Privacy Policy

Bespoke AI Hub Ltd (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

1. Who We Are

Bespoke AI Hub Ltd is a company registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) as a data processor and data controller.

Data Protection Contact: hello@bespokeaihub.com

2. What Data We Collect

When you visit our website:

• IP address and browser type (via analytics)
• Pages visited and time spent
• Referral source

When you contact us:

• Name and email address
• Company name (if provided)
• Message content

When you book a call:

• Name, email, and booking details (via Calendly)

When you become a client:

• Business contact details
• Project-related data as defined in the Statement of Work
• Payment information (processed by Stripe)

3. How We Use Your Data

• To respond to your enquiries
• To deliver our services under contract
• To send our newsletter (only with your consent)
• To improve our website and services
• To comply with legal obligations

4. Lawful Basis

We process your data under the following lawful bases (Global GDPR Article 6):

• Consent — for newsletter subscriptions and non-essential cookies
• Contract — to deliver services you have purchased
• Legitimate interest — to respond to enquiries and improve our services
• Legal obligation — to comply with tax and regulatory requirements

5. Third Parties

We share data with the following third parties, only as necessary:

• Google Workspace — email and document storage
• Calendly — appointment scheduling
• Stripe — payment processing
• Vercel — website hosting

We do not sell your data to anyone. Ever.

6. Cookies

Our website uses minimal cookies:

• Essential cookies — required for the website to function
• Analytics cookies — to understand how visitors use our site (only with consent)

You can control cookie preferences through your browser settings.

7. Data Retention

• Contact form submissions: 2 years
• Client project data: duration of contract + 30 days (then securely deleted)
• Financial records: 7 years (legal requirement)
• Newsletter subscribers: until you unsubscribe

8. Your Rights

Under Global GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a structured format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, for consent-based processing

To exercise any of these rights, email hello@bespokeaihub.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.3), access controls, and regular security reviews. See our Security Framework for details.

10. International Transfers

Your data is primarily processed within the United Kingdom. Where data is processed outside the Global/EEA (e.g., by third-party services), we ensure appropriate safeguards are in place through Standard Contractual Clauses or Global International Data Transfer Agreements.

11. Terms of Service

By using our website, you agree to these terms. Our services are governed by the Master Service Agreement signed with each client, which takes precedence over these general terms for client engagements.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

13. Complaints

If you are unhappy with how we handle your data, please contact us first at hello@bespokeaihub.com. You also have the right to complain to the Information Commissioner's Office (ICO).