Privacy Policy
AI Policies UK
Last updated: 14 October 2026
AI Policies UK respects your privacy and is committed to handling personal information fairly, transparently and securely.
This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it, how artificial intelligence may be used within our business, and the rights you have under UK data protection law.
This notice applies to visitors to AIPolicies.uk, customers, subscribers, people who contact us, prospective clients and other individuals whose personal information we process in connection with our business.
1. Who we are
AI Policies UK is responsible for the personal information described in this Privacy Policy and acts as the data controller for that information unless we tell you otherwise.
AI Policies UK
4–6 Greatorex Street
London
E1 5NF
United Kingdom
Company number: 17445504
Website: AIPolicies.uk
Email: info@aipolicies.uk
Our registration with the Information Commissioner's Office is currently being arranged. Our ICO registration number will be added to this Privacy Policy once issued.
For questions about this Privacy Policy, your personal information or your data-protection rights, contact us at info@aipolicies.uk.
2. The information we collect
The personal information we collect depends on how you interact with us.
Information you provide to us
This may include:
your name;
email address;
telephone number, where provided;
organisation, job title or professional role;
billing and business contact information;
information you provide when making an enquiry;
correspondence and communications with us;
information provided when purchasing a product or service;
information provided when registering for access to purchased materials;
information you provide when attending a workshop, consultation, briefing or other service;
newsletter and mailing-list preferences;
feedback, complaints or other information you choose to provide to us.
Please avoid sending sensitive personal information unless it is genuinely necessary for the matter you are discussing with us.
Purchase and transaction information
When you buy a product or service, we may process:
your name and contact information;
the product or service purchased;
purchase date;
transaction and order references;
payment status;
invoices and accounting records.
Payments are processed through third-party payment providers. We do not receive or store your full payment-card details.
Account and digital-access information
Where products or resources are supplied through a customer or member area, we may process:
your name and email address;
account creation information;
login and access records;
products associated with your account;
entitlement and download information.
Website and technical information
When you visit our website, certain technical information may be collected automatically, including:
IP address;
browser and device information;
pages visited;
referring pages;
dates and times of visits;
cookie and similar technology information;
website interaction and analytics information.
Further information about cookies is available in our Cookie Policy.
3. Why we use your information
We only use personal information where we have a lawful reason to do so.
Depending on the circumstances, we may use your information to:
PurposeUsual lawful basisRespond to enquiries and communicate with youLegitimate interests or steps taken at your request before entering into a contractProcess orders and provide products or servicesContractCreate and administer customer or member accessContractProvide workshops, briefings, consulting or other servicesContractIssue invoices and maintain accounting and tax recordsLegal obligation and legitimate interestsManage our relationship with customers and clientsContract and legitimate interestsSend marketing emails and newslettersConsent or, where permitted, the electronic marketing soft opt-inMaintain mailing preferences and unsubscribe recordsLegal obligation and legitimate interestsOperate, secure and improve our website and servicesLegitimate interestsPrevent fraud, misuse and security incidentsLegitimate interests and, where applicable, legal obligationEstablish, exercise or defend legal claimsLegitimate interests and legal obligationMeet regulatory, legal and compliance requirementsLegal obligationManage complaints and data-protection requestsLegal obligationDevelop and improve our products, research and business operationsLegitimate interests, subject to appropriate safeguards
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether your rights and interests override them.
Where we rely on consent, you can withdraw that consent at any time.
4. Marketing and newsletters
You may choose to receive updates from AI Policies UK, including publications, research, product information, events and other relevant communications.
This may include communications concerning publications such as the AI Law Report, Tuesday Papers, AI Safe™ products, workshops or other AI Policies UK services.
Where consent is required, we will ask you to opt in.
Where UK electronic-marketing law permits us to contact an existing customer about similar products or services, we may rely on the soft opt-in, provided you were given a clear opportunity to opt out when your details were collected and in every subsequent marketing message.
You can unsubscribe at any time using the unsubscribe link contained in our emails or by contacting info@aipolicies.uk.
We will retain sufficient information about an unsubscribe request to ensure that we respect it.
5. How we use artificial intelligence
Artificial intelligence is central to the subject matter of our business, and we believe that our own use of AI should be transparent.
AI Policies UK may use business AI tools to assist with activities such as:
research;
drafting and document preparation;
analysing information;
administrative support;
organising information;
developing products and educational materials;
preparing summaries;
supporting internal business processes.
We apply human judgement and review to our work.
We do not intentionally provide AI tools with personal information that is unnecessary for the task being carried out, and we consider the nature of the information, purpose of processing and provider being used before personal information is processed through an AI-enabled service.
Where an external AI provider processes personal information on our behalf, we assess the provider and the relevant contractual, privacy, security and international-transfer arrangements as appropriate.
We do not currently use AI to make solely automated decisions about individuals that have legal or similarly significant effects without meaningful human involvement.
If that position changes, we will update this Privacy Policy and provide the information and safeguards required by law before that processing begins.
That approach is consistent with the transparency model in your own AI Safe material, which specifically distinguishes AI assistance from significant decisions made without meaningful human involvement. T15 Significant Decision Assess…
6. Who we share information with
We do not sell personal information.
We may share personal information with trusted organisations that help us operate the business, including providers of:
website hosting and website services;
payment processing;
customer or membership access systems;
email and communications services;
mailing-list and email-marketing services;
cloud storage and business productivity systems;
accounting and financial administration;
analytics;
IT and cybersecurity services;
professional advice;
business AI and technology services.
Our current website infrastructure includes services such as Squarespace, MemberSpace and payment-processing services such as Stripe, where relevant to the service you use.
