Otta

Summary

Available Information

• The diff states only: “Added approximately 47 words to the document.”
• The actual added, deleted, or replaced legal language is not included.

Analysis Limitations

Because the substantive wording is missing, it is not possible to determine:

• Whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models.
• Whether any new rights are granted to the provider over customer data, prompts, inputs, outputs, or usage data.
• Whether data may be shared with affiliates, subcontractors, or third-party AI providers.
• Whether the provider may retain data after termination or use it for unrelated purposes.
• Whether confidentiality, security, deletion, ownership, or intellectual-property protections have changed.
• Whether the customer has an opt-out right or whether AI training is automatic.
• Whether the change creates indemnity, compliance, privacy, or regulatory risks.

Required for Review

Please provide the actual diff text, including:

• Additions shown in {braces};
• Deletions shown in [brackets]; and
• Replacements shown as [{old text}]{new text} or using the intended notation.

Once the substantive language is provided, the changes can be analyzed for legal significance, including any AI-training provisions and associated customer risks.

Summary of Important Changes

1. New privacy contact and DPO language

• The policy now states that the company has appointed a data privacy manager responsible for privacy-policy questions.
• Users are instructed to contact the DPO at privacy@wttj.co for:
• Questions about the policy; and
• Requests to exercise legal rights.
• The previous general contact address, notifications@welcometothejungle.com, appears to have been removed from this section.

Risk/impact:

The change centralizes privacy requests through the DPO address. The company should ensure this mailbox is monitored and that the designated privacy manager/DPO arrangements are accurate and legally compliant.

2. Changes to complaints wording

• The policy now expressly says individuals have the “right” to complain to the ICO, replacing the softer wording that the company would appreciate the opportunity to address concerns first.
• The revised wording still asks users to contact the company before approaching the ICO, but it no longer appears to condition or discourage the right to complain.
• The policy continues to identify the ICO as the relevant UK supervisory authority.

Risk/impact:

This is clearer and more legally appropriate because it preserves the individual’s statutory right to complain without suggesting that internal escalation is mandatory.

3. EU representative language added or clarified

• The policy now states that individuals and supervisory authorities in the EU may contact the company’s data protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.
• The wording also retains a reference to the company’s appointed data protection officer at privacy@wttj.co.

Risk/impact:

Identifying an EU representative may be important if the company is subject to Article 27 GDPR. The representative’s full contact details should be provided and kept current; otherwise, the notice may be incomplete.

4. Administrative and formatting changes

• The legal entity remains Otta Technology Ltd, trading as Welcome to the Jungle, with the same London postal address.
• The policy version has been changed from v.103 to v.103.Last.
• An update date of 25 September 2025 has been added.
• The diff contains substantial repeated and malformed text, suggesting possible formatting or editing errors in the published policy.

5. AI-model training and data use

• No changes concerning AI, machine learning, model training, automated decision-making, or use of customer data to train AI models are visible in this diff.
• The diff does not add or remove any permission to use personal data, user content, profiles, applications, or other customer data for AI training.

Conclusion:

Based solely on the supplied diff, there is no identifiable new AI-training risk.

Key Changes

1. Privacy contact structure updated

• The policy now states that a data privacy manager is responsible for privacy questions.
• It introduces a designated Data Protection Officer (DPO) contact email: privacy@wttj.co.
• The previous general contact email, notifications@welcometothejungle.com, is retained for general company contact details.
• The legal entity and postal address remain identified as Otta Technology Ltd, trading as Welcome to the Jungle, at the London address.

Risk/impact:

The revised wording may create ambiguity about whether the named privacy manager, DPO, and EU representative are separate roles or the same function. The company should ensure that these roles and contact details are accurate and operational.

2. Complaints wording changed

• Individuals are now expressly told that they have the right to complain at any time to the UK Information Commissioner’s Office (ICO).
• The wording encouraging individuals to contact Welcome to the Jungle before approaching the ICO has been retained, but it is now framed as a request rather than a potential precondition.
• The policy clarifies that the ICO is the UK data protection regulator.

Risk/impact:

This is generally more legally accurate and user-friendly. The company should avoid wording that could imply individuals must first contact the company before complaining to a regulator.

3. EU GDPR representation added or clarified

• The revised text states that EU individuals and supervisory authorities may contact an appointed data protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact:

This may signal that the company is not established in the EU but offers services to EU individuals. The company should confirm that the representative appointment is valid, current, and accurately described, including complete contact details if required.

4. Version date updated

• The policy is marked “Last updated: 25th September 2025.”

AI Model Training and Customer Data

• The supplied diff contains no express change concerning the use of customer or personal data to train, fine-tune, evaluate, or improve AI models.
• It does not add or remove any AI-training purpose, consent mechanism, opt-out right, data retention rule, anonymisation standard, or disclosure of AI vendors.
• Accordingly, this diff does not appear to expand or restrict AI-training rights. Any AI-training provisions may exist elsewhere in the policy and should be reviewed separately.

Drafting/Presentation Concern

The diff contains extensive repeated and apparently concatenated text, particularly around the privacy contacts and complaints procedure. The final published policy should be checked carefully for duplicated wording, misplaced headings, or incomplete sentences.

Summary

The provided diff contains only the statement:

> “Added approximately 47 words to the document”

It does not include the actual added, deleted, or replacement language.

Legal and Commercial Impact

• No substantive changes can be identified from the material provided.
• It is not possible to determine whether the amendment changes:
• Customer data ownership or licensing rights;
• Permitted uses of customer data;
• Confidentiality or privacy obligations;
• Data retention or deletion requirements;
• Security responsibilities;
• Liability, indemnification, or regulatory compliance obligations; or
• Audit, notice, or termination rights.

AI Training and Model Use

• No language addressing AI training, machine learning, model development, model improvement, or use of customer data in AI systems is included.
• Accordingly, it cannot be determined whether the new language:
• Permits or prohibits training models on customer data;
• Allows use of customer data to improve the provider’s services;
• Applies only to de-identified, aggregated, or anonymized data;
• Allows human review or sharing with AI subprocessors;
• Grants the customer an opt-out right; or
• Requires deletion of data from training datasets or trained models.

