Privacy Notice (GDPR)

Larigo Ltd ("Larigo", "we", "us") is the controller of the personal data processed in connection with the www.larigo.ai website and the Larigo website-building service. This notice explains, in line with the General Data Protection Regulation ("GDPR") and the UK GDPR, what personal data we process, why, and what rights you have.

• Controller: Larigo Ltd
• Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
• Email: [email protected]
• Phone: +90 551 510 69 40 (Message us on WhatsApp)

We process the following categories of personal data:

• Account data: Name, email address, phone number, encrypted password
• Store and website content: The business information, text, and images you provide or upload to build and run your website
• Payment data: Subscription and billing history; payments are processed by Stripe — we never store your card details
• Technical and security data: IP address, browser type, session and log-in information
• Analytics and marketing data: Cookie identifiers and site-usage statistics (Google Analytics, Meta Pixel) — only with your consent

Each processing activity relies on one of the lawful bases in Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b)): Creating and managing your account, generating and hosting your website, processing subscriptions and payments, providing customer and technical support
• Legal obligation (Art. 6(1)(c)): Tax, accounting, and consumer-protection requirements
• Legitimate interests (Art. 6(1)(f)): Securing our services, preventing fraud and abuse, and improving the platform — balanced against your rights and freedoms
• Consent (Art. 6(1)(a)): Analytics and marketing cookies (Google Analytics, Meta Pixel) and marketing communications; you may withdraw consent at any time with effect for the future

We share personal data only with service providers who process it on our behalf under data processing agreements, or where the law requires it:

• Stripe: Payment processing
• Cloudflare: CDN, DNS, and security infrastructure
• Hosting providers: Server infrastructure on which your account and website are hosted
• Google Analytics / Meta: Site analytics and advertising measurement — only if you have given consent
• Public authorities: Where disclosure is required by law or a binding order

Some of our service providers process data outside the UK/EEA. Where that is the case, we rely on adequacy decisions or appropriate safeguards such as the European Commission’s Standard Contractual Clauses (Art. 46 GDPR) to protect your data.

We keep personal data only as long as necessary for the purposes described above. When your account is closed or your subscription ends, your data is deleted or anonymized, except where statutory retention periods (for example for accounting records) require us to keep it longer.

As a data subject you have the following rights:

• Access (Art. 15): Obtain confirmation of whether we process your data and receive a copy of it
• Rectification (Art. 16): Have inaccurate or incomplete data corrected
• Erasure (Art. 17): Have your data deleted ("right to be forgotten") where the conditions apply
• Restriction (Art. 18): Restrict processing in certain circumstances
• Data portability (Art. 20): Receive the data you provided in a structured, commonly used, machine-readable format
• Objection (Art. 21): Object to processing based on legitimate interests, and to direct marketing at any time

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO), or the data protection authority of your EU member state of residence.

To exercise any of these rights, contact us at [email protected]. We may ask you to verify your identity before acting on a request. We respond within one month, free of charge; this period may be extended by two further months for complex or numerous requests, in which case we will inform you.

We may update this notice to reflect legal or operational changes. The current version is always published on this page.