These organisations may act as processors acting on our instructions or, in some circumstances, as independent controllers responsible for their own processing.
We may also disclose information where required by law, to a regulator or public authority, or where necessary to establish, exercise or defend legal rights.
We do not simply classify every organisation receiving data as a processor. Their role depends on what they actually do with the information.
7. International data transfers
Some of the technology and service providers used by AI Policies UK operate internationally or use infrastructure located outside the United Kingdom.
This means personal information may sometimes be processed in countries outside the UK.
Where a restricted international transfer takes place, we use an appropriate mechanism recognised by UK data-protection law where required. Depending on the provider and destination, this may include:
UK adequacy regulations;
the UK Extension to the EU-US Data Privacy Framework where applicable;
the International Data Transfer Agreement;
the UK Addendum to the EU Standard Contractual Clauses; or
another lawful transfer mechanism.
We may also carry out appropriate transfer-risk assessments where required.
You can contact us at info@aipolicies.uk if you would like further information about the safeguards relevant to your information.
This is more defensible than the present policy's blanket statement that all three platforms use SCCs plus the UK Addendum. AI Policies UK Your own T01 likewise says the actual safeguard must match the particular provider and transfer rather than using a universal statement. T01 AI Notice and Privacy_Modul…
8. How long we keep information
We do not keep personal information for longer than we reasonably need it.
The period depends on why we collected the information, our contractual responsibilities and any legal, accounting or regulatory obligations.
As a general approach:
enquiries and correspondence are retained for as long as reasonably necessary to deal with the enquiry and any resulting relationship;
customer and contractual records are retained for the duration of the relationship and for an appropriate period afterwards;
financial, invoice and transaction records are generally retained for at least six years where required for accounting and tax purposes;
customer/member access information is retained while the account or relevant entitlement remains active and for an appropriate period afterwards;
marketing information is retained while you remain subscribed or until you withdraw consent or object, although we may retain a suppression record so that we know not to contact you again;
complaint and data-rights records are retained for a period sufficient to demonstrate how the matter was handled;
website and technical records are retained according to the settings and retention periods of the relevant website, security and analytics services.
Where information is no longer required, we will delete it, anonymise it or securely dispose of it.
9. Cookies and website technologies
Our website uses cookies and similar technologies for purposes such as:
operating essential website functions;
security;
remembering preferences;
understanding website use and performance; and
where applicable, supporting integrations or services you have chosen to use.
Where a cookie or similar technology is not strictly necessary, we will seek consent where required by law before using it.
You can find more information in our Cookie Policy, including information about the cookies we use and how to manage your preferences.
The ICO's current guidance remains clear that visitors must be told about cookies and that non-essential cookies generally require agreement before use. ICO
10. Security
We use appropriate technical and organisational measures designed to protect personal information against:
unauthorised access;
accidental loss;
alteration;
disclosure;
destruction; and
misuse.
Our measures are proportionate to the nature of the information being processed and the risks involved.
No internet-based service can be guaranteed to be completely secure, but we regularly consider the security of the systems and services we use.
If a personal-data breach occurs, we will assess it and make any notifications required under applicable data-protection law.
11. Your data-protection rights
Depending on the circumstances, you may have the right to:
access personal information we hold about you;
rectify inaccurate or incomplete personal information;
erase your information in certain circumstances;
restrict how your information is used in certain circumstances;
object to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent where processing is based on consent;
receive certain information in a portable format where the right to data portability applies; and
exercise rights relating to certain forms of automated decision-making.
These rights are not absolute and sometimes an exemption or other legal rule applies.
To exercise a right, contact:
Please include enough information for us to identify you and understand your request.
There is normally no charge for exercising your rights, and we will respond within the period required by data-protection law.
The rights section also follows the wording model built into your T01 privacy materials. T01 AI Notice and Privacy_Modul…
12. Data-protection complaints
If you are concerned about how AI Policies UK has handled your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.
You can make a data-protection complaint by emailing:
Please use the subject line:
Data Protection Complaint
You may also write to:
AI Policies UK
4–6 Greatorex Street
London
E1 5NF
United Kingdom
We will acknowledge a data-protection complaint within 30 days, as required by the current statutory complaints regime, and will investigate the complaint without undue delay. We will keep you informed of its progress and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.
ICO information and complaint services are available at ico.org.uk.
The statutory complaint obligation is important because, since June 2026, organisations processing personal information must provide a means of making a complaint, acknowledge it within 30 days, investigate it and communicate the outcome. ICO
13. Children's information
AI Policies UK's products and services are primarily intended for businesses, organisations and adult professionals.
We do not intentionally offer our services directly to children or knowingly collect personal information from children through the website for the purpose of providing our commercial products.
If you believe a child has provided personal information to us in circumstances where they should not have done so, please contact info@aipolicies.uk.
14. Links to other websites
Our website may contain links to websites, services or platforms operated by other organisations.
We are not responsible for how those organisations use personal information when you leave our website. You should review the privacy information provided by the relevant organisation.
15. Changes to this Privacy Policy
We review this Privacy Policy regularly and when:
our services change;
we introduce significant new technology;
our use of personal information changes;
we introduce new AI processing;
our suppliers or international-transfer arrangements materially change; or
applicable law or regulatory guidance changes.
Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals where appropriate.
The latest version will always be available on AIPolicies.uk.
Last updated: 14 October 2026
AI Policies UK
4–6 Greatorex Street
London
E1 5NF
United Kingdom
Company number: 17445504
Email: info@aipolicies.uk
ICO registration: pending