Privacy Policy

Last updated: 17 March 2026

Cambridge AI Consultants is a trading name used by a sole trader registered with the Information Commissioner's Office (ICO), registration reference C1892255. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who We Are

Cambridge AI Consultants provides AI strategy advisory services to UK businesses. For data protection enquiries, contact us at hello@cambridgeaiconsultants.com.

2. What Data We Collect

We may collect and process the following data:

• Business contact information: Name, job title, business email address, company name, and company registration details (e.g. FCA number, Companies House number).
• Booking information: Details provided via our booking form, including firm name, firm size, and responses to intake questions.
• Session data: Notes and recordings from our consultations. Session recordings are made only with your verbal consent, confirmed at the start of each call.
• Payment information: Processed securely by Stripe. We do not store your card details.
• Website usage data: Basic anonymous usage data provided by our hosting platform (Cloudflare) as part of standard web serving. We do not use additional analytics tools or tracking cookies.

3. How We Obtain Your Data

We obtain your data from the following sources:

• Directly from you: When you book a session, contact us, or fill in our intake form.
• Public registers: We source business contact information from publicly available registers, including the FCA Financial Services Register, the SRA Solicitors Register, and Companies House. This data is used for business-to-business outreach only.
• Third-party enrichment: We may use business data enrichment services to identify appropriate business contacts at firms listed on public registers.

4. Lawful Basis for Processing

We process your data under the following lawful bases:

• Contract: To deliver the advisory services you have booked and paid for.
• Legitimate interests: To contact businesses about our services via email. Our legitimate interest is promoting our advisory services to businesses that may benefit from them. We have conducted a Legitimate Interest Assessment (LIA) and concluded that this interest is not overridden by your rights, given that: (a) we contact you in a professional business capacity; (b) the data is sourced from public business registers; (c) we provide a clear and easy way to opt out; (d) we only contact corporate subscribers (limited companies and LLPs), not sole traders or individuals.

5. B2B Email Communications

We may send you email communications about our services if you are a corporate subscriber (a limited company or LLP) as defined under PECR Regulation 22. In accordance with PECR:

• We do not send unsolicited emails to sole traders, non-LLP partnerships, or individuals.
• Every email we send identifies us by name and provides a valid contact address.
• Every email includes a clear, functional unsubscribe mechanism.
• If you opt out, we action your request immediately and add you to our suppression list to prevent future contact.

6. How We Use Your Data

• To deliver AI strategy advisory sessions you have booked.
• To prepare pre-session research about your firm.
• To send you a summary of recommendations after your session.
• To follow up on your session progress (with your agreement).
• To send you information about our services (B2B outreach, with opt-out).

7. Data Sharing

We do not sell your data. We may share data with:

• Payment processors: Stripe, for processing session payments.
• Scheduling platforms: Cal.com, for managing bookings.
• Email service providers: For sending transactional and marketing emails.

All third-party processors are bound by data processing agreements and handle data in accordance with UK GDPR.

8. Data Retention

• Client session data: Retained for 2 years after the session, then deleted.
• Business contact data (outreach): Retained until you opt out, at which point it is moved to our suppression list.
• Suppression list: Retained indefinitely to ensure we do not contact you again.
• Payment records: Retained for 6 years in accordance with HMRC requirements.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (subject to legal retention requirements).
• Object to processing based on legitimate interests.
• Restrict processing in certain circumstances.
• Data portability.

To exercise any of these rights, email hello@cambridgeaiconsultants.com. We will respond within 30 days.

10. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page with the date of the last update.