Skip to content
Bespoke AIHub

BAH-06 — Sheet 1 of 2 · Data schedule

Privacy policy.

Bespoke AI Hub Ltd (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

Last updated
July 2026
Governing regime
UK GDPR
Registered
England & Wales
Clauses
13

Sheet 2 — Schedule

Terms in full

Depth 250 mm

Key to this schedule

Leaves our systems

Marks every route on this schedule that sends your data to someone other than us. Clauses 5, 6 and 10 carry one. Every other clause does not.

  1. Clause 1

    Who We Are

    Bespoke AI Hub Ltd is a company registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) as a data processor and data controller.

    Data Protection Contact: hello@bespokeaihub.com

  2. Clause 2

    What Data We Collect

    When you visit our website

    • IP address and browser type (via analytics)
    • Pages visited and time spent
    • Referral source

    When you contact us

    • Name and email address
    • Company name (if provided)
    • Message content

    When you book a call

    • Name, email, and booking details (via Calendly)

    When you become a client

    • Business contact details
    • Project-related data as defined in the Statement of Work
    • Payment information (processed by Stripe)

  3. Clause 3

    How We Use Your Data

    • To respond to your enquiries
    • To deliver our services under contract
    • To send our newsletter (only with your consent)
    • To improve our website and services
    • To comply with legal obligations

  4. Clause 4

    Lawful Basis

    We process your data under the following lawful bases (UK GDPR Article 6):

    • Consