Privacy Policy for Spectral Compute

Effective Date: October 6, 2025

1. Introduction

Welcome to Spectral Compute ("we", "us", "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect the personal data of visitors to our website.

This policy applies to all visitors of our website(s).

2. Who We Are (Data Controller)

For the purpose of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the data controller is Spectral Compute.

UK Entity: Spectral Compute Ltd
UK Address: 483 Green Lanes, London, England, N13 4BS, UK
Netherlands Entity: Spectral Compute B.V.
Netherlands Address: Tolburgstraat Landzijde 25, 3311 EK Dordrecht, the Netherlands
Contact Email for Privacy Matters: privacy@spectralcompute.co.uk

3. What Personal Data We Collect and Why

We keep our data collection to a minimum. The data we process depends on how you interact with our site.

3.1. Data We Collect Automatically (Website Usage Data)

When you visit our website, we automatically collect certain technical information about your device and browsing activity.

Analytics Data (via Google Analytics):
- Data Collected: Anonymized IP address, geographic location (country and city level), browser type and version, operating system, device type, pages visited, time spent on pages, links clicked, and the referring website.
- Purpose: To analyze website traffic and user behaviour in an aggregated manner. This helps us understand what content is popular, improve the user experience, and make better business decisions.
- Legal Basis: Your explicit Consent, which you provide through our cookie consent banner before any analytics cookies are set.
Data from Embedded Content (Social Media Feeds):
- Data Collected: Our website may feature embedded content from social media platforms such as Reddit and X (formerly Twitter). When you view a page containing this content, these third-party services may collect data directly from you, including your IP address, browser information, and they may set their own cookies to track your activity.
- Purpose: To display dynamic social media content on our website.
- Legal Basis: Your explicit Consent to allow non-essential cookies and content from these platforms, managed via our cookie consent banner. We do not control the data collection or tracking performed by these third parties. We recommend you review their privacy policies:
  - Reddit Privacy Policy
  - X Privacy Policy

3.2. How You Can Manage Your Analytics Data

You have control over the collection of analytics data. You can prevent your data from being used by Google Analytics by:

Installing the Google Analytics Opt-out Browser Add-on, which is available here.
Managing your preferences through our cookie consent banner, where you can refuse consent for analytics cookies.

We do not sell your personal data. We only share it with trusted third-party service providers who act as "data processors" on our behalf, as described below:

Google LLC: For providing website analytics services.
Reddit, Inc. & X Corp.: For providing embedded content functionalities.
Legal Authorities: We may be required to disclose your data if required by law or in response to a valid legal request from a public authority.

5. International Data Transfers

The data we collect may be transferred to, and stored at, a destination outside the European Economic Area (EEA) and the United Kingdom, specifically the United States. When we do so, we ensure it is protected by implementing appropriate safeguards, such as the EU-U.S. Data Privacy Framework, the UK Extension to that framework, or by using Standard Contractual Clauses (SCCs).

6. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data. These measures include:

Encryption: Using SSL/TLS (HTTPS) encryption to protect data transmitted to and from our website.
Access Control: Limiting access to personal data to only those employees and trusted partners who have a legitimate business need to know.
System Security: Regularly updating our website's software, plugins, and server environment to protect against known vulnerabilities.
Network Security: Employing firewalls and security monitoring to prevent unauthorized access to our systems.
Data Minimisation: Collecting and retaining only the data that is absolutely necessary for the purposes stated in this policy.

7. Data Retention

We retain your personal data for no longer than is necessary.

Google Analytics Data: User-level and event-level data is stored for a period of 14 months before being automatically deleted.

8. Your Data Protection Rights

Under the UK and EU GDPR, you have the following rights regarding your personal data:

Right of Access, Rectification, Erasure, Restriction, Portability, and Objection: As detailed in previous versions of this policy.
Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw that consent at any time.

Withdrawing your consent is a straightforward process that can be done via our cookie consent management tool. Please note that withdrawal of consent does not affect the lawfulness of any processing that occurred before you withdrew it. Withdrawing consent for analytics or embedded content will not break the core functionality of our website. You will still be able to browse our pages, though some embedded elements (like social media feeds) may not display.

You also have the right to lodge a complaint with a supervisory authority (e.g., the ICO in the UK or the Autoriteit Persoonsgegevens in the Netherlands).

9. How to Exercise Your Rights

To exercise any of your rights, please contact us at: privacy@spectralcompute.co.uk

We will respond to your request within one month.

10. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyse traffic. We classify our cookies as follows:

Essential Cookies: These are necessary for the website to function correctly and securely. For example, we use a cookie to remember your consent preferences. These cookies do not require your consent but are active by default.
Non-Essential Cookies: These are used for analytics and to enable third-party embedded content. This category includes cookies from Google Analytics, Reddit, and X. These cookies are only placed on your device if you give us your explicit consent to do so via our cookie banner.

For more detailed information, please see our Cookie Policy.

11. Changes to This Privacy Policy

We may update this policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore re-visit this Privacy Policy regularly to stay informed about our use of cookies and related technologies.