Privacy Notice

Straight Up AI

Last updated: May 2025

1. Who we are

Straight Up AI is a UK-based artificial intelligence consultancy. We are the data controller for personal data collected through this website.

Company name: Straight Up AI Limited

Registered address: Unit 11 Garden Court, Welwyn Garden City, England, AL7 1BH

Contact email: daniel@straightupai.dev

We do not have a statutory requirement to appoint a Data Protection Officer (DPO). For all data protection queries, contact us at the email above.

2. What personal data we collect

We collect the following personal data when you submit our contact form:

•        First name and last name

•        Email address

•        Phone number (optional)

•        Project details you choose to share with us

We may also automatically collect limited technical data when you visit our website, including your IP address and browser type, via Squarespace's built-in analytics. This data is used only in aggregated, anonymised form.

3. Why we collect it and our lawful basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Contract / pre-contractual steps (Article 6(1)(b))

When you submit our contact form, we use your name, email, and project details to respond to your enquiry and, where relevant, to progress towards a working relationship with you.

Legitimate interests (Article 6(1)(f))

We may retain your contact details to follow up on previous enquiries, to send relevant business communications, and to maintain records of client and prospect interactions. We have assessed this against your rights and interests and are satisfied it does not override them. You can object to this processing at any time — see Section 7.

Legal obligation (Article 6(1)(c))

We may process and retain certain information where required to do so by law, for example for accounting and tax purposes.

4. How long we keep your data

We do not keep your personal data for longer than necessary. Our standard retention periods are:

•        Enquiry form data (where no contract follows): up to 12 months from the date of your last contact with us

•        Client project data (where a contract is formed): up to 6 years from the end of the project, in line with UK limitation periods

•        Financial and accounting records: 6 years from the end of the relevant financial year, as required by HMRC

After these periods, your data will be securely deleted or anonymised.

5. Who we share your data with

We do not sell your personal data. We may share it with a small number of third-party service providers who help us run our business, including:

•        Squarespace Inc. — our website and form hosting platform (see Squarespace's privacy policy at squarespace.com)

•        Email service providers — used to receive and manage contact form submissions

•        Professional advisers — such as accountants or legal advisers, where necessary and under strict confidentiality obligations

All third parties we work with are required to keep your data secure and to use it only for the purposes we specify.

6. International data transfers

Squarespace is a US-based company. When you submit our contact form, your data may be transferred to and stored on servers in the United States. Squarespace participates in the UK Extension to the EU-US Data Privacy Framework and uses Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), which provide appropriate safeguards for your data.

We do not transfer your personal data to any other countries outside the UK.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

•        Right of access — you can request a copy of the personal data we hold about you

•        Right to rectification — you can ask us to correct inaccurate or incomplete data

•        Right to erasure — you can ask us to delete your data in certain circumstances

•        Right to restrict processing — you can ask us to limit how we use your data

•        Right to data portability — you can request your data in a portable format

•        Right to object — you can object to our processing based on legitimate interests at any time

•        Rights related to automated decision-making — we do not make automated decisions about you using your data

To exercise any of these rights, contact us at [Insert contact email]. We will respond within one month. There is no charge for making a request.

8. Cookies

Our website uses cookies — small text files placed on your device — to help the site function and to understand how it is used. Squarespace sets certain essential and analytics cookies by default.

Essential cookies are strictly necessary for the website to work and cannot be switched off. Analytics cookies help us understand how visitors use our site; these are aggregated and do not identify you personally.

You can control cookies through your browser settings at any time. Blocking some cookies may affect how the website functions.

9. How to make a complaint

If you are unhappy with how we have handled your personal data, please contact us first at [Insert contact email] and we will do our best to resolve the issue.

You also have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Changes to this notice

We may update this Privacy Notice from time to time. When we do, we will update the 'last updated' date at the top. We encourage you to review this notice periodically.

Straight Up AI — straightforward AI, nothing more.