Privacy Policy
AI Expert is the trading name of Combined AI Ltd. This policy explains what personal data we collect, why, what we do with it and the rights you have. It applies to visitors to www.ai-expert.co.uk, people who contact us or attend our events, businesses we approach, and clients we work with.
Effective date: 17 August 2026. Version 2.0. This version replaces the policy dated 6 August 2025.
1. Who we are
Combined AI Ltd, trading as AI Expert, is a company registered in England and Wales, company number 16499494, registered office 92 Blakefield Road, Worcester, WR2 5DP. We are the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office under registration number ZC098364.
Questions about this policy, or requests to exercise your rights, go to hello@ai-expert.co.uk or by post to the registered office, marked for the attention of the Managing Director.
2. What this policy covers
Personal data is any information relating to an identified or identifiable person. This policy covers the personal data we process about the following people: visitors to our website; people who contact us or make an enquiry; people who complete our AI Readiness Assessment or other surveys; subscribers to our newsletter; people who register for or attend our events and webinars; people at businesses we approach with information about our services; and clients and their staff during an engagement.
It does not cover other websites we link to. Read their own privacy notices before using them.
3. The data we collect and where it comes from
3.1 When you visit our website
We collect usage data automatically through Google Analytics 4: pages visited, time on page, how you arrived, approximate location at country or city level, device and browser type, and a pseudonymous identifier held in a cookie. We do not collect your name or email address through analytics. Google Search Console gives us aggregated data about search queries that lead to our site and contains no personal data. Analytics cookies are set only with your consent. See section 12 for the cookie list.
3.2 When you contact us
If you use the contact form, email us or call us, we collect your name, email address, telephone number where given, your business, and the content of your message. Form submissions arrive by email. Where an enquiry becomes a qualified conversation about our services, we record it in our customer relationship management system, Zoho CRM.
3.3 When you take the AI Readiness Assessment or a survey
Our AI Readiness Assessment and our surveys run on ScoreApp. We collect the answers you give, your name and email address, and your business. ScoreApp processes this on our behalf and its own privacy notice also applies to your use of its platform.
3.4 When you subscribe to our newsletter
We collect your name and email address and a record of your consent. Our newsletter is sent through Zoho. We record opens and link clicks so that we can see what readers find useful.
3.5 When you register for an event or webinar
For in-person events we take registrations through Zoho and collect your name, email address, business, role and any dietary or access requirements you choose to give us. For webinars and online sessions we use Microsoft Teams and collect your name and email address, and Teams records attendance. Where a session is recorded, we tell you at the start.
3.6 When we approach your business
We research businesses that we believe may benefit from our services and contact the people who make decisions for them. For those people we collect: name, job title, business email address and, where public, LinkedIn profile URL and recent professional activity. We hold information about the business itself drawn from public sources. Sources are your company website, the Companies House public register, Google Maps business listings, LinkedIn public profiles and trade press. We use an email verification service to confirm that a business address is deliverable before we use it. Section 6 explains this in full.
3.7 When you are a client
During an engagement we hold the names, roles and business contact details of the people we work with, and any personal data contained in the documents, systems and datasets you ask us to work on. For that data you remain the controller and we act on your instructions under our engagement terms. Training attendance is recorded by name.
4. How we use your data and our lawful bases
Every use of personal data has a lawful basis under UK GDPR. The table sets them out.
Where we rely on legitimate interests we have weighed ourinterest against your interests, rights and freedoms and concluded that it isnot overridden. You have the right to object at any time, see section 11.
5. Direct marketing
5.1 If you are an individual, a sole trader or in a partnership
We will only send you marketing by email with your consent, or under the soft opt-in where you have enquired about or bought our services and we are marketing similar services. You can withdraw consent at any time.
5.2 If you act for a limited company, A limited liability partnership or another corporate body, we may send relevant business-to-business marketing to your business email address on the basis of our legitimate interests, in accordance with the Privacy and Electronic Communications Regulations. Every such email identifies us and offers a one-click way to stop, and we honour every opt-out permanently.
