confidential information.
6. Your Rights
Subject to the applicable legal conditions, you may request access to your personal data, its rectification or erasure, or restriction of processing. You may also exercise your right to data portability.
You have the right to object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.
To exercise your rights or request a human review of a block imposed by the Entirely assistant, contact hello@neuralnatives.ai. We normally respond to data protection requests within one month. If a legally permitted extension is necessary, we will inform you of the extension and its reasons within that month.
7. Right to Complain
You may complain to a data protection supervisory authority if you believe we are processing your personal data unlawfully. This includes the United Kingdom's Information Commissioner's Office (ICO) and the Austrian Data Protection Authority.
Within the European Union (EU), you may in particular contact the supervisory authority in the country of your habitual residence, place of work or the place of the alleged infringement.
8. Data Security
We take appropriate technical and organisational measures to protect personal data. These include encrypted transmission, access restrictions and regular security reviews.
9. Changes to This Policy
We may update this policy when our processing activities or legal requirements change. The current version is published on this page. The date of the last update appears at the beginning of this policy.