Privacy Policy

Who we are

First Layer Robotics Ltd is a company registered in England and Wales. We are the data controller responsible for the personal data described here. You can contact us at hello@firstlayerrobotics.com.

What we collect and why

• Contact and early-access forms. When you submit either form we collect your name, email address, organisation (optional on contact, required on early access), the message you write and your IP address. From your IP address we also derive your approximate location (country and timezone) using ip-api.com. We use this to respond to your enquiry, to send launch and early-access updates, and to keep a record of consent. Lawful basis: your consent for marketing communications; our legitimate interest in responding to enquiries, understanding where interest comes from, and preventing form abuse (IP address).
• Data sheet downloads. When you download the Motion Core data sheet we log your IP address, browser user agent, HTTP referer and accept-language header, and derive your approximate location (country and timezone) from your IP address using ip-api.com. We use this to distinguish real interest from automated traffic and to gauge demand. We do not associate this with any name or email unless you have already submitted one of our forms. Lawful basis: our legitimate interest in understanding site usage.
• Google Analytics 4. In production we load Google Analytics to understand how visitors use the site. GA4 collects a client-side identifier, approximate location, device type and pages viewed. IP addresses are anonymised before storage by Google. Lawful basis: our legitimate interest in improving the site; you can opt out with any standard tracker blocker.
• Session cookies. We set a session cookie and a CSRF token cookie so forms can submit securely. These are strictly necessary and are not used for tracking.

Who we share it with

We share personal data only with service providers that help us run the site:

• Our email delivery provider (SparkPost / Message Systems) processes form-submission and admin-notification emails on our behalf.
• Our geolocation provider (ip-api.com) receives the IP address of visitors who submit a form or download the data sheet, and returns an approximate country and timezone. It does not receive your name, email or message.
• Our hosting provider (Amazon Web Services, EU region) stores the underlying database and logs.
• Google (Google Analytics 4) processes the anonymised analytics events described above.

We do not sell personal data and do not share it for advertising purposes.

How long we keep it

Form submissions and the associated email address are retained for as long as we have a live commercial relationship with you or your organisation, and for up to 24 months after our last meaningful contact. Server access logs, including IP addresses logged for data-sheet downloads, are retained for up to 90 days. Analytics data follows Google’s retention setting (14 months).

Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate.
• Ask us to delete your data (subject to any legal obligations we have to retain it).
• Object to processing based on legitimate interests, or withdraw consent at any time.
• Complain to the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, email hello@firstlayerrobotics.com.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page reflects when the current version came into effect.