Who is responsible for your information
Until AIAdminLab is incorporated as a company, the data controller for personal information collected through the AIAdminLab public website is Steve Donnelly, trading as AIAdminLab.
Contact: steve.donnelly@aiadminlab.co.uk
This notice covers the AIAdminLab public website and its contact form. Customer audit evidence, including RecruitmentRebate evidence, is handled separately through the agreed customer onboarding and Secure Audit Intake process and is not requested through the public contact form.
What information we collect
If you submit the contact form, we may collect:
- your name;
- work email address;
- organisation;
- optional phone number;
- area of interest; and
- the content of your message.
Please do not send audit evidence, employee records, special-category information or other sensitive customer data through the public contact form.
Why we use this information
We use contact-form information to:
- respond to your enquiry;
- understand what service or information you are asking about;
- manage the resulting business conversation;
- take steps you request before entering into a contract where relevant; and
- maintain appropriate business and suppression records.
Our normal lawful basis for handling business-contact enquiries is our legitimate interests in responding to enquiries, developing and operating AIAdminLab and managing prospective business relationships. Where processing is necessary to take steps at your request before entering into a contract, that contractual basis may also apply.
We do not use contact-form submissions to build advertising profiles or sell personal data.
Where information is processed
Cloudflare Turnstile is used on the contact form to help protect it from automated abuse. Server-side validation is required before a submission is accepted. Valid contact submissions are then sent through AIAdminLab's controlled Cloudflare website infrastructure and stored in a private AIAdminLab Supabase database. These providers act as service providers/processors where applicable and are subject to their contractual data-protection arrangements.
Some infrastructure providers or their authorised subprocessors may process or access information outside the United Kingdom. Where this amounts to a restricted international transfer, AIAdminLab relies on applicable UK adequacy regulations or recognised safeguards provided through the relevant contractual arrangements.
Website analytics
The current public website uses a small privacy-conscious, cookie-free event feed to understand matters such as page visits, module-page visits, calls to action and contact conversion. The intended implementation records an event name and page path only and does not intentionally record contact-form fields, names, email addresses, messages or customer audit evidence.
AIAdminLab does not currently use this event feed for behavioural advertising or cross-site profiling.
This cookie-free/no-non-essential-storage position must be rechecked whenever website analytics, advertising, embedded media, tag-management or other tracking technology changes.
How long we keep information
Business-contact and enquiry information is kept only while there is a genuine business purpose. Active prospect or enquiry records are reviewed at least annually and stale personal contact information is removed or minimised where there is no continuing purpose.
If you become a customer, information that forms part of the customer, contractual, invoice, security or other business record may be retained under the applicable customer and statutory retention rules instead.
If you object to direct contact or ask not to hear from us, we may retain a minimal suppression record for as long as reasonably necessary to make sure your preference is respected.
Who we share information with
We may share information only where reasonably necessary with service providers supporting the website, hosting, database, communications, security, professional advice or business administration, or where disclosure is required by law.
We do not intentionally provide website enquiry data to public/community malware-analysis services, data brokers or advertising-data marketplaces.
Your data-protection rights
Depending on the circumstances, you may have rights to:
- ask for access to personal data we hold about you;
- ask us to correct inaccurate information;
- ask us to erase information where the legal conditions are met;
- ask us to restrict processing in certain circumstances;
- object to processing based on legitimate interests, including direct marketing; and
- receive information about how your data is used.
You can exercise these rights by emailing steve.donnelly@aiadminlab.co.uk.
If your request relates to personal data AIAdminLab processes solely on behalf of a customer as that customer's processor, we may need to refer or coordinate the request with that customer as controller.
Complaints
If you have a concern about how your information is handled, please contact AIAdminLab first so the issue can be investigated. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Changes to this notice
This notice will be updated when AIAdminLab incorporates and the incorporated entity becomes the relevant controller, or earlier if website collection, analytics, providers, purposes or other material processing changes.