Assessment

The actual redlined text is required for a meaningful legal review. The statement that approximately 47 words were added is insufficient to identify the changes or evaluate any associated risks.

Summary

The provided diff only states: “Added approximately 47 words to the document.” It does not include the actual inserted language or identify where the changes occur.

AI Training and Customer Data

• No determination is possible regarding whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• The diff does not reveal whether it:
• Grants the provider a license to use customer data for AI training;
• Permits use of prompts, inputs, outputs, usage data, or personal information;
• Allows data to be combined with other customers’ data;
• Permits human review or annotation of customer data;
• Limits use to providing the services or allows broader commercial use;
• Requires deletion, anonymization, or retention of data; or
• Provides an opt-out, confidentiality protection, or customer ownership rights.

Other Legal Risks

Because the actual wording is missing, it is also not possible to assess changes concerning:

• Intellectual property ownership or licensing;
• Confidentiality and privacy obligations;
• Data retention and deletion;
• Security requirements;
• Liability, indemnification, or remedies;
• Subprocessors and third-party disclosures;
• Compliance with applicable data-protection laws; or
• Customer termination or post-termination rights.

Required Information

Please provide the actual 47-word addition and, ideally, the surrounding contract language. Without the text of the amendment, no reliable legal comparison or risk assessment can be performed.

Summary of Important Changes

1. New privacy contact and DPO information

• The policy now states that a data privacy manager is responsible for privacy-related questions.
• Users are directed to contact the Data Protection Officer (DPO) at privacy@wttj.co for questions or requests to exercise legal rights.
• The policy continues to identify Otta Technology Ltd, trading as Welcome to the Jungle, and provides its London postal address.
• The policy also lists notifications@welcometothejungle.com as an email contact.

Risk/point to verify: The policy appears to contain multiple email addresses and repeated or awkwardly merged wording. The company should confirm which address is intended for privacy requests and whether the named person or organization satisfies applicable DPO and EU-representative requirements.

2. Changes to complaints and regulatory rights

• The wording changes from saying individuals “have the right” to complain to the ICO at any time, to more explicitly stating that they may make a complaint at any time.
• The policy retains a request that users contact the company first, but this is now framed as an invitation to give the company the opportunity to resolve the issue rather than as a condition of contacting the regulator.
• The policy expressly refers to individuals and data protection supervisory authorities in the EU.

This is generally more legally accurate and reduces the risk that users could interpret contacting the company first as a mandatory prerequisite to complaining to a regulator.

3. EU representative

• The policy now states that the company has an EU data protection representative under Article 27 GDPR.
• The named representative is Maetzler Rechtsanwalts GmbH.

Risk/point to verify: The policy should provide complete and accurate contact details for the Article 27 representative. The diff ends immediately after naming the organization, so it is unclear whether an address or email is included in the final version.

4. AI training and use of customer data

• No changes concerning AI, machine learning, model training, automated decision-making, or use of customer data to train AI models are shown in this diff.
• The amendments appear limited to privacy contacts, complaint procedures, EU regulatory representation, and the policy update date.
• Accordingly, this diff does not create an identifiable new contractual permission to use customer data for AI training. Any such permission would need to be assessed in other sections or versions of the policy.

5. Version date

• The policy now states: “Last updated: 25th September 2025.”

Summary

The provided diff does not include the actual added or deleted contract language. It only states that approximately 47 words were added.

Key Legal Changes

• Cannot be determined: Without the specific wording, it is not possible to assess changes to:
• Customer rights or obligations
• Provider rights or disclaimers
• Fees, termination, liability, confidentiality, or data protection
• Governing law or dispute resolution
• Intellectual property ownership or licensing

AI Training and Data Use

• No conclusion possible: The diff does not reveal whether the added language:
• Permits the provider to use customer data, content, prompts, inputs, or outputs to train or improve AI models
• Applies such use by default or only with customer consent
• Uses data in de-identified, aggregated, or identifiable form
• Allows sharing with affiliates, vendors, or third-party model providers
• Provides an opt-out mechanism
• Retains data after termination or indefinitely
• Grants the provider ownership or broad license rights over customer content

Risk Assessment

The added language should be reviewed for terms such as “train,” “improve,” “develop,” “machine learning,” “artificial intelligence,” “models,” “inputs,” “outputs,” “content,” “de-identified,” “aggregated,” “service improvement,” and “perpetual” or “irrevocable license.”

Any provision allowing customer data to be used for model training could create confidentiality, privacy, intellectual-property, regulatory, and competitive risks—particularly if the permission is broad, applies automatically, lacks an opt-out, or does not limit use to de-identified data.

The actual 47 added words, together with any surrounding provisions, are required for a meaningful legal analysis.

Summary of Important Changes

1. New privacy contact and DPO wording

• The policy now states that the organisation has appointed a data privacy manager responsible for privacy-policy questions.
• It expressly directs users to contact the DPO at privacy@wttj.co for privacy questions and legal-rights requests.
• The policy now includes an email contact listed as notifications@welcometothejungle.com.
• The legal entity and postal address remain identified as Otta Technology Ltd, trading as Welcome to the Jungle, at Unit 1.3, 11–29 Fashion Street, London, E1 6PX, England.

Risk/impact: The updated contact structure may improve clarity, but the policy should ensure that the identified privacy manager, DPO, and email addresses are accurate and operational. The diff also contains repeated and apparently concatenated text, creating a risk of publishing a formatting or drafting error.

2. Complaints and regulatory rights

• The wording changes from saying users “have the right to make a complaint at any time” to more clearly stating that they may make a complaint at any time to the ICO.
• The policy continues to say that the company would appreciate the opportunity to address concerns first, but this is now framed as a preference rather than a condition or limitation on contacting the regulator.
• The reference to EU supervisory authorities has been reorganised and clarified.

Risk/impact: This is generally more rights-preserving and reduces the risk that users could interpret the policy as requiring them to contact the company before contacting a regulator.

3. EU representative

• The policy now expressly states that individuals and EU data-protection supervisory authorities may contact the company’s data protection representative in accordance with Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact: This adds transparency for EU users and regulators. The company should verify that the representative appointment remains valid and that complete contact details are provided where required.

