Last updated: TODO: set the real date once published
Who is responsible
AI Private Limited is the data controller for the information described here. Our company number and registered office will appear here once they are set out in this notice.
The easiest way to reach us about anything in this notice is by email to [email protected].
What we collect from the enquiry form
When you send an enquiry we collect your name, email address, and any company name, phone number, budget indication and message you choose to include. Every field except name, email and message is optional, and the form is usable without the optional ones.
We also record the page you submitted from and the date and time, so we can tell which pages lead to work and respond in the right order.
We do not ask for, and would rather you did not send, special category data, meaning information about health, beliefs, sexual orientation, criminal records or similar. If your message contains it, we treat it under the same safeguards but we will delete it once it is no longer needed for the enquiry.
Why we hold it and what allows us to
We use enquiry information for one purpose: to reply to you and, if you want, to discuss or deliver work. The lawful basis is our legitimate interest in responding to people who have contacted us about our services, and the steps you ask us to take before entering a contract.
We do not add you to a marketing list from an enquiry, and we do not sell or share your details with anyone who is not helping us answer you.
How long we keep it
Enquiries that become clients: for the life of the engagement and then six years, because that is the limitation period for contract claims in England and Wales.
Enquiries that do not become clients: twelve months from our last exchange, then deleted. That window exists so we can pick up a conversation you restart, and no longer.
TODO: confirm these periods against your accountant's records requirements and update this section.
Who else sees it
Enquiries are stored in our own database on servers we control, and emailed to us so nothing depends on one system being available. Our hosting provider, email provider and accountant may each have limited access to the systems that hold this data; none of them are given it for their own use.
TODO: name the specific hosting and email providers and their data processing agreements before launch.
Where we use an AI service in answering you, we do not put your personal information into a model that trains on input, and we record which service was used.
Cookies and analytics
This site does not set advertising or cross-site tracking cookies. We measure traffic with privacy-focused analytics that records page, referrer, country and a coarse screen size, without a persistent identifier and without a cookie on your device.
A strictly necessary cookie is used only when you sign in to a client area, and it lasts only for that session.
International transfers
We aim to keep personal data in the UK or EEA. Where a processor outside that area is involved, we rely on the UK Addendum to the EU standard contractual clauses or on the UK's adequacy regulations, and we list those processors above.
Your rights
You can ask for a copy of what we hold about you, correction of anything wrong, deletion, restriction of processing, or the data in a portable form. You can also withdraw a consent you have given, and object to processing based on legitimate interests.
Write to [email protected] and we will respond within one month. There is no charge for a reasonable request.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, and you do not have to come to us first.
Children
This site and our services are for businesses. We do not intend to collect information from anyone under 18.