Privacy Policy
Last updated: 30 July 2026
This policy explains how First Layer Robotics Ltd (“we”, “us”) collects and uses personal data when you interact with our website at firstlayerrobotics.com. It is written to comply with the UK GDPR and the Data Protection Act 2018.
Who we are
First Layer Robotics Ltd is a company registered in England and Wales. We are the data controller responsible for the personal data described here. You can contact us at hello@firstlayerrobotics.com.
What we collect and why
- Contact and early-access forms. When you submit either form we collect your name, email address, organisation (optional on contact, required on early access), the message you write and your IP address. From your IP address we also derive your approximate location (country and timezone) using ip-api.com. We use this to respond to your enquiry, to send launch and early-access updates, and to keep a record of consent. Lawful basis: your consent for marketing communications; our legitimate interest in responding to enquiries, understanding where interest comes from, and preventing form abuse (IP address).
- Data sheet downloads. When you download the Motion Core data sheet we log your IP address, browser user agent, HTTP referer and accept-language header, and derive your approximate location (country and timezone) from your IP address using ip-api.com. We use this to distinguish real interest from automated traffic and to gauge demand. We do not associate this with any name or email unless you have already submitted one of our forms. Lawful basis: our legitimate interest in understanding site usage.
- Newsletter signups. When you subscribe to our newsletter we collect your email address. We use it to send you marketing updates about First Layer Robotics and Motion Core. We ask you to confirm your subscription (double opt-in) and you can unsubscribe from any email at any time. Lawful basis: your consent, which you may withdraw at any time.
-
Google Analytics 4 (only with your consent). If you accept analytics cookies in our cookie banner, we load Google Analytics to understand how visitors use the site. GA4 sets first-party cookies (such as
_ga) and collects a client-side identifier, approximate location, device type and pages viewed; IP addresses are anonymised before storage by Google. We do not load Google Analytics or set any analytics cookie unless you accept, and you can change or withdraw your choice at any time via Cookie preferences in the site footer. Lawful basis: your consent. - Strictly-necessary cookies. We set a session cookie and a CSRF token cookie so pages load and forms submit securely, and we store your cookie choice. These are essential to the site working, are set without consent as permitted for strictly-necessary cookies, and are not used for tracking.
Who we share it with
We share personal data only with service providers that help us run the site:
- Our email delivery provider (SparkPost / Message Systems) processes form-submission and admin-notification emails on our behalf.
- Our newsletter provider (EmailOctopus) stores newsletter subscribers’ email addresses and sends our marketing emails, including the double opt-in confirmation and unsubscribe handling.
- Our geolocation provider (ip-api.com) receives the IP address of visitors who submit a form or download the data sheet, and returns an approximate country and timezone. It does not receive your name, email or message.
- Our hosting provider (Amazon Web Services, EU region) stores the underlying database and logs.
- Google (Google Analytics 4) processes the anonymised analytics events described above.
We do not sell personal data and do not share it for advertising purposes.
How long we keep it
Form submissions and the associated email address are retained for as long as we have a live commercial relationship with you or your organisation, and for up to 24 months after our last meaningful contact. Server access logs, including IP addresses logged for data-sheet downloads, are retained for up to 90 days. Analytics data follows Google’s retention setting (14 months).
Your rights
Under UK GDPR you have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct data that is inaccurate.
- Ask us to delete your data (subject to any legal obligations we have to retain it).
- Object to processing based on legitimate interests, or withdraw consent at any time.
- Complain to the Information Commissioner’s Office (ico.org.uk).
To exercise any of these rights, email hello@firstlayerrobotics.com.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of the page reflects when the current version came into effect.