4. AI-model training and data use

• No changes in the supplied diff expressly address artificial intelligence, machine learning, model training, automated model development, or use of customer data for AI training.
• There is no new or removed permission concerning whether customer data, user content, profiles, applications, or other personal data may be used to train or improve AI models.
• Accordingly, this diff does not appear to expand or restrict AI-training rights. Any such terms would need to be reviewed elsewhere in the privacy policy or applicable terms.

5. Policy version

• The policy is updated to version 103, with a stated last-updated date of 25 September 2025.

Key Changes

1. Privacy contact structure revised

• The policy now states that a data privacy manager is responsible for overseeing privacy-related questions.
• References to contacting the company have been reorganized around a DPO email address: privacy@wttj.co.
• The company’s legal name remains Otta Technology Ltd, trading as Welcome to the Jungle, with the same London postal address.
• The previous general contact email, notifications@welcometothejungle.com, appears to be removed or repositioned.

Risk/impact: The policy should clearly distinguish between a “data privacy manager,” a formal Data Protection Officer (DPO), and an EU representative. These roles have different legal responsibilities under the GDPR. Calling someone a DPO may create additional compliance expectations if the person has not been formally appointed under GDPR requirements.

2. Complaints wording strengthened

• Users are now expressly told that they have the “right” to complain to the UK Information Commissioner’s Office (ICO), rather than merely being given the “chance” to do so.
• The policy no longer appears to suggest that users should contact the company before approaching the regulator as a prerequisite. It instead says the company would appreciate the opportunity to address concerns first.
• EU individuals and supervisory authorities retain the ability to contact the relevant regulator.

Risk/impact: This is generally more accurate and user-protective. The company cannot require users to exhaust its internal complaint process before contacting a supervisory authority.

3. EU representative reference added or clarified

• The policy now refers to an appointed data protection representative in accordance with Article 27 GDPR.
• It identifies Maetzler Rechtsanwalts GmbH as the representative.

Risk/impact: This expands or clarifies the company’s GDPR compliance arrangements for individuals in the EU. The representative’s full contact details should be included and kept accurate. The policy should also clearly distinguish the EU representative from the DPO and the UK privacy contact.

4. Formatting and drafting concerns

• The diff contains substantial duplicated and interleaved wording, including repeated contact details and complaint language.
• The resulting policy could be difficult to read or may contain grammatical inconsistencies if the changes are implemented literally.
• The final version is updated to 25 September 2025 and labeled v.103.Last.

AI Training and Model Use

No changes relating to the use of customer data to train AI models are visible in this diff. There is no new or amended language addressing:

• Training, fine-tuning, or improving AI models;
• Use of customer content, prompts, profiles, or personal data for AI development;
• Sharing data with AI vendors;
• Opt-out or objection rights;
• De-identification, retention, or deletion of data used for training.

Accordingly, this diff does not appear to create a new AI-training authorization or change an existing one.

Summary

The provided diff states only:

> “Added approximately 47 words to the document”

It does not include the actual added language, nor any deleted or replaced terms. As a result, the legal effect of the amendment cannot be assessed.

Key Legal Changes

• Not determinable: The specific contractual provisions changed are not shown.
• Rights and obligations: It is not possible to determine whether the amendment changes either party’s rights, duties, liability, confidentiality obligations, or termination rights.
• Commercial impact: No assessment can be made regarding fees, service scope, warranties, indemnities, intellectual-property ownership, or data-security obligations.

Customer Data and AI Training

The diff does not reveal whether customer data may be:

• Used to train, fine-tune, or improve artificial-intelligence or machine-learning models;
• Used to create generalized or derived datasets;
• Shared with model providers, affiliates, subprocessors, or other third parties;
• Retained after termination for model training or evaluation;
• Subject to opt-out, consent, deletion, or anonymization rights; or
• Excluded from training while still being used for service operation, monitoring, analytics, or abuse prevention.

Accordingly, no conclusion can be reached about whether the amendment introduces or expands AI-training rights. The added 47 words could potentially be significant, particularly if they modify data-use permissions, license rights, confidentiality, or the definition of “Customer Data,” but the actual text is required to evaluate those risks.

Required for Further Review

Please provide the actual redlined language, including the 47 added words and any surrounding provisions. Particular attention should be given to terms such as “train,” “improve,” “develop,” “models,” “machine learning,” “aggregated data,” “de-identified data,” “service data,” and “customer data.”

Summary of Important Changes

1. Privacy contact and governance details updated

• The policy now states that the organisation has appointed a data privacy manager/DPO responsible for privacy-policy questions and legal-rights requests.
• A dedicated privacy email address, privacy@wttj.co, is introduced as the contact for these matters.
• The previous general contact address, notifications@welcometothejungle.com, is moved into the general contact details section rather than being the primary privacy-rights contact.
• The legal entity and postal address remain identified as Otta Technology Ltd, trading as Welcome to the Jungle.

Risk/impact: Customers may now be expected to direct data-protection requests to a different email address. The company should ensure both addresses are monitored and that the named DPO/data privacy manager is formally appointed and able to handle statutory requests.

2. EU representative information added

• The policy now says that individuals and data-protection supervisory authorities in the EU may contact the company’s appointed data-protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact: This is a significant compliance clarification for EU users. The company should ensure the representative’s appointment, contact details, and scope are accurate and current. The excerpt appears incomplete after “in accordance with Article 27 GDPR,” so the final published wording should be checked.

3. Complaint wording changed

• Users are now expressly told that they have the right to make a complaint at any time to the UK Information Commissioner’s Office (ICO).
• The prior wording said the company would appreciate the opportunity to resolve concerns first and referred to dealing with concerns before approaching the ICO.
• The revised wording still asks users to contact the company first but no longer frames this as a prerequisite to contacting the regulator.

Risk/impact: This is clearer and less likely to improperly discourage complaints to the ICO or EU supervisory authorities.

4. Version information updated

• The policy version changes from v.103 to v.103.Last.
• The update date is added as 25 September 2025.

AI Training and Use of Customer Data

• No changes concerning AI, machine-learning models, model training, profiling, or use of customer data to train AI systems are shown in this diff.
• The excerpt does not add or remove any permission to use customer data, prompts, CVs, applications, communications, or other content for AI training.
• Any AI-training rights would need to be reviewed in other sections of the privacy policy or related terms.

