Privacy Policy

This policy explains what personal data we collect when you use aireadinesspartner.com, what we do with it, who we share it with, and how long we keep it. It also sets out your rights and how to use them. It is written in plain English on purpose. If anything is unclear, email us and we will explain it.

Who we are

AI Readiness Partner Ltd (registered in England and Wales, company number [COMPANY NUMBER]) is the data controller for the personal data described in this policy. Our registered office is [REGISTERED OFFICE ADDRESS].

For any data-protection question, including subject-access requests, email us at carl.chessum@aireadinesspartner.com. We answer within seven working days.

What we collect and why

Contact form submissions

When you submit the form at aireadinesspartner.com/contact-us we collect your name, email address, and the optional company and phone fields. We also collect the message body you write. We use this to reply to your enquiry and decide whether what you are asking for fits what we do.

Legal basis: legitimate interests. The interest is responding to inbound business enquiries that the sender has chosen to send us.

Free AI readiness assessment

When you complete the seven-minute assessment we collect your name, email address, and the scoring inputs you submit. The form is hosted by Typeform on our behalf and posts the result to our audit application at results.aireadinesspartner.com so we can generate your scored report. We use this data to produce the result and follow up only if you have asked us to.

Legal basis: legitimate interests for delivering the requested result. Consent is the basis for any follow-up marketing communication, which you opt into separately if at all.

Paid audit reports (£97 and £497)

When you pay for a Full Report or a Deep Dive we collect billing information (your name, email address, and country of residence) and the result data the audit produces. Stripe processes the payment and we never see or store your card details. For the Deep Dive we also collect the industry, company size, and AI goal you submit so the report can be personalised, plus the date and time of your debrief call once it is scheduled.

Legal basis: contract. Processing your data is necessary to deliver the product you paid for.

Email correspondence

If you email us, we hold the message and our reply for as long as is reasonable for the matter under discussion. Email content is stored in Google Workspace.

Legal basis: legitimate interests in answering correspondence sent to us.

Marketing email (when applicable)

We do not currently run a marketing email list from this website. If we add one in the future, you will opt in explicitly, you can unsubscribe at any time, and only the data you provide at signup will be used. The list will be managed by Brevo on our behalf.

Legal basis: consent. You can withdraw it at any time without it affecting prior processing.

Website analytics

This site uses Google Analytics 4 (GA4), a service provided by Google Ireland Limited. GA4 helps us understand which pages visitors view, how they arrived, and which content is most useful. We see aggregate trends, not individual browsing histories.

GA4 sets cookies in your browser to support this measurement. The cookies are listed in the Cookies section below. Data collected by GA4 is processed by Google on our behalf, and is also transferred to and processed in the United States.

Legal basis: legitimate interests in measuring and improving the performance of our website. You can opt out by installing the Google Analytics Opt-out Browser Add-on, or by blocking third-party scripts in your browser.

How long we keep your data

Contact form submissions are kept for two years from your last interaction with us, then deleted. Audit results are kept indefinitely because the report is the product you bought, and you may want to return to it. Paid-customer and transaction records are kept for seven years to meet HMRC requirements. If we ever run marketing email subscriptions, they will be kept until you unsubscribe, plus a further thirty days for housekeeping.

You can ask us to delete your data sooner. See "Your rights" below.

Who we share your data with

We do not sell your data. We share specific data with specific service providers, each one named here and each one bound by a written agreement and the requirements of UK GDPR.

• Brevo (Sendinblue SAS, France). Sends transactional emails (notifications, auto-confirmations). Will host the marketing email list if and when we run one.
• Stripe (Stripe Payments Europe Ltd, Ireland). Processes payments. We pass them the data needed to charge your card. They do not pass us your card details.
• Vercel (Vercel Inc, United States). Hosts this website and runs its serverless functions.
• DigitalOcean (United States). Hosts the audit application at results.aireadinesspartner.com.
• Typeform (Typeform SL, Spain). Hosts the form used for the free assessment and the Deep Dive intake.
• Google Workspace (Google Ireland Ltd). Handles our inbound email and stores our correspondence.
• Google Analytics 4 (Google Ireland Ltd, with data transferred to Google LLC, United States). Measures site usage in aggregate. Sets the cookies listed below.
• Anthropic (United States). The £497 Deep Dive uses the Claude API to synthesise your personalised report. Anthropic processes the input we send but, under their commercial terms, does not use it to train their models.

Where data leaves the UK or the EEA (Vercel, DigitalOcean, Anthropic, and Google Analytics' US-based processing), Standard Contractual Clauses are in place to provide an adequate level of protection in line with UK GDPR Article 46.

Your rights

Under UK GDPR you have a clear set of rights over your personal data. We honour all of them. You can:

• Ask for a copy of the personal data we hold about you (a subject access request).
• Ask us to correct anything that is wrong or out of date.
• Ask us to delete your data ("the right to be forgotten"). We will do so unless we are legally required to keep something, in which case we will explain what and for how long.
• Ask us to restrict how we use your data while a query is being resolved.
• Ask for your data in a portable format you can take elsewhere.
• Object to processing that we are doing on the basis of legitimate interests.
• Withdraw any consent you have previously given, at any time.

To use any of these rights, email carl.chessum@aireadinesspartner.com with enough detail to identify you (typically the email address you used). We answer within seven working days and complete the request within thirty calendar days, faster where we can.

If you are unhappy with how we have handled your data you have the right to complain to the UK Information Commissioner's Office. We would ask that you raise it with us first so we can put it right, but you can go directly to the regulator if you prefer. The ICO can be reached at ico.org.uk.

Cookies

This site sets the following analytics cookies:

• _ga (Google Analytics, lasts up to two years). Distinguishes individual visitors for measurement purposes.
• _ga_9T9TJ4FRP8 (Google Analytics, lasts up to two years). Stores session state for our specific GA4 property.

A small number of functional cookies may also be set by Vercel for basic operation of the site (for example, to remember a preview state). These do not identify you and do not require consent under the Privacy and Electronic Communications Regulations.

To prevent the Google Analytics cookies from being set, install the Google Analytics Opt-out Browser Add-on, or block third-party scripts in your browser.

Changes to this policy

We update this policy when we change how we handle data or when the law changes. The date at the top of the page shows when the current version was published. If we make a material change that affects how we use data we already hold about you, we will tell you by email before the change takes effect.

Contact

Privacy questions of any kind: carl.chessum@aireadinesspartner.com.