Privacy Policy
This policy explains what personal data AI Automation Studio collects, why we collect it, how we use it, and your rights under UK GDPR.
1. Who we are
Data controller: AI Automation Studio, registered in England and Wales. Contact: [email protected]
2. What data we collect and why
We collect personal data only when you submit the enquiry form on our website. The fields are:
- First name — to address you correctly in our response
- Company name — to understand your business context before the call
- Industry sector — to prepare relevant questions for the Process Audit
- Phone number — to contact you to schedule the audit
- Process description (optional) — to research your workflow before the call
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — you submitted the form to request a service from us. We have a legitimate interest in processing your data to respond. Alternatively, submission constitutes consent (Article 6(1)(a)).
3. How we use your data
- To contact you to schedule and prepare your Free Process Audit
- To send you the Process Audit report
- If you proceed to an engagement: to manage the project and deliver our services
We do not use your data for marketing without your explicit consent. We do not sell, rent, or share your data with third parties for their own purposes.
4. How your data is stored
When you submit the form, it is sent directly to [email protected] via your email client. The data is stored in our email inbox (Google Workspace) and, if you become a client, in our project management system. We do not use a separate CRM database for form submissions.
Google Workspace is covered by Google’s data processing agreement and appropriate safeguards for UK GDPR compliance.
5. How long we keep your data
- If you do not proceed to an engagement: your enquiry data is retained for 12 months, then deleted.
- If you become a client: project data is retained for 6 years after project completion (UK company record-keeping obligations), then securely deleted.
6. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal obligations)
- Restriction — ask us to limit how we process your data
- Objection — object to processing based on legitimate interests
- Portability — receive your data in a machine-readable format
To exercise any right, email [email protected]. We will respond within 30 days.
7. Cookies and analytics
This website does not currently use cookies or third-party analytics. If we add analytics in future (e.g. Plausible or PostHog), this policy will be updated and a cookie notice displayed.
8. Complaints
If you believe we have not handled your data correctly, you have the right to complain to the Information Commissioner’s Office (ICO):
9. Changes to this policy
We may update this policy from time to time. Material changes will be noted at the top of this page with a new “Last updated” date. Continued use of our website after changes constitutes acceptance.