Summary

The provided diff only states:

> “Added approximately 47 words to the document”

It does not include the actual added, deleted, or replaced legal language. As a result, the substantive contractual changes cannot be analyzed.

AI Training and Data Use

• No language is provided showing whether customer data may be:
• Used to train, fine-tune, or improve AI models;
• Used to develop products or services;
• Shared with model providers or other third parties;
• Retained after termination;
• Combined with other customers’ data; or
• Subject to anonymization, aggregation, or de-identification.

Accordingly, it is not possible to determine whether the contract creates any new risk concerning AI training or secondary use of customer data.

Risk Assessment

• Current assessment: Indeterminate due to insufficient text.
• The statement that approximately 47 words were added does not reveal the scope, meaning, or legal effect of those additions.
• Even a short addition could materially change:
• Data ownership and licensing rights;
• Confidentiality obligations;
• Privacy compliance responsibilities;
• Permitted uses of customer content;
• Service-provider rights to retain or disclose data; or
• Liability and indemnification obligations.

Required Information

To complete the analysis, provide the actual diff using the specified notation:

• Additions: {new language}
• Deletions: [removed language]
• Replacements: [old language]{new language}

Summary of Important Changes

1. Privacy contact structure revised

The section identifying privacy contacts has been substantially reorganized:

• The policy now states that the company has appointed a data privacy manager responsible for privacy-policy questions.
• It directs users to contact the company’s DPO at privacy@wttj.co for questions and legal-rights requests.
• The previous general contact address, notifications@welcometothejungle.com, appears to have been removed from this section.
• The company’s legal name and postal address remain identified as Otta Technology Ltd, trading as Welcome to the Jungle, with the same London address.

Potential risk

The revised wording may create uncertainty about the relationship between the “data privacy manager” and the “DPO.” It should be clear whether these are the same person or separate roles, and whether privacy@wttj.co is the official DPO contact for all applicable jurisdictions.

2. Complaints wording changed

The policy now says individuals have the “right” to complain to the Information Commissioner’s Office (ICO), replacing wording that said the company would appreciate the opportunity to address concerns first.

The policy continues to identify the ICO and its website. The revised wording also states that individuals may complain at any time, while still asking them to contact the company first where appropriate.

Effect

This is generally a clarification of individuals’ statutory rights rather than a material restriction. It removes any possible implication that users must contact the company before approaching the regulator.

3. EU representative added

The policy now states that EU individuals and supervisory authorities may contact the company’s appointed data protection representative under Article 27 GDPR:

• Maetzler Rechtsanwalts GmbH

The change appears intended to address the company’s GDPR representative obligations for activities involving individuals in the EU.

Potential risk

The excerpt does not provide the representative’s full contact details. If those details are absent from the final policy, the Article 27 notice may be incomplete or difficult for EU individuals and regulators to use.

4. AI-model training and customer data

No changes relating to AI, machine learning, automated model training, or use of customer data to train AI models are shown in this diff.

The diff does not add or remove language concerning:

• training or improving AI models;
• using customer content, profiles, communications, or other personal data for training;
• human review or model development;
• opting out of AI training; or
• sharing data with AI providers.

5. Administrative update

The policy version remains v.103, with a new update date of 25 September 2025.

Summary

The provided diff only states that approximately 47 words were added; it does not include the actual added language.

Legal and Commercial Impact

• The specific legal effect of the amendment cannot be determined without seeing the 47 added words.
• It is not possible to assess whether the addition changes:
• Customer obligations or provider rights
• Liability, indemnification, warranties, or termination rights
• Confidentiality or data-security requirements
• Ownership or licensing of customer data
• Regulatory compliance obligations
• Use of data for analytics, product improvement, or artificial-intelligence purposes

AI Training and Data Use

The diff does not provide enough text to determine whether customer data may be:

• Used to train, fine-tune, or evaluate AI or machine-learning models
• Combined with other customers’ data
• De-identified, anonymized, or pseudonymized before use
• Retained after termination
• Shared with affiliates, vendors, or AI providers
• Used to create derived data, models, outputs, or other commercial products
• Excluded from model training unless the customer opts in or opts out

These issues can materially affect confidentiality, intellectual-property ownership, privacy compliance, and the customer’s control over its data.

Recommended Next Step

Provide the actual 47-word addition, together with any surrounding clause if necessary. The language should then be reviewed for changes to data-use permissions, AI-model training rights, retention, deletion, confidentiality, ownership, and customer approval or opt-out rights.

Summary

The provided diff contains only the statement:

> “Added approximately 47 words to the document”

It does not include the actual 47 words or identify where they were added. As a result, no reliable legal analysis can be performed.

Key Findings

• Substantive changes: Cannot be determined from the information provided.
• Customer data use: No change concerning customer data is shown.
• AI model training: No provision is provided indicating whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• New risks: Cannot be assessed without the added language and its surrounding contract provisions.

Information Needed

Please provide the actual additions and, ideally, the surrounding section or the complete marked-up clause. The analysis should specifically examine whether the new language:

• Permits use of customer data for AI training or model improvement;
• Applies to personal data, confidential information, prompts, outputs, or usage data;
• Allows human review or sharing with affiliates, vendors, or third parties;
• Requires anonymization, aggregation, consent, or opt-out rights;
• Grants the provider ownership or broad usage rights;
• Creates data-retention, deletion, security, or confidentiality exceptions; and
• Conflicts with existing privacy, confidentiality, or data-processing obligations.

Summary of Important Changes

1. New privacy contact and DPO language

• The policy now states that the company has appointed a data privacy manager responsible for privacy-policy questions.
• It replaces the general instruction to contact the company with a specific Data Protection Officer (DPO) contact:
• privacy@wttj.co
• The previous contact email, notifications@welcometothejungle.com, is removed from the contact section.
• The company’s legal name and postal address remain substantially unchanged.

Risk / impact:

The policy may now represent that a formal DPO or equivalent privacy officer has been appointed. If the individual is not formally designated as a DPO, or if the role does not satisfy applicable GDPR requirements, this could create compliance and accountability issues. The change also creates a risk that privacy requests sent to the former email address may not be properly routed.

