Privacy Policy

Who we are

First Layer Robotics Ltd is a company registered in England and Wales. We are the data controller responsible for the personal data described here. You can contact us at hello@firstlayerrobotics.com.

What we collect and why

• Contact form. When you submit the contact form we collect your name, email address, organisation (optional), the message you write and your IP address. From your IP address we also derive your approximate location (country and timezone) using ip-api.com. We use this to respond to your enquiry and to keep a record of the correspondence. Lawful basis: our legitimate interest in responding to enquiries, understanding where interest comes from, and preventing form abuse (IP address).
• Orders and payments. When you place an order we collect your name, email address, phone number, billing and shipping address, and the items you ordered, so we can take payment, fulfil and deliver your order, send order confirmations and meet our legal obligations. Card payments are processed securely by Stripe — we do not receive or store your full card details. Lawful basis: performance of our contract with you, and our legal obligation to keep accounting records.
• Data sheet downloads. When you download the Motion Core data sheet we log your IP address, browser user agent, HTTP referer and accept-language header, and derive your approximate location (country and timezone) from your IP address using ip-api.com. We use this to distinguish real interest from automated traffic and to gauge demand. We do not associate this with any name or email unless you have already submitted one of our forms. Lawful basis: our legitimate interest in understanding site usage.
• Newsletter signups. When you subscribe to our newsletter we collect your email address. We use it to send you marketing updates about First Layer Robotics and Motion Core. We ask you to confirm your subscription (double opt-in) and you can unsubscribe from any email at any time. Lawful basis: your consent, which you may withdraw at any time.
• Google Analytics 4 (only with your consent). If you accept analytics cookies in our cookie banner, we load Google Analytics to understand how visitors use the site. GA4 sets first-party cookies (such as _ga) and collects a client-side identifier, approximate location, device type and pages viewed; IP addresses are anonymised before storage by Google. We do not load Google Analytics or set any analytics cookie unless you accept, and you can change or withdraw your choice at any time via Cookie preferences in the site footer. Lawful basis: your consent.
• Strictly-necessary cookies. We set a session cookie and a CSRF token cookie so pages load and forms submit securely, and we store your cookie choice. These are essential to the site working, are set without consent as permitted for strictly-necessary cookies, and are not used for tracking.

Who we share it with

We share personal data only with service providers that help us run the site:

• Our payment processor (Stripe) handles card payments securely and processes the billing details you enter at checkout. We receive confirmation of payment and the name, contact and shipping details needed to fulfil your order — but not your full card number.
• Our email delivery provider (SparkPost / Message Systems) processes form-submission, order and admin-notification emails on our behalf.
• Our newsletter provider (EmailOctopus) stores newsletter subscribers’ email addresses and sends our marketing emails, including the double opt-in confirmation and unsubscribe handling.
• Our geolocation provider (ip-api.com) receives the IP address of visitors who submit a form or download the data sheet, and returns an approximate country and timezone. It does not receive your name, email or message.
• Our hosting provider (Amazon Web Services, EU region) stores the underlying database and logs.
• Google (Google Analytics 4) processes the anonymised analytics events described above.

We do not sell personal data and do not share it for advertising purposes.

How long we keep it

Form submissions and the associated email address are retained for as long as we have a live commercial relationship with you or your organisation, and for up to 24 months after our last meaningful contact. Order and payment records are retained for 6 years to meet UK accounting and tax requirements. Server access logs, including IP addresses logged for data-sheet downloads, are retained for up to 90 days. Analytics data follows Google’s retention setting (14 months).

Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate.
• Ask us to delete your data (subject to any legal obligations we have to retain it).
• Object to processing based on legitimate interests, or withdraw consent at any time.
• Complain to the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, email hello@firstlayerrobotics.com.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page reflects when the current version came into effect.