GDPR Notice

This GDPR Notice explains how CloviTek AI LLC processes the personal data of individuals in the European Union, European Economic Area, and United Kingdom, and the rights those individuals have under the EU General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy.

1. Who this applies to

This Notice applies to individuals in the EU/EEA and UK whose personal data we process, whether as visitors and enquirers on our websites, as account holders, or as end users and prospects whose data a client directs us to process.

2. Controller and processor

For the personal data of our own account holders and enquirers, CloviTek AI LLC is the data controller. For data a client uploads or directs us to process on its behalf, CloviTek AI acts as a data processor and the client is the controller; that processing is governed by our Terms of Service and, where required, a Data Processing Addendum.

3. Legal bases for processing

We process personal data only where we have a lawful basis under Article 6 GDPR, namely:

• Contract — to provide the Services you or your organisation have requested and to manage our relationship with you;
• Legitimate interests — to operate, secure, and improve our Services and websites, and to carry out lawful B2B communications, balanced against your rights;
• Consent — for non-essential cookies and certain communications, which you may withdraw at any time;
• Legal obligation — to comply with laws that apply to us, such as tax and record-keeping requirements.

4. Your rights

Subject to conditions and exemptions in the GDPR/UK GDPR, you have the right to:

• be informed about how your data is processed;
• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure (“right to be forgotten”) where applicable;
• restrict or object to processing, including direct marketing and profiling;
• data portability — receive your data in a structured, commonly used, machine-readable format;
• withdraw consent at any time where processing is based on consent;
• not be subject to a solely automated decision producing legal or similarly significant effects, without appropriate safeguards.

5. How to exercise your rights

To exercise any of these rights, email [email protected] from the address associated with your data. We verify requests before acting on them and respond within the time limits set by law (generally within one month, extendable for complex requests). Where a client is the controller, we will refer your request to that client and assist them in responding.

6. International transfers

Your data may be transferred to and processed in countries outside the EU/EEA and UK, including the United States, by us and our sub-processors. Where we make such transfers, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, adequacy decisions where they apply, and supplementary technical and organisational measures such as encryption and access controls.

7. Retention

We keep personal data only as long as necessary for the purposes described in our Privacy Policy and Data Handling page, or as required by law.

8. Complaints

If you have a concern about our processing, please contact us first so we can address it. You also have the right to lodge a complaint with your local supervisory authority (for example, the UK Information Commissioner’s Office, or the data-protection authority in your EU/EEA member state).

9. Contact

For any GDPR request or question, email [email protected].

See also our Terms of Service, Privacy Policy, and full legal center.

CloviTek AI LLC · 3731 S Broughtyferry Cv., Salt Lake City, UT 84106, USA · contact [email protected] · Last updated 2026-07-22. This page may be revised as our practices and services evolve; the date above always reflects the current version.