Privacy Policy

1. Who we are

LiteData (litedata.co.uk) is an independent open-source project that develops tools to make public datasets accessible to researchers, analysts, and policymakers. LiteData is not a registered company or legal entity. It is operated by an individual based in the United Kingdom.

For the purposes of UK GDPR and EU GDPR, LiteData acts as a data controller in respect of any personal data processed through this website.

Contact: show contact address

2. What data we collect

2.1 Data you provide directly

When you use the data explorer tools on this platform, you submit natural language queries. These queries are transmitted to a third-party AI service (Mistral AI) for processing. We do not store your queries in our own database.

2.2 Server logs

Our web server automatically records standard access log data, including:

• IP address (anonymised after 24 hours)
• Browser type and version (user agent string)
• Pages visited and time of visit
• HTTP response codes

This data is used solely for security monitoring and server diagnostics. It is not used for tracking, profiling, or advertising purposes.

2.3 Data we do not collect

LiteData does not collect, store, or process:

• Names, email addresses, or contact details (unless you contact us directly)
• Account or registration data (there are no user accounts)
• Payment information
• Device fingerprinting data
• Behavioural tracking or advertising data

3. How we use your data

The legal bases under UK GDPR and EU GDPR for our processing activities are:

• Legitimate interests (Article 6(1)(f)): Server log data is processed to maintain the security and integrity of the platform.
• Performance of a service: Queries submitted via the data explorer tools are transmitted to Mistral AI solely to generate a response to your request.

We do not use your data for marketing, profiling, automated decision-making, or any purpose other than those described above.

4. AI processing and third-party services

4.1 Mistral AI

Queries submitted through LiteData tools are processed by Mistral AI (Mistral AI S.A.S., Paris, France). When you submit a query, it is transmitted to Mistral AI's API along with relevant database results to generate a response.

Under Mistral AI's Commercial Terms of Service (effective March 12, 2026), query inputs and outputs processed through the paid commercial API are not used for model training. Mistral AI retains API inputs and outputs solely for the period necessary to provide the service and for abuse monitoring purposes, in accordance with their Data Processing Addendum.

For full details of how Mistral AI processes data, see the Mistral AI Privacy Policy and Commercial Terms of Service.

4.2 NHS Scotland Open Data

All health data displayed through LiteData tools is sourced from the NHS Scotland Open Data platform, published under the Open Government Licence v3.0. This data is entirely public and contains no personal health information.

4.3 Cloudflare

This website is served through Cloudflare's network. Cloudflare may process IP addresses and request metadata as part of its DDoS protection and content delivery services. See Cloudflare's Privacy Policy.

5. Data retention

• Server logs: IP addresses are anonymised after 24 hours. Aggregated log data may be retained for up to 30 days for security purposes.
• Queries: LiteData does not retain query data. Mistral AI's retention practices are governed by their Commercial Terms of Service and Data Processing Addendum — see Section 4.1.
• Contact enquiries: If you contact us by email, we will retain your correspondence for as long as necessary to respond to your enquiry and for up to 12 months thereafter.

6. Your rights

Under UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of personal data we hold about you
• Right to rectification — to correct inaccurate personal data
• Right to erasure — to request deletion of your personal data where there is no legitimate reason for continued processing
• Right to restriction — to request that we restrict processing of your data
• Right to object — to object to processing based on legitimate interests
• Right to data portability — to receive your data in a structured, machine-readable format

Given that LiteData collects minimal personal data, most of these rights will have limited practical application. To exercise any right, contact us at the address in Section 10.

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you are based in the EU, you may lodge a complaint with your local supervisory authority.

7. Cookies

LiteData does not use tracking cookies, advertising cookies, or analytics cookies. No cookie consent banner is displayed because no non-essential cookies are set.

Your browser may set session cookies necessary for the technical operation of the website. These are deleted when you close your browser and contain no personal information.

8. International data transfers

Mistral AI is a French company operating under EU jurisdiction. Queries transmitted to Mistral AI's API are processed within the European Economic Area (EEA) and are therefore subject to EU GDPR protections.

Cloudflare operates a global network. Traffic may be routed through servers outside the UK and EEA. Cloudflare participates in the UK-US Data Bridge and EU-US Data Privacy Framework. See Cloudflare's privacy policy for details.

No other international transfers of personal data take place.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of LiteData following any update constitutes acceptance of the revised policy.

Significant changes affecting your rights will be noted prominently on this page.

10. Contact

For any privacy-related enquiries, to exercise your data rights, or to raise a concern:

Show contact address

We aim to respond to all privacy enquiries within 30 days.