2. Changes to complaints wording

• The policy now expressly says individuals may contact the ICO “at any time” and exercise their legal rights.
• The prior wording asked individuals to contact the company first before approaching the ICO.
• The revised text still says the company would appreciate the opportunity to address concerns first, but no longer presents this as a prerequisite.

Risk / impact:

This is a clarification in favor of users’ statutory rights and is less likely to be interpreted as improperly restricting complaints to the regulator.

3. EU representative language added

• The policy now refers to EU individuals and supervisory authorities being able to contact the company’s appointed data protection representative under Article 27 GDPR.
• The named representative is:
• Maetzler Rechtsanwalts GmbH

Risk / impact:

This increases transparency for EU data subjects and may indicate that the company is acknowledging GDPR Article 27 obligations. The representative’s contact details are not fully provided in the visible diff, which may make the notice incomplete or less useful in practice.

4. Administrative update

• The version is updated from v.103 to v.103.Last.
• The policy now states it was last updated on 25 September 2025.

5. AI-model training and data use

• No changes concerning the use of customer or personal data to train AI models are shown in this diff.
• The diff does not add or remove language about:
• training, fine-tuning, or improving AI models;
• sharing data with AI providers;
• using customer content, prompts, profiles, or communications for model training; or
• opting out of AI training.

Conclusion: The changes appear limited to privacy contacts, complaint procedures, EU representation, and versioning.

Summary

The supplied diff does not include the actual revised contractual language. It only states:

> “Added approximately 47 words to the document”

Accordingly, it is not possible to determine:

• What provisions were added, deleted, or replaced;
• Whether the changes alter the parties’ rights or obligations;
• Whether liability, confidentiality, security, intellectual property, or termination terms changed; or
• Whether the customer’s data may now be used to train, fine-tune, evaluate, or otherwise improve AI models.

AI Training and Data-Use Risk

No substantive language addressing AI-model training or customer-data use appears in the supplied diff. Therefore, no conclusion can be reached about whether the amendment:

• Authorizes training on customer content;
• Permits use of customer data for generalized or shared models;
• Allows retention of prompts, outputs, or uploaded data;
• Uses data in de-identified, aggregated, or identifiable form;
• Gives the customer an opt-out or consent right; or
• Restricts use to providing the contracted services.

Information Needed

Please provide the actual text showing the additions, deletions, and replacements—for example:

• Added text in {braces};
• Deleted text in [brackets]; and
• Replacements using [{old text}]{new text} or the specified format.

Without the substantive wording, there are no legal changes that can reliably be analyzed.

Summary of Important Changes

1. Privacy contact and governance details updated

• The policy now states that Welcome to the Jungle has appointed a data privacy manager responsible for privacy-policy questions.
• It identifies a Data Protection Officer (DPO) contact email: privacy@wttj.co.
• The general contact details have been reorganized, including:
• Legal entity: Otta Technology Ltd, trading as Welcome to the Jungle
• Email address: notifications@welcometothejungle.com
• Postal address: Welcome to the Jungle, Unit 1.3, 11–29 Fashion Street, London, E1 6PX, England.
• The wording now expressly refers to contacting the DPO for questions and requests to exercise legal rights.

Risk/impact: The changes clarify who customers should contact, but the policy should ensure that the different email addresses have clearly defined purposes. Otherwise, rights requests or complaints could be sent to the wrong address or experience delay.

2. Complaints procedure revised

• The previous wording said customers had the right to complain to the ICO but that the company would appreciate the opportunity to address concerns first.
• The revised wording states that individuals may complain at any time to the ICO and describes the ICO as the UK data-protection regulator.
• The “chance to deal with your concerns first” language has been repositioned and softened, making clear that contacting the company first is encouraged but not a precondition to contacting the regulator.

Risk/impact: This is generally more protective of customer rights and reduces the risk that the policy could be read as restricting regulatory complaints.

3. EU representation clarified

• The policy now states that individuals and supervisory authorities in the EU may contact the company’s data-protection representative under Article 27 GDPR.
• The named representative is Maetzler Rechtsanwalts GmbH.

Risk/impact: This provides an EU contact route for GDPR matters. The final published policy should verify that the representative’s full contact details are included and that the Article 27 wording is complete and accurate.

4. Administrative update

• The policy version has been changed from v.103 to v.103.Last.
• The “last updated” date is now 25 September 2025.

5. AI-model training

• No provision in the supplied diff adds, removes, or changes permission to use customer data to train AI models.
• The diff contains no new language concerning artificial intelligence, machine learning, model training, model improvement, prompts, outputs, or use of customer content for such purposes.

Conclusion: Based solely on this diff, there is no identifiable change to AI-training rights or data-use permissions.

Summary

The provided diff does not include the actual contractual language that was added, deleted, or replaced. It only states:

> “Added approximately 47 words to the document”

Accordingly, it is not possible to determine the legal effect of the changes.

AI Training and Customer Data

• No substantive language concerning customer data, artificial intelligence, machine learning, model training, or related rights is included in the diff.
• Therefore, it is not possible to assess whether the changes:
• Permit or restrict use of customer data to train AI models;
• Allow use of customer data for product improvement, analytics, or model development;
• Grant the provider ownership or a license to customer data, inputs, outputs, or derived data;
• Permit retention, anonymization, aggregation, or disclosure of customer data;
• Apply confidentiality, security, deletion, or opt-out obligations to AI-related processing; or
• Shift responsibility for obtaining consents or handling personal data to the customer.

Legal Risks

The principal risk is lack of visibility into the amended language. A 47-word addition could materially change the parties’ rights and obligations, particularly if it concerns:

• Data ownership or licensing;
• Authorization to use customer content or prompts;
• AI model training or fine-tuning;
• Use of de-identified, aggregated, or derived data;
• Disclosure to affiliates, vendors, or subprocessors; or
• Customer indemnities and regulatory compliance responsibilities.

Required Information

To perform a meaningful legal analysis, provide the actual redline text showing the 47 added words, together with any deleted or replacement language.

