Privacy policy.What we collect, why, and how long we keep it.

SimpleAI is a trading name of SimpleInc, registered in England and Wales and based in the United Kingdom. Our website is simpleai.uk. You can contact us at [email protected].

We are the data controller for the personal data described in this policy. If you want to exercise a right, raise a concern, or ask us to stop contacting you, that address reaches a person.

Data you give us

When you email us, arrange a call, or engage us for Discovery or a build, we collect your name, email address, business details and any information you choose to include. We use this solely to respond to your enquiry and provide the services you have asked for. The legal basis is legitimate interest or, where you have engaged us for paid work, performance of a contract.

Data collected automatically

None that identifies you. This site runs no analytics, no advertising trackers and no third-party scripts that profile visitors. Our hosting provider keeps standard server logs for security and abuse prevention, in line with its own retention practice.

Data we obtain from elsewhere

If we contacted you first, we hold a small amount of information about you that you did not give us. Section 07 explains exactly what, where it came from, and how to stop it.

This site sets no analytics cookies, no advertising cookies and no cross-site trackers. There is nothing here to consent to, which is why you will not find a cookie banner.

One preference is stored on your own device:

Clearing site data for simpleai.uk removes it. Because it never leaves your browser, there is nothing for us to delete at our end.

Contact and consultation enquiries are kept for no longer than 24 months, or until you ask us to delete them. Records relating to paid engagements — contracts and invoices — are retained for 7 years to meet HMRC requirements.

Outbound contact data follows its own period, set out in section 07.

We do not sell your data. We share it only with carefully selected processors that help us run the business: our email provider, so we can reply to you, and our payment processor, for paid engagements only. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

Under UK GDPR you have the right to access your data, correct inaccurate data, request deletion, object to processing, restrict processing, request portability, and withdraw consent at any time. To exercise any of these rights, email [email protected]. We will respond within 30 days.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You do not need to raise it with us first, though we would rather you did.

We send a small number of emails to named people at UK companies about work we think is relevant to them. If you are reading this because one of those arrived, this section is the part that applies to you.

What we hold

Your name, your job title, your work email address, your employer, and the public fact that prompted us to write — a filing, an appointment, an announcement. Nothing else. We hold no personal address, no personal phone number, no financial detail, and nothing about your life outside your job.

Where we got it

Three places, all public:

• The Companies House register, which lists company officers and their appointments.
• Your employer's own website — usually a leadership or team page.
• Published trade press and company announcements.

We do not buy contact lists. We do not scrape data from breaches. We do not use databases that trade in personal contact details. Where we could not find a real address, we have not invented one.

Why we are allowed to

Our lawful basis is legitimate interests, under Article 6(1)(f) of the UK GDPR: our interest in telling a small number of relevant organisations what we do. We carried out and documented a Legitimate Interests Assessment before sending anything, and we review it if what we do changes.

The Privacy and Electronic Communications Regulations require consent before marketing email is sent to an individual subscriber — a sole trader, or most ordinary partnerships. It does not require consent for a corporate subscriber. So we write only to named people at limited companies and limited liability partnerships, and we confirm the company's status on the Companies House register before we write. If we have got that wrong in your case, tell us and we will stop.

How much of this there is

Very little, and deliberately so. Every email is researched by hand, and a person reads it before it is sent — nothing is generated and sent automatically. If we have written to you, someone chose to.

How long we keep it

Twenty-four months from the last meaningful contact, then we delete it or write down a fresh reason to keep it. Suppression records are kept indefinitely, because forgetting that you asked us to stop is the one failure that guarantees we would contact you again.

Your other rights

Everything in section 06 applies here too: access, correction, deletion, restriction, portability, and objection. We respond within 30 days.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You do not need to raise it with us first, though we would rather you did.

We may update this policy from time to time. The “last updated” date at the top will reflect any changes. Material changes will be flagged on the homepage for 30 days.