Legal
Privacy Policy
Last updated: 16 October 2026
ORYX AI Automations ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and the rights you have over it. We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What We Collect
Information you provide
When you contact us, book a consultation, or fill in a form on our website, we collect the details you submit - such as your name, email address, phone number, and information about your business.
Usage data
We collect standard analytics data when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This is collected via cookies and similar tracking technologies.
Communications
If you email or message us directly, we retain those communications to help us respond to your enquiries and improve our service.
How We Use It
To provide our services
We use your information to respond to enquiries, deliver AI automation services you have engaged us for, and manage our ongoing relationship with you.
To improve our website
Analytics data helps us understand how visitors use our site so we can make it more useful and relevant.
To send relevant communications
With your consent, we may send you information about our services, case studies, or updates. You can opt out at any time by contacting us or clicking unsubscribe in any email we send.
Legal and security
We may process your data to comply with legal obligations or to protect the security and integrity of our business.
Data Sharing
We do not sell your data
We never sell, rent, or trade your personal information to third parties for their marketing purposes.
Service providers
We work with a small number of trusted third-party tools to operate our business - such as email platforms, calendar scheduling tools, and analytics providers. These providers only process your data on our behalf and are bound by their own privacy commitments.
Legal requirements
We may disclose your information if required to do so by law or in response to valid requests from public authorities.
Your Rights
Under UK GDPR, you have the right to
Access the personal data we hold about you. Request correction of inaccurate data. Request deletion of your data where we no longer have a lawful basis to hold it. Object to processing or request restriction. Withdraw consent at any time where processing is based on consent. Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
How to exercise your rights
To make any of the above requests, contact us at ryan@oryxaiautomations.com. We will respond within 30 days.
The ORYX App
Who this covers
The ORYX app helps businesses we work with answer enquiries, book work, send quotes and invoices, manage reviews and publish posts. When a business connects its accounts, we act on that business's instructions as its data processor. The business remains the controller of its customers' information.
Messages from customers
When someone contacts a business that uses ORYX by website chat or form, text, phone, email, WhatsApp, Facebook Messenger or Instagram, we store the messages and the contact details provided so the business and its assistant can reply, book appointments and follow up.
Facebook, Instagram and WhatsApp (Meta)
If a business connects its Facebook Page and Instagram account, we access only the Page and Instagram account it chooses, to receive and reply to messages, read basic profile names of people who message it, and publish posts the business writes or approves. WhatsApp messages are handled through the WhatsApp Business Platform. We do not use this data for advertising and do not sell it.
Google Business Profile
If a business connects its Google Business Profile, we access its locations, reviews and posts so it can read and reply to reviews and publish posts from the app. ORYX's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with the business's permission, for security, or to comply with the law.
Retention
Conversation, customer and booking records are kept for as long as the business uses ORYX and then deleted or returned under our agreement with the business. Access tokens for connected accounts are encrypted and deleted when the business disconnects the account.
Data Deletion
Disconnecting an account
A business can disconnect Facebook, Instagram or Google at any time from Settings in the ORYX app. This deletes the stored access tokens immediately, and the connection can also be removed from your Facebook or Google account settings.
Asking us to delete your data
To have data held about you deleted, email ryan@oryxaiautomations.com from the address or phone number you used, or ask the business you contacted. We confirm and complete deletion within 30 days, except where the law requires us to keep a record.
Contact
Data controller
ORYX AI Automations is the data controller for personal information collected through this website and in the course of providing our services.
Get in touch
If you have any questions about this privacy policy or how we handle your data, please contact us at ryan@oryxaiautomations.com. We are based in the United Kingdom.
Questions about your data?
We are happy to answer any questions about how we handle your information or help you exercise your rights.
Contact Us