Summary of Important Changes

1. Data protection contact arrangements

• The policy now states that a data privacy manager/DPO has been appointed to oversee privacy questions and legal-rights requests.
• A new contact email is provided: privacy@wttj.co.
• The previous version identified notifications@welcometothejungle.com as the company’s email address. The revised wording appears to retain this address for general contact details but directs privacy enquiries to the DPO email.
• For EU individuals and supervisory authorities, the policy now identifies an EU data protection representative under Article 27 GDPR: Maetzler Rechtsanwalts GmbH.

Risk: The diff contains repeated and poorly concatenated wording, including duplicated contact details and references to both the DPO and privacy manager. The final published version should clearly identify whether the individual is a formal GDPR Data Protection Officer, a privacy manager, or both, and distinguish the DPO’s role from the EU representative’s role.

2. Complaints and regulatory rights

• The wording has been changed from saying individuals have the right to complain to the ICO “at any time” and encouraging them to contact the company first, to expressly stating that individuals may make a complaint at any time to the ICO.
• The policy now refers more generally to “data protection issues” rather than “data protection supervisory authorities in the UK.”
• The wording that the company would “appreciate the chance to deal with your concerns before you approach the ICO” has been retained in revised form.

Risk: The revised text is clearer that contacting the company first is not a prerequisite to complaining to the ICO. However, the duplicated text and unusual sequencing could create ambiguity if not corrected.

3. Company and contact details

• The legal entity remains Otta Technology Ltd, trading as Welcome to the Jungle.
• The postal address remains the London address shown in the previous policy.
• The opening wording has been corrected from “Welcome to Welcome to the Jungle” to “Welcome to the Jungle’s.”

4. AI training and use of customer data

• No changes relating to AI, machine learning, model training, automated decision-making, or use of customer data to train AI models are shown in this diff.
• The diff does not add or remove any permission to use personal data, user content, applications, profiles, or other customer data for training, fine-tuning, evaluating, or improving AI models.

5. Versioning

• The policy is now marked v.103 and states: Last updated: 25 September 2025.

Overall risk: The substantive changes mainly concern privacy contacts, complaints, and EU representation. The primary practical risk is that formatting and duplication errors could make the published policy unclear or misleading.

Summary of Important Changes

1. Privacy contact and governance changes

• The policy now states that a data privacy manager has been appointed to oversee privacy-related questions.
• The prior description of the company’s contact details has been reorganized. The company remains identified as Otta Technology Ltd, trading as Welcome to the Jungle, with the same London postal address.
• A new or more prominently stated contact email appears: privacy@wttj.co.
• The policy now refers to a DPO when asking individuals to contact the company about exercising legal rights. This may create ambiguity because the text separately refers to a “data privacy manager.” The company should ensure these roles are accurately described and legally consistent.

2. Complaints and supervisory authorities

• The policy more clearly states that individuals have the right to complain at any time to the UK Information Commissioner’s Office (ICO).
• The previous wording said the company would appreciate the opportunity to address concerns before an ICO complaint. This has been replaced with wording that emphasizes the individual’s legal right to complain, while still inviting them to contact the company first.
• The reference to EU supervisory authorities has been reorganized. The policy now says that individuals and EU data protection authorities may contact:
• The company’s appointed data protection contact at privacy@wttj.co; and
• An EU data protection representative under Article 27 GDPR, identified as Maetzler Rechtsanwalts GmbH.
• This is potentially significant for EU users because it provides a named EU representative and may make exercising GDPR rights easier. The company should verify that the representative appointment and contact details are current and complete.

3. Administrative and drafting changes

• The policy’s version reference has been changed from “v.103.” to “v.103.Last”.
• A new update date has been added: 25 September 2025.
• The diff contains substantial repeated and apparently malformed text, including duplicated contact details and repeated references to the ICO and EU representative. If this reflects the published policy rather than only the diff format, it could reduce clarity and create uncertainty about the correct contact route.

4. AI-model training and data use

• No changes concerning the use of customer or user data to train AI models are visible in this diff.
• The amendment does not add or remove language authorizing AI training, model development, automated decision-making, profiling, or sharing data with AI providers.
• Any AI-training terms may exist elsewhere in the privacy policy and should be reviewed separately; this diff alone does not establish any new AI-related permission or restriction.

Summary

The supplied diff does not include the actual amended contract language. It only states:

> “Added approximately 47 words to the document”

Accordingly, it is not possible to determine:

• What provisions were added, deleted, or replaced;
• Whether the changes affect customer rights, obligations, liability, confidentiality, or termination;
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether data may be shared with affiliates, vendors, or model providers;
• Whether customer data is de-identified, aggregated, retained, or transferred internationally; or
• Whether the customer has any opt-out, deletion, audit, or usage restrictions.

AI-Training Risk Assessment

No specific AI-related change can be identified from the information provided. The statement that approximately 47 words were added does not reveal whether those words:

• Authorize training or improvement of artificial-intelligence or machine-learning models;
• Permit use of customer prompts, inputs, outputs, files, or metadata for model development;
• Expand an existing “service improvement” or “analytics” permission;
• Allow human review or access to customer data;
• Permit retention of data after account termination; or
• Apply different rules to personal data, confidential information, or regulated data.

Required Information

A reliable legal analysis requires the actual redline, including the text shown with {additions}, [deletions], and []{replacements}. The full surrounding clause should also be provided because the legal effect of a 47-word addition depends on definitions, exceptions, and related provisions elsewhere in the agreement.

Summary

The provided diff only states that approximately 47 words were added; it does not include the actual added language or identify where the changes appear.

Key Legal Changes

• Cannot be determined: The substance of the additions is unavailable.
• No deletion or replacement language is shown.
• No reliable assessment can be made regarding changes to liability, confidentiality, intellectual property, security, data ownership, termination, or other legal terms.

AI Training and Customer Data

The diff does not provide enough information to determine whether:

• Customer data may be used to train, fine-tune, or improve AI models;
• Customer prompts, outputs, files, or personal information may be used for model development;
• Data is used only in aggregated, anonymized, or de-identified form;
• The customer can opt out of AI training or request deletion of training data;
• Data may be shared with affiliates, vendors, or third-party model providers;
• The provider obtains rights to retain or reuse customer content beyond providing the services; or
• Any restrictions, security commitments, or confidentiality obligations apply to AI-related processing.

