Privacy notice.

Straight Up AI is a UK-based artificial intelligence consultancy. We are the data controller for personal data collected through this website.

• Company name: Straight Up AI Limited
• Registered address: Unit 11 Garden Court, Welwyn Garden City, England, AL7 1BH
• Contact email: daniel@straightupai.dev

We do not have a statutory requirement to appoint a Data Protection Officer. For all data protection queries, contact us at the email above.

We collect the following personal data when you submit our contact form:

• Your name and company
• Your work email address
• What prompted you to get in touch, and the answers you give to the questions on the form — what you built, what it is doing, and when it went live

Our hosting provider records standard server logs when you visit — your IP address, browser type and the pages requested — to serve and secure the site. We do not run analytics on this website.

Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following.

Contract or pre-contractual steps (Article 6(1)(b)). When you submit our contact form, we use your name, email and project details to respond to your enquiry and, where relevant, to progress towards a working relationship with you.

Legitimate interests (Article 6(1)(f)). We may retain your contact details to follow up on previous enquiries, to send relevant business communications, and to maintain records of client and prospect interactions. We have assessed this against your rights and interests and are satisfied it does not override them. You can object to this processing at any time — see section 7.

Legal obligation (Article 6(1)(c)). We may process and retain certain information where required to do so by law, for example for accounting and tax purposes.

We do not keep your personal data for longer than necessary. Our standard retention periods are:

• Enquiry form data, where no contract follows: up to 12 months from the date of your last contact with us
• Client project data, where a contract is formed: up to 6 years from the end of the project, in line with UK limitation periods
• Financial and accounting records: 6 years from the end of the relevant financial year, as required by HMRC

After these periods your data is securely deleted or anonymised.

We do not sell your personal data. We share it with a small number of service providers who help us run our business:

• Vercel Inc. — hosts this website and holds the server logs described in section 2
• Google LLC — a contact form submission is written to a Google Sheet and emailed to us through Google Workspace
• Professional advisers, such as accountants or legal advisers, where necessary and under strict confidentiality obligations

Every third party we work with is required to keep your data secure and to use it only for the purposes we specify.

Vercel and Google are US-based companies, so data you submit may be transferred to and stored on servers in the United States. Both provide safeguards recognised by the UK Information Commissioner's Office — participation in the UK Extension to the EU-US Data Privacy Framework and Standard Contractual Clauses — for that transfer.

We do not transfer your personal data to any other countries outside the UK.

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data in certain circumstances
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a portable format
• Right to object — you can object to our processing based on legitimate interests at any time
• Rights related to automated decision-making — we do not make automated decisions about you using your data

To exercise any of these rights, email daniel@straightupai.dev. We will respond within one month. There is no charge for making a request.

This website sets no cookies and runs no analytics or tracking. If that changes, this notice will be updated first.

If you are unhappy with how we have handled your personal data, contact us first at daniel@straightupai.dev and we will do our best to resolve it.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this notice from time to time. When we do, we update the date at the top. We encourage you to review it periodically.