Privacy Policy

1. Who We Are

AI for Marketing Ltd is a company registered in England and Wales (Company Number: 16663129) with its registered address at 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

When we refer to "we", "us", or "our" in this policy, we mean AI for Marketing Ltd. When we refer to "you" or "your", we mean any visitor to our website or any client who engages our services.

This privacy policy explains how we collect, use, store, and protect your personal data when you visit aiformarketing.co.uk or engage with our services. We are committed to protecting your privacy and handling your data transparently and lawfully.

2. What Data We Collect

We may collect and process the following types of personal data:

Contact information: your name, email address, phone number, and company name when you submit a form, book a discovery call, or contact us directly.

Website usage data: only if you accept optional analytics: pages visited, time on pages, referral source, browser and device type, and whether you opened the booking calendar or sent a request. Section 5 explains how this works and how to change your choice.

Communication data: the content of emails, messages, or form submissions you send to us.

Service data: information you provide during the delivery of our services, including business data, marketing assets, access to third-party tools you grant us, and performance data from the channels we manage for you.

Payment data: billing information processed through our payment provider. We do not store credit card details directly.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and provide the services you have requested.

To send you information about our services. Where you have opted in, we rely on your consent. Where we have contacted you at your work address as a business contact without a prior relationship, we rely on legitimate interests, and section 3a explains exactly what that means and how to stop it.

To improve our website through analytics, only where you have accepted optional analytics.

To fulfil our contractual obligations when delivering marketing builds, roadmaps, or other services.

To comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

3a. Business Contact Data and Outbound Research

If we emailed you and you had not heard from us before, this section is the one that applies to you. It explains where we got your details and what we did with them.

What we process: your name, job title, employer, work email address and the public professional profile associated with it. Alongside that we hold research about the organisation itself: its website, its public search visibility, and any advertising it runs that appears in the public ad libraries operated by Google, Meta and LinkedIn.

Where it comes from: publicly available sources. These include your company website, public professional networking profiles such as LinkedIn, public business registers, and the public advertising transparency libraries named above. We also use third-party data providers that compile business contact information from those same public sources. We do not buy consumer data, and we do not obtain your details from any private or purchased consumer list.

Why we are allowed to: our legal basis is legitimate interests. The specific interest is direct business-to-business marketing: contacting people in a professional capacity about a service relevant to their role, at their work address. We have considered whether this overrides your rights and concluded it does not, because the data is professional rather than personal, the contact is relevant to your job, the volume to any one person is small, and you can stop it in one reply. If you disagree, you can object and we will act on it.

How long we keep it: research and contact records for organisations we have approached are kept for up to 24 months from the last meaningful contact, after which they are deleted. If you tell us you are not interested, we stop contacting you immediately.

How to make it stop, and what happens then: reply to any email from us, or write to jakub@aiformarketing.co.uk. You can ask us to stop contacting you, to send you the information we hold about you, or to delete it entirely. If you ask us to stop, we keep the minimum record needed to make sure we do not contact you again by mistake, which is your email address on a suppression list and nothing else. That record exists only to honour your request. If you would rather we held nothing at all, say so and we will remove it completely, though we then cannot guarantee you are not contacted again in future.

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the UK General Data Protection Regulation (UK GDPR):

Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to our communications.

Contractual necessity: where processing is necessary to fulfil a contract with you or to take steps at your request before entering a contract.

Legitimate interests: where processing is necessary for our legitimate business interests, provided these interests do not override your rights. We rely on this for two things: improving our services and website, and business-to-business marketing to people in a professional capacity at their work address. Section 3a sets out the second one in full, including where the data came from and how to stop it.

Legal obligation: where processing is necessary to comply with a legal obligation.

5. Cookies and analytics

Optional analytics (Google Analytics 4): off until you choose. When you first visit, the site asks whether you accept optional analytics. Until you accept, no analytics script is loaded, no analytics request is made and no analytics cookie is set. If you accept, Google Analytics sets cookies (named _ga and _ga_ followed by an identifier) holding a random identifier, and records which pages you view, how you arrived, your browser and device type, and a small set of events: that a contact option was shown, that the booking calendar was opened on the page or in a new tab, and that a written request was saved. Opening the calendar is recorded as an opening, not as a booking. We do not send your name, email address, message, or any appointment link to analytics, and we remove all but a short list of page address parameters before a page address is recorded.

Changing your choice: use “Analytics choices” in the footer of any page. If you withdraw, the site stops sending analytics from that moment and deletes the analytics cookies it can reach. Your choice is saved in your browser’s local storage; if your browser blocks that storage, the choice applies to your current visit only.

What works without analytics: every page, the contact forms and the booking calendar work the same whether you accept or reject.

Other storage: the site stores your analytics choice in local storage so it can remember it. Page fonts are loaded from Google Fonts, which means your browser requests them from Google’s servers. The booking calendar on the contact page is Google Calendar appointment scheduling; it loads from Google only when you choose to show available times or open it in a new tab, and Google’s own privacy policy applies to what you do there.

6. Third-Party Services

We use the following third-party services that may process your data:

Google Analytics, only if you accept optional analytics (section 5).

Google Calendar appointment scheduling for booking calls, loaded only when you open it (section 5).

Netlify, which hosts this website and runs the function that receives contact form submissions.

Supabase, which stores contact form submissions.

Stripe for payment processing.

Google Workspace for email communication.

Relevance AI, Make.com, and other automation tools used in the delivery of our services (where applicable and with your knowledge).

Each third-party service operates under its own privacy policy. We encourage you to review their policies. We only share the minimum data necessary for each service to function.

7. Data Storage and Security

Your personal data is stored securely using industry-standard measures. We use encrypted connections (SSL/TLS) across our website. Access to personal data is restricted to authorised personnel only.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact data from enquiries is retained for up to 24 months unless you request deletion sooner. Business contact and research data for organisations we have approached but not worked with is retained for up to 24 months from the last meaningful contact, as set out in section 3a. Client data is retained for the duration of the engagement plus 24 months for client results and reporting purposes, unless otherwise agreed.

9. Client Results and Performance Data

As part of the proposals our clients sign, we may use anonymised performance data from the systems we build for client results and marketing purposes. This is covered in the proposal you sign at the start of each engagement. No personally identifiable information is included in client results without your explicit written consent.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.