Risk Assessment

Because the actual 47 added words are missing, it is not possible to identify new legal risks or determine whether the amendment expands the provider’s rights to use customer data. In particular, any conclusion about AI training would be speculative.

Please provide the full redlined text, including the words enclosed in {}, [], and []{}, for a substantive analysis.

Key Changes

1. Privacy contact and governance details changed

• The policy now states that a data privacy manager has been appointed to oversee privacy questions.
• It directs privacy questions and legal-rights requests to the DPO at privacy@wttj.co.
• The previous wording identified the company’s postal address and invited users to contact the company before approaching the regulator. The revised wording more clearly states that individuals have the right to complain directly to the ICO.
• The former general contact email, notifications@welcometothejungle.com, appears to have been removed from the initial contact-details section.
• The policy retains the company’s legal entity and postal address: Otta Technology Ltd, trading as Welcome to the Jungle.

2. Complaints and regulator wording revised

• The wording changes from encouraging users to resolve concerns with the company first to confirming that users have the right to complain at any time to the ICO.
• The revised text clarifies that EU individuals and supervisory authorities may contact the UK ICO regarding data-protection issues.
• Potential risk: The policy uses several different role descriptions—“data privacy manager,” “DPO,” and “data protection representative.” These roles have different legal meanings under UK GDPR and EU GDPR. The company should ensure that:
• the named person or entity actually has the stated role;
• the DPO contact details are accurate; and
• the EU representative’s details are complete and legally sufficient.

3. EU representative added or clarified

• The policy now states that EU individuals and supervisory authorities may contact the company’s data protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.
• Potential risk: The excerpt does not provide a full postal address or email address for the representative. If the company is subject to Article 27 GDPR, incomplete representative contact details may create transparency and compliance issues.

4. AI-model training and use of customer data

• No express change concerning AI, machine learning, model training, or use of customer data to train AI models is visible in this diff.
• The supplied changes concern privacy contacts, complaint rights, and EU representation. They do not add or remove a stated legal basis, purpose, permission, opt-out, retention rule, or disclosure relating to AI training.
• This conclusion is limited to the text provided; a separate AI/data-use clause elsewhere in the policy may still have changed outside this excerpt.

5. Version information

• The version reference changes from v.103 to v.103.Last.
• A new update date is added: 25 September 2025.
• The unusual version label should be checked for accuracy and consistency with the company’s document-control process.

Summary of Important Changes

1. Privacy contact and governance updates

• The policy now states that a data privacy manager is responsible for overseeing privacy questions.
• Users are directed to contact the Data Protection Officer (DPO) at privacy@wttj.co for privacy questions and legal-rights requests.
• Contact details have been reorganized and the company’s legal identity remains Otta Technology Ltd, trading as Welcome to the Jungle, with the same London postal address.
• The general contact email appears to change from notifications@welcometothejungle.com to privacy@wttj.co for privacy-related matters.

Risk/impact: The new wording may create ambiguity about whether the named privacy manager, DPO, and EU representative are different roles or persons. The policy should clearly identify each role and provide complete, accurate contact details.

2. Complaints and supervisory-authority wording

• The policy now expressly says individuals may contact the ICO at any time and describes this as a legal right.
• The previous language asked users to contact the company first and described contacting the ICO as something the company would “appreciate.” That softer wording has been removed or replaced.
• The policy continues to identify the ICO as the relevant UK supervisory authority and provides its website.

Risk/impact: This is generally more user-protective and legally accurate. It removes any suggestion that users must exhaust the company’s internal process before complaining to a regulator.

3. EU representative

• The revised wording states that individuals and supervisory authorities in the EU may contact the company’s appointed data protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact: Naming an EU representative may increase transparency and support GDPR compliance for EU-based individuals. The policy should ensure the representative’s full contact details are included and remain current.

4. AI-model training and data use

• No changes relating to AI, machine learning, model training, automated decision-making, or the use of customer data to train AI models are shown in this diff.
• The diff does not add or remove any express permission to use personal data, user content, CVs, communications, or other customer information for AI training.

Important limitation: This conclusion is limited to the text provided. It does not confirm that the wider privacy policy contains no AI-training provision.

5. Administrative update

• The policy version remains v.103, with a new statement that it was last updated on 25 September 2025.

Overall assessment: The changes primarily improve privacy-contact information, clarify complaint rights, and add an EU GDPR representative. No AI-training-related change is apparent.

Summary

The diff does not include the actual added or deleted legal language. It only states:

> “Added approximately 47 words to the document”

Accordingly, it is not possible to determine the legal effect of the change or identify whether it affects customer data, AI model training, confidentiality, ownership, or permitted uses.

AI Training and Customer Data

No specific language is provided addressing:

• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether prompts, inputs, outputs, or usage data may be retained;
• Whether data is anonymized, aggregated, or de-identified before use;
• Whether customer data may be shared with affiliates, vendors, or third-party model providers;
• Whether the customer can opt out of AI training or revoke consent;
• Whether the provider obtains rights to use customer data after termination; or
• Whether the provider may use customer data to develop products or services for other customers.

Therefore, no conclusion can be reached about changes to AI-training rights or related risks.

Risk Assessment

The supplied diff is incomplete and does not permit a meaningful contract review. A proper analysis requires the exact text of the 47 added words and, if applicable, the surrounding unchanged provisions. The legal impact may depend heavily on definitions such as “Customer Data,” “Usage Data,” “Service Data,” “Content,” “improve,” “train,” and “de-identified.”

Information Needed

Please provide the actual redlined language, using the stated notation—for example:

• Additions: {new language}
• Deletions: [deleted language]
• Replacements: [old language]{new language}

Without that text, any assessment of new obligations, permissions, or AI-training risks would be speculative.

Summary

The diff does not include the actual contractual language that was added, deleted, or replaced. It only states:

> “Added approximately 47 words to the document”

Accordingly, no reliable legal analysis can be performed.

