Skip to content
Leapfrog AITalk to us

Legal

Privacy Policy

Last updated · 16 July 2026

This Privacy Policy explains how we collect, use, and protect personal data when you use the website www.leapfrogai.com (the “Website”). The Website provides information about Leapfrog AI and our product, AVA.

This policy covers the Website only. It does not govern any use of the AVA platform or any service you sign up for — those are covered by a separate agreement.

1

Who we are

The Website is operated by Leapfrog AI LTD (“we”, “us”, “our”), a company registered in England and Wales. We are the data controller for personal data collected through the Website.

  • Company registration number: 15433724
  • Registered office: 17 Bowling Green Lane, London, England, EC1R 0QB
  • VAT number: GB 477 3318 67
  • Contact: privacy@leapfrogai.com

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and the Dutch implementing legislation (the Uitvoeringswet AVG).

2

Changes to this policy

We may update this policy from time to time. The “Last updated” date shows when it last changed. Material changes will be reflected there.

3

The personal data we collect

  • CategoryContact data
    ExamplesWhen you complete an enquiry or contact form: your name, email address, company, and the content of your message.
  • CategoryNewsletter data
    ExamplesWhen you subscribe: your email address and any preferences.
  • CategoryTechnical and usage data
    ExamplesCollected automatically as you browse: IP address, browser and device type, pages visited, and how you arrived at the Website.

We do not collect special category data, and we do not request payment information through the Website.

4

How we collect your personal data

We collect personal data:

  • Directly from you, when you complete a form, subscribe, or email us.
  • Automatically, through the strictly necessary cookies and server logs described in section 7.
5

How and why we use your personal data

We must have a lawful basis for processing your personal data. We rely on the following:

  • PurposeResponding to your enquiry
    Data usedContact data
    Lawful basisLegitimate interests (responding to those who contact us), or steps taken prior to entering a contract
  • PurposeSending our newsletter
    Data usedNewsletter data
    Lawful basisConsent
  • PurposeKeeping the Website secure and preventing abuse
    Data usedTechnical data
    Lawful basisLegitimate interests (protecting our Website and business)
  • PurposeComplying with legal and regulatory obligations
    Data usedAs required
    Lawful basisLegal obligation

You may unsubscribe from our newsletter at any time using the link in any email. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6

How long we keep your personal data

We retain personal data only for as long as necessary for the purposes set out in this policy, including to meet any legal, accounting, or reporting requirements.

  • Enquiry and contact data — retained for 24 months following our last contact with you, unless an ongoing relationship requires otherwise.
  • Newsletter data — retained until you unsubscribe.

When personal data is no longer required, we securely delete or anonymise it.

7

Cookies

The Website uses only strictly necessary cookies — the essentials needed to load pages and keep them secure. We set no analytics, advertising, or third-party tracking cookies, so there is nothing non-essential to consent to and no cookie banner. Full details are in our Cookie Policy.

8

Who we share your personal data with

We share personal data with service providers who help us operate the Website and our communications. These providers act as our processors and are bound by contract to protect your data.

  • RecipientWebsite hosting
    PurposeHosting and serving the Website
    ProviderVercel Inc.
  • RecipientForms and customer relationship management
    PurposeReceiving and routing form submissions
    ProviderAttio Ltd
  • RecipientEmail
    PurposeSending enquiry responses and our newsletter
    ProviderResend (Plus Five Five, Inc.)

We may also disclose personal data where required by law, or in connection with a sale, merger, or reorganisation of our business.

We do not sell your personal data.

9

International data transfers

Some of our providers process personal data outside the United Kingdom and the European Economic Area, including in the United States. Where a provider is not covered by a UK or EU adequacy decision, we rely on the Standard Contractual Clauses together with the UK International Data Transfer Addendum. Where a provider is certified under the EU–US Data Privacy Framework and its UK Extension, we rely on the corresponding adequacy decisions.

You may request details of the safeguards applicable to a specific transfer by contacting us at privacy@leapfrogai.com.

10

Security

We have appropriate technical and organisational measures in place to protect personal data, including access controls and encryption in transit. No method of transmission over the internet is completely secure, but we work to protect your data and to address vulnerabilities promptly.

Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in line with our legal obligations.

11

Your rights

Under the UK GDPR and the EU GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests, and to object to direct marketing at any time.
  • Request portability of the data you have provided to us.
  • Withdraw consent at any time where we rely on consent.

To exercise any of these rights, contact us at privacy@leapfrogai.com. We will respond within one month, which may be extended for complex requests as permitted by law. We may need to verify your identity before acting on a request.

12

Complaints

You have the right to lodge a complaint with a data protection supervisory authority, including:

  • United Kingdom— the Information Commissioner’s Office (ICO), ico.org.uk
  • The Netherlands — the Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl

We would appreciate the opportunity to address your concerns before you approach the authority, so please contact us first.

13

Children

The Website is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

14

Related documents

This Privacy Policy should be read together with our Terms of Use and our Cookie Policy.

15

Contact

Questions about this policy or your personal data? Contact us at:

Leapfrog AI LTD privacy@leapfrogai.com