We at AIBoost (aiboost.co.uk) respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, why we collect it, how we use it, and your rights in relation to that data. We operate under the UK GDPR and related privacy laws.
What information we collect
We only collect personal data that you voluntarily provide. For example, if you fill in our contact form, we collect your name, email address and phone number. In addition, we use web analytics tools (Google Analytics and Microsoft Clarity) which collect certain technical and usage information (such as IP address, device type, page views and session data) in anonymised form. We do not collect any sensitive personal data (such as health or financial details) or other information beyond this. In summary:
Contact details: Name, phone number, and email (via our contact form).
Website usage data: Anonymised analytics data (pages viewed, session duration, etc.) collected by Google Analytics and Microsoft Clarity.
No other data: We do not collect any additional personal or special-category information.
How we use your information
We use your data only for the purposes you expect. For example, we use contact form information to respond to your enquiries and provide any services you request. We also use aggregated analytics data to understand how visitors use our site, so we can improve our content and user experience. Specifically:
Responding to enquiries: We will use your name, email and phone number only to answer questions or requests you send us.
Website analytics and improvement: We analyse anonymised site usage data (via Google Analytics and Microsoft Clarity) to identify trends and improve our website.
No marketing or sales: We do not use your personal data for marketing unless you have given specific consent, and we will never sell your personal data to anyone.
For reference, the ICO advises that a privacy notice should clearly state why personal data is collected and what it is used for . We follow this guidance in explaining the above uses.
Legal basis for processing
Under UK GDPR, we must have a lawful basis to process personal data. In our case, the main lawful basis is legitimate interests (Article 6(1)(f)). We have a relevant interest in processing your contact details when you send an enquiry (so that we can respond to you) and in analysing website usage data to improve our services. In each case we have checked that processing is proportionate and does not unduly impact your rights. When we ask for explicit consent (for example, via a cookie consent banner), that also forms a lawful basis for setting cookies. As ICO guidance explains, we specify our lawful basis and any legitimate interests in our privacy notice .
Cookies and tracking
We use cookies and similar tracking technologies to improve your experience on our website. Necessary cookies (e.g. session cookies) are essential for the site to function. Analytical cookies (set by Google Analytics and Microsoft Clarity) help us understand how the site is used. In line with law, we give you clear information about our use of cookies and obtain consent for any non-essential cookies . You can manage or block cookies through your browser settings. In particular, Google provides a browser add-on to opt out of Google Analytics tracking .
For example, Google Analytics uses cookies to collect anonymised data about page views and user behaviour. Microsoft Clarity also uses cookies to record session interactions (mouse movements, clicks, scrolls) in anonymised form. Both services are GDPR-compliant (Microsoft Clarity explicitly is a GDPR-compliant tool ) and only collect aggregated data. Importantly, neither service sells your personal information . We do not use any advertising or tracking cookies for marketing purposes.
Data sharing
We do not sell or rent your personal data to anyone. We only share information with trusted third-party service providers when necessary to deliver our services. For example, we share data with our website hosting company, IT support, and the analytics services mentioned above. These providers act as processors on our behalf and are required to keep your data secure and use it only for the purposes we specify. In line with ICO guidance, we disclose the categories of recipients in our notice . Aside from these service providers, we will not disclose your personal data unless required by law or with your consent (e.g. if you request deletion, see below).
Data retention
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for. In practice, this means we will delete or anonymise your data once an enquiry or transaction is completed and any retention period (such as for legal records) has passed. We follow the GDPR principle of storage limitation, which requires not keeping data longer than needed . For instance, contact details from enquiries are typically kept for no longer than 1–2 years after last contact, unless a longer retention is required (for example, to comply with legal obligations). Analytics data is kept only in aggregated form (Clarity retains data for about 30 days, and Google Analytics has its own retention settings) and is not linked to you personally.
Your rights
You have rights under the UK GDPR regarding your personal data. In particular, you may:
Access: Request a copy of the personal data we hold about you.
Rectification: Have us correct or update any inaccurate or incomplete data.
Erasure: Ask us to delete your personal data (the “right to be forgotten”) where we have no overriding reason to keep it.
Restriction: Ask us to restrict how we use your data.
Object: Object to certain processing (for example, direct marketing).
Withdraw consent: If we rely on consent for any processing, you can withdraw that consent at any time.
If you wish to exercise any of these rights, please contact us (see below). We will respond to your request promptly and at most within one month, as required by law. We are committed to meeting your data subject rights. As the ICO notes, privacy notices should inform individuals of their rights and how to make a complaint . If you have a concern about our use of your data that we cannot resolve, you may also complain to the UK Information Commissioner’s Office (ICO) via their website (ico.org.uk).