Privacy Notice

The AI Consultancy (London) Ltd (“The AI Consultancy”, “we”, “our”, “us”) is the data controller for personal data collected through theaiconsultancy.ai. We are registered in England and Wales and based at 20 Wenlock Road, London, N1 7GU. This notice explains what personal data we collect, how we use it, the lawful basis for processing, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

We collect the personal data you submit to us through the contact form, the AI ROI calculator report download, or by emailing us directly. This typically includes your name, email address, company name, phone number (where supplied), and the content of your enquiry. Please do not include health information or other special category data in a general enquiry.

Our web hosting provider (Vercel) records standard server logs including IP address, user agent, and request URL for the purpose of security, abuse prevention, and platform reliability. These logs are retained by Vercel for a short, rolling period in line with their published terms.

How we use it

We use the personal data you submit to respond to your enquiry, arrange a discovery call, deliver the materials you have requested (such as a downloadable AI Opportunity Report), and follow up with related information about our services where you would reasonably expect us to do so. We do not sell or rent personal data to any third party.

Email delivery

Outbound transactional email (such as form submission notifications and report deliveries) is sent through Resend, a third-party email delivery service. Resend processes the relevant message metadata and content on our behalf as a data processor under a written data processing agreement.

Who processes your data

• Vercel provides website hosting and runs the form-processing endpoints.
• Upstash Redis, accessed through Vercel KV, stores pending ROI-calculator submissions, including contact details, calculator inputs and the submission IP address, for up to 48 hours. It also holds rate-limit records based on IP addresses and recipient email addresses to prevent abuse.
• Resend delivers enquiry notifications, confirmation messages and requested reports, and holds the newsletter mailing list.
• ElevenLabs provides the voice and chat assistant. If you start a conversation, the audio or text you provide is processed through that service. Avoid sharing confidential or sensitive personal information.
• Google provides the analytics service described below.

International processing

These suppliers operate internationally and may process personal data outside the UK, including in the United States. Their published data processing terms describe transfer safeguards, including standard contractual clauses and the UK International Data Transfer Addendum where applicable. Resend also describes its participation in the UK extension to the EU-US Data Privacy Framework. A provider's UK website address does not mean that all processing takes place in the UK.

You can read the published terms for Vercel, Upstash, Resend, ElevenLabs and Google. Contact us at the address below to request information about the safeguards and supplier arrangements applicable to your personal data.

Newsletter

If you subscribe to our newsletter, we collect your email address and the date and time your subscription was confirmed. Subscription is double opt-in: we send a confirmation email and only add your address to the mailing list once you confirm. The lawful basis for this processing is your consent under Article 6(1)(a) of the UK GDPR. The mailing list is held in Resend, which processes it on our behalf as a data processor. Every newsletter includes an unsubscribe link; you can withdraw consent at any time by unsubscribing or by emailing ai@theaiconsultancy.ai. When you unsubscribe, your address is suppressed from further sends and removed from the active mailing list.

We retain your address on the mailing list for as long as you remain subscribed. If you unsubscribe, we remove it from the active list and keep only a suppression record, so that we do not contact you again, for no longer than is necessary for that purpose. Addresses that never complete the double opt-in confirmation are not added to the list at all.

Cookies, analytics and your right to object

We use Google Analytics 4 to measure how visitors find and use this website and to improve its pages and services. Analytics loads by default unless you have turned it off in this browser. Google Analytics uses first-party cookies, typically _ga and_ga_<container>, to distinguish visitors and sessions. Google processes this information on our behalf. Google signals and advertising personalisation are disabled in our website tag.

We rely on legitimate interests under Article 6(1)(f) of the UK GDPR for this processing: measuring and improving the website. You have the right to object. Use the control below, also available in the footer, to stop Google Analytics collection in this browser without charge or loss of access to the website.

Turn off analytics

Turning analytics off sets the Google Analytics opt-out flag and removes its cookies from this site. We remember your choice in local browser storage and a preference cookie that lasts up to one year. This preference is used only to honour your choice. Clearing site data, changing browser or using another device means you may need to turn analytics off again. The control stops future collection; it does not erase information already collected.

You can also object or ask about your data by emailing ai@theaiconsultancy.ai. The voice and chat assistant and other services described above have their own data flows; the analytics control applies to Google Analytics on this website.

Lawful basis for processing

We rely on Article 6(1)(f) of the UK GDPR (legitimate interests) to respond to enquiries you initiate and to follow up about our services in a way that is proportionate and aligned with your reasonable expectations. Where you actively opt in to receive additional materials, we rely on Article 6(1)(a) (consent). Where personal data is processed in order to enter into or perform a contract with you, we rely on Article 6(1)(b) (contract).

Retention

We retain enquiry correspondence and contact details for as long as there is an active business relationship and for a period of three years thereafter, after which records are deleted or anonymised. Statutory accounting records are retained for the periods required by HMRC and Companies House.

Your rights

Under UK GDPR you have the right to: request access to the personal data we hold about you; request rectification of inaccurate data; request erasure of your data; request restriction of processing; object to processing carried out under legitimate interests; request data portability; and withdraw consent at any time where consent is the lawful basis. To exercise any of these rights, email ai@theaiconsultancy.ai or write to us at the address below. We will respond within one calendar month.

Complaints

If you believe we have infringed data protection law when handling your personal data, you have the right to complain to us under section 164A of the Data Protection Act 2018. Email ai@theaiconsultancy.ai or write to the address below. You may use the subject line “Data protection complaint”, but this is not required. We will acknowledge receipt within 30 days, investigate as appropriate, keep you informed of progress and tell you the outcome without undue delay.

You also have the right to complain to the Information Commission, which operates as the ICO. Visit the ICO complaints page.

Contact

Changes to this notice

We may update this notice from time to time to reflect changes to our processing or applicable law. The date at the top of the page indicates when it was last reviewed.