GDPR Compliance Statement
Last reviewed: October 2026
APM Internet Ltd (trading as edwin.chat) is committed to protecting the personal data of customers, partners and website visitors, and to complying fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. All data is stored in the United Kingdom. Each chatbot's answers are generated either by our private UK-hosted AI, running on our own servers, or, where the chatbot's owner chooses it, by Claude from Anthropic.
Our role
Depending on the context, edwin.chat acts as either a Data Controller — when we collect and manage your account, contact and billing information — or a Data Processor, when your chatbot handles conversations with your website's visitors on your behalf. Where we act as a processor, you are the controller for that content and are responsible for informing your own visitors how their data is used. If you choose Claude for a chatbot, Anthropic acts as our sub-processor for that chatbot's conversations.
What data we collect and why
We collect only the personal data necessary to provide the service and support our customers. Our lawful bases for processing are:
- Contract performance — to set up and manage your account and deliver the services you order.
- Legitimate interests — to run our business, prevent fraud and maintain the security of the service.
- Legal obligation — to comply with applicable law, including financial and tax regulations.
- Consent — for optional communications such as product updates.
Your rights
Under UK GDPR you have the right to access the data we hold, to rectify inaccurate data, to erasure in certain circumstances, to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent. To exercise any of these rights, contact hello@edwin.chat. We respond within 30 days.
Data storage and security
All personal data is stored exclusively within the United Kingdom, in a UK data centre. With our private UK-hosted AI, your chatbot's replies are also generated on our own servers in the UK, and your knowledge base and your visitors' conversations are not shared with any external AI service.
Where a chatbot's owner chooses Claude, the chatbot's knowledge base and each conversation are sent to Anthropic to generate the replies, which may involve processing outside the UK, including in the United States. This transfer is covered by Anthropic's Data Processing Addendum, which incorporates the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Anthropic may not use the data to train its models and deletes it within 30 days by default. We do not share data with OpenAI, Google or any other AI provider.
Our ongoing compliance efforts
We continually review how we collect, use, store and dispose of personal data, and keep our contracts and data processing terms up to date. Personal data is retained only for as long as necessary or as required by law.
Complaints
If you have concerns about how we handle your data, contact hello@edwin.chat. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, at ico.org.uk or 0303 123 1113.
APM Internet Limited, registered in England and Wales (No. 04601087), 32 High Street, Wendover, Bucks, HP22 6EA, England.