Legal

Privacy notice

Last updated 19 September 2026

This notice explains what personal data we collect through this website and in the course of our work, why we hold it, who else sees it, and what you can do about it. It is written to be read, not to be survived.

Who we are

AI Catalyst is a trading name of Applied AI Solutions Ltd, a company registered in England and Wales, company number 17192679, registered office Eastwood, 29 Breach Lane, Leicester LE9 7FB. We are the data controller for the personal data described here, registered with the Information Commissioner's Office under registration number ZAXXXXXX.

For anything in this notice, contact [email protected].

What we collect, and why

When you use the contact form

We collect your name, email address, the subject you give and the message you write. We use these to reply to you and, if it goes further, to scope and carry out work.

Lawful basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries.

When you email us

We hold your email address and whatever you choose to put in the message, for as long as we need it to deal with the matter.

Lawful basis: legitimate interests — running a business and answering the people who contact it.

When we work together

During an engagement we hold the contact details of the people we deal with, and whatever business information you share with us in order for us to do the work. Where that includes personal data belonging to your staff or customers, you remain the controller and we act as your processor under the terms of the engagement.

Lawful basis: performance of a contract, and compliance with our legal obligations for records that tax and company law require us to keep.

When you browse this site

If — and only if — you accept analytics in the cookie banner, Google Analytics records how you arrived, the pages you looked at, roughly where in the world you are, and what kind of device you used. It does not tell us who you are. Nothing is recorded if you decline or ignore the banner.

Lawful basis: consent. You can withdraw it at any time — see the cookie policy.

Separately, our hosting provider keeps short-lived server logs (IP address, browser type, the page requested) to deliver the site and defend it from abuse. Lawful basis: legitimate interests in security and availability.

Who else handles it

We keep the list of suppliers deliberately short. Each is bound to process data only on our instructions.

• Web3Forms — receives contact form submissions and forwards them to our mailbox.
• Microsoft 365 — our email, where correspondence lives.
• Cloudflare — hosting, content delivery and security for this website.
• Google Analytics — website analytics, only after consent.

We do not sell personal data, we do not share it for advertising, and we do not buy marketing lists.

Where it goes

Some of these providers process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the safeguards those require.

How long we keep it

• Enquiries that go nowhere — up to 24 months, then deleted.
• Client records and correspondence — six years after the end of the engagement, which is the period tax law and the Limitation Act make it sensible to hold.
• Analytics — no longer than 14 months in Google Analytics.
• Server logs — retained by our hosting provider for a short rolling period, typically days rather than months.

Your rights

Under UK GDPR you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or hand it over in a portable form. You can object to processing we carry out on the basis of legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting what was done beforehand.

Email [email protected] and we will respond within one month. There is no charge.

Complaints

If you think we have handled your data badly, please tell us first — it is usually quicker. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this notice changes, the date at the top changes with it. Material changes will be flagged on the site.

See also: Cookie policy · Terms of engagement