5.3 To stop marketing from us at any time, use the unsubscribe link in any email, reply STOP, or email hello@ai-expert.co.uk.
6. Business contacts and prospecting
6.1 If you have received an email from us and had no previous contact with AI Expert, this section explains why. We identify businesses that our research suggests could benefit from adopting AI, and we write to the people who lead them at their business email address, offering a short report on their own business.
6.2 What we hold about you is set out in section 3.6. It comes only from public sources. We do not buy marketing lists.
6.3 Our lawful basis is legitimate interests. We have recorded a legitimate interests assessment for this activity. We only contact people acting for corporate bodies at their business address, we send a limited sequence of emails and then stop, and every email offers a one-click opt-out.
6.4 We use AI systems to research businesses and to draft our emails and reports. A member of our team reviews every batch before it is sent. No decision producing legal or similarly significant effects about you is made solely by automated means.
6.5 If you do not respond, we delete your details 12 months after our last contact. If you opt out, we keep only your business email address on a suppression list, indefinitely, so that we never contact you again.
6.6 You can object at any time by using the unsubscribe link, replying STOP or emailing hello@ai-expert.co.uk, and you have all the rights in section 11.
7. Who we share your data with
7.1 Service providers who process data on our behalf, under contract and on our instructions: website hosting (Webflow), analytics (Google), customer relationship management, email marketing and event registration (Zoho), assessments and surveys (ScoreApp), video meetings and webinars (Microsoft), and, for prospecting, database hosting, workflow automation, AI research and drafting, email verification and email delivery providers. We choose providers who commit to using our data only to provide their service to us.
7.2 Professional advisers such as accountants, lawyers and insurers where needed. Regulators, courts and law enforcement where the law requires. A buyer or prospective buyer of our business, under confidentiality, if we sell or transfer any part of it.
7.3 We do not sell personal data and we do not share it with third parties for their own marketing.
8. International transfers
Some of our providers process data outside the United Kingdom, including in the European Economic Area and the United States. Where they do, the transfer is protected by UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the provider's own security commitments.
9. Security
We protect personal data with technical and organisational measures appropriate to the risk, including access controls, encryption in transit and at rest on our providers' platforms, and staff who understand their responsibilities. If you suspect any misuse, loss or unauthorised access to your data, tell us immediately at hello@ai-expert.co.uk.
10. How long we keep your data
Data may persist for a short period in backups after deletion. Where a longer period is required by law, that period applies.
11. Your rights
You have the right to ask for a copy of the personal data we hold about you; to have inaccurate data corrected; to have data erased where there is no good reason for us to keep it; to restrict how we use it; to receive data you gave us in a portable form; to object to processing based on legitimate interests, including profiling; and to object to direct marketing, which we will always honour. Where we rely on consent you may withdraw it at any time without affecting what was done before.
To exercise any right, email hello@ai-expert.co.uk. We respond within one month and do not charge unless a request is manifestly unfounded or excessive. We may need to confirm your identity first.
If you are unhappy with how we handle your data, we would like the chance to put it right, so please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
12. Cookies
12.1 A cookie is a small text file placed on your device. Our website sets only the cookies listed below. Non-essential cookies are set only after you accept them through the banner shown on your first visit, and you can change your choice at any time using the cookie settings link in the website footer or by clearing cookies in your browser.
12.2 Google Tag Manager loads our analytics. It does not itself set cookies. Google Search Console does not set cookies.
12.3 We keep this list current. If we add a tool that sets cookies, we update the table before it goes live. For general information about cookies, including how to disable them, see aboutcookies.org.
13. Children
Our services are for businesses and our website is not directed at children. We do not knowingly collect personal data from anyone under 18.
14. Changes to this policy
We review this policy at least annually and whenever our processing changes. Material changes are posted here with a new effective date. Where a change significantly affects people we already hold data about, we tell them directly.
15. Contact
Combined AI Ltd, trading as AI Expert, 92 Blakefield Road, Worcester, WR2 5DP. Telephone 03335 44 00 00. Email hello@ai-expert.co.uk.