Privacy Notice
1. Who is responsible for your data?
The data controller for personal data collected through this website (matterai.ai) is:
Amplifi & Impact Limited
Dixcart House, Addlestone Road
Bourne Business Park, Addlestone
Surrey KT15 2LE, United Kingdom
ICO data protection registration: 00018521168
Contact: privacy@amplifi-impact.com
This notice covers personal data we collect through the matterai.ai marketing website. Personal data held inside a customer's deployed Matter AI instance is governed separately (see section 7 below).
For Amplifi's wider privacy commitments (including how we handle data of consulting clients, suppliers, and our workforce), see Amplifi's full Privacy Policy at amplifi-impact.com/privacy.
2. What we collect on this website
We may collect:
- Identity and contact data you provide when you make an enquiry, sign up to a newsletter, or request a demo (typically: name, work email, organisation, job title, the substance of your enquiry).
- Technical and usage data automatically when you visit the site: IP address, browser type, pages viewed, time spent, referrer.
- Cookie data as described in section 6.
We do not knowingly collect special category personal data through this website.
3. How we use it
We use website-collected personal data to:
- Respond to your enquiry or demo request
- Send you the information you have specifically asked for
- Send you marketing communications about Matter AI and related Amplifi services, where you have agreed to receive them
- Operate, secure, and improve the website
- Comply with legal and regulatory obligations
4. Lawful basis for processing
We process website-collected personal data on the following lawful bases under UK GDPR:
- Legitimate interests — operating, marketing, and securing our business, where these are not overridden by your rights
- Consent — for marketing communications and non-essential cookies (you can withdraw consent at any time)
- Contract — to take steps at your request before entering into a contract (for example, responding to your demo request)
- Legal obligation — where we are required to retain records
5. How long we keep it
We keep website-collected personal data only for as long as necessary:
- Enquiry data: for as long as the conversation is active and for a reasonable period afterwards (typically up to 24 months) so we can pick up where we left off
- Marketing contact data: until you withdraw consent or unsubscribe, then minimal records are retained to honour suppression
- Technical logs: typically rotated within 90 days
6. Cookies
This website uses a small number of cookies:
- Strictly necessary cookies: required for the site to function. These do not require consent.
- Analytics cookies: used to understand site usage patterns and improve the site. We use these only where you have consented.
We do not use third-party advertising or cross-site tracking cookies.
A cookie banner appears on your first visit. You can change your preferences at any time through your browser settings.
7. Customer data and Matter AI tenants
If your organisation is a Matter AI customer, the personal data processed through your Matter AI tenant is governed by a separate Data Processing Agreement between Amplifi (as data processor) and your organisation (as data controller).
Matter AI's architecture has two layers:
- A data engineering layer that holds your organisation's source-derived content (a vector store, structured derived state, ETL pipelines). This lives in your organisation's own cloud account, in the UK region. Either built and operated by Amplifi consulting on your behalf, or in some customer cases already in place (for example, a Palantir Foundry deployment).
- A Matter AI tenant that brokers metered, governed, audited access between your data engineering layer and the consumers of your data products. This is hosted by Amplifi on AWS eu-west-2 (London, United Kingdom). The Matter AI tenant does not persist your source content; it holds only the commercial substrate (policies, subscriptions, meter readings, audit log, and the connector configuration to reach your data engineering layer).
The terms, technical and organisational measures, sub-processors, and breach notification commitments are set out in the engagement DPA. Customer-managed encryption keys (BYOK) are available on the Enhanced tier; deployment fully inside your own cloud (BYOC) is available on the Enterprise tier. Speak to your organisation's nominated contact, or contact us directly, for a copy of the DPA.
This website privacy notice does not cover the customer-tenant arrangements, only the matterai.ai marketing site.
8. Who we share it with
We share website-collected personal data with:
- Service providers that help us run the website and respond to enquiries (hosting, email, analytics) under appropriate data protection terms
- Professional advisers (legal, accounting) where reasonably required
- Regulators and law enforcement where required by law
We do not sell personal data to third parties.
9. International transfers
Some of the service providers we use may operate outside the UK. Where data is transferred to a country without a UK adequacy decision, we use appropriate safeguards (UK IDTA, UK Addendum to EU SCCs, or other legally recognised mechanisms) to protect it.
10. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erasure (in certain circumstances)
- Object to processing based on legitimate interests
- Restrict processing in certain circumstances
- Portability — request transfer of your personal data
- Withdraw consent where processing is based on consent
- Lodge a complaint with the UK Information Commissioner's Office (ICO)
Requests to us: privacy@amplifi-impact.com. We aim to respond within one month.
ICO: ico.org.uk, helpline 0303 123 1113.
11. Children's data
This website is aimed at business users. We do not knowingly collect personal data from individuals under the age of 18. If you become aware that a child has provided us with personal data, please contact us and we will remove it.
12. Updates to this notice
We may update this notice from time to time. When we make material changes, we will update the version number and effective date at the top of this page.