AI Training and Customer Data

• The provided diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• It does not show whether any new rights were granted to the provider to:
• Use customer content or prompts for model training;
• Retain or reuse inputs and outputs;
• Create aggregated, anonymized, or derived data;
• Permit subcontractors or third-party AI providers to access customer data; or
• Use data after termination of the agreement.
• It also does not reveal whether any restrictions, opt-out rights, confidentiality obligations, deletion requirements, or security protections were added.

Other Legal Risks

Because the underlying 47 words are missing, it is not possible to assess changes concerning:

• Ownership or licensing of customer data;
• Confidentiality and permitted disclosures;
• Data retention and deletion;
• Privacy-law compliance;
• Intellectual-property rights in AI outputs;
• Indemnification or liability allocation;
• Service-provider or subprocesser access; or
• Termination rights and post-termination obligations.

Conclusion

Please provide the actual added, deleted, and replacement text—for example, using {added text}, [deleted text], and []{replacement text}—to permit a meaningful analysis of the legal and AI-training implications.

Summary of Important Changes

1. Privacy contact and complaints process

• The policy now states that the company has appointed a data privacy manager/DPO responsible for privacy questions.
• A dedicated privacy email address is added: privacy@wttj.co.
• The previous general contact email, notifications@welcometothejungle.com, is moved into the contact-details section and appears no longer to be the primary privacy contact.
• The wording changes from asking individuals to contact the company before approaching the regulator to expressly confirming that individuals have the right to complain at any time to the ICO.
• The policy continues to identify the UK Information Commissioner’s Office as the relevant UK supervisory authority.

Risk/impact: This is generally more accurate and user-friendly, and avoids suggesting that contacting the company first is a precondition to making a regulatory complaint. The policy should ensure that the listed privacy email is monitored and that the named privacy contact has appropriate authority.

2. EU GDPR representation

• The revised wording states that EU individuals and supervisory authorities may contact the company’s data protection representative in accordance with Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact: This is a significant compliance clarification for EU data subjects if the company is subject to Article 27 GDPR. The company should verify that the representative’s full contact details are provided where required and that the appointment remains valid. The extract appears incomplete, ending immediately after naming the representative.

3. Company and address information

• The legal entity remains Otta Technology Ltd, trading as Welcome to the Jungle.
• The postal address remains Unit 1.3, 11–29 Fashion Street, London, E1 6PX, England.
• The policy’s introductory wording is reformatted and corrected, including removal of an apparent duplicated “Welcome to.”

4. AI training and use of customer data

• No provisions in the supplied diff expressly change how customer or personal data is used to train AI models.
• There is no new language authorising, restricting, or explaining the use of customer data, user content, profiles, applications, or other personal information for:
• training or fine-tuning AI models;
• testing or evaluating AI systems;
• sharing data with AI providers; or
• retaining data for model-development purposes.

Risk/impact: Based solely on this diff, there is no identifiable new AI-training permission or restriction. Any such terms may exist elsewhere in the privacy policy, terms of service, or a separate AI/data-processing notice and should be reviewed separately.

5. Version update

• The policy is updated from v.103 to v.103.Last.
• An update date of 25 September 2025 is added.

Summary

The provided diff does not include the actual added language. It only states:

> “Added approximately 47 words to the document”

Accordingly, it is not possible to determine:

• What contractual terms changed;
• Whether customer data may be used for AI or machine-learning training;
• Whether any new rights, restrictions, or obligations were added;
• Whether confidentiality, ownership, licensing, privacy, or security terms changed; or
• Whether the amendment creates new legal or commercial risks.

AI Training Analysis

No conclusion can be reached regarding AI-model training because the 47 added words are not provided. In particular, the missing text could potentially address:

• Use of customer data, prompts, outputs, or content to train or improve models;
• Whether use is automatic or requires customer consent;
• Whether data is anonymized, aggregated, or retained;
• Whether the provider may share data with affiliates or third-party AI vendors;
• Whether the customer owns resulting models, outputs, or improvements; and
• Whether the customer may opt out of training-related use.

Information Needed

Please provide the full redlined language, including the 47 added words and any surrounding provision. Once supplied, the changes can be analyzed for legal effect, including data-use permissions, AI-training rights, confidentiality implications, and newly introduced customer risks.

Summary of Important Changes

1. New privacy contact and data privacy manager

• The policy now states that Welcome to the Jungle has appointed a data privacy manager responsible for privacy-policy questions and legal-rights requests.
• Users are directed to contact the DPO at privacy@wttj.co.
• The previous wording identified the legal entity and postal address first and referred users to the ICO. Those details remain, but the contact information has been reorganized.
• The policy now also provides an email address for general contact: notifications@welcometothejungle.com.

Risk/impact: The new wording may create uncertainty about which email address should be used for privacy requests, particularly because both privacy@wttj.co and notifications@welcometothejungle.com appear in the revised contact section. The company should ensure the addresses are accurate, monitored, and clearly allocated to specific purposes.

2. Revised complaints and regulatory-rights wording

• The policy now expressly states that individuals may:
• Ask questions about the policy;
• Exercise their legal data-protection rights; and
• Complain to the ICO at any time.
• The previous wording asked individuals to contact the company first before approaching the ICO. This has been replaced with language confirming that making an ICO complaint is a right, while retaining a request that users contact the company first.
• The policy now refers to the ICO as the UK regulator for data-protection issues, rather than “data protection issues” in the previous formulation.

Risk/impact: This is generally more rights-protective and reduces the risk that the policy could be read as requiring users to exhaust the company’s internal process before contacting the regulator.

3. EU representative

• The revised text states that individuals and supervisory authorities in the EU may contact the company’s data-protection representative under Article 27 GDPR.
• The representative is identified as Maetzler Rechtsanwalts GmbH.

Risk/impact: Naming an EU representative improves transparency and may support GDPR compliance where Article 27 applies. The company should verify that the representative’s full contact details are provided elsewhere or added to this section.

4. AI-model training and customer data

• No changes in the supplied diff address AI, machine learning, model training, automated decision-making, or the use of customer data to train AI models.
• Accordingly, this diff does not appear to introduce, remove, or expand any permission to use customer data for AI training.

5. Administrative update

• The policy version changes from v.103 to v.103.Last.
• An update date of 25 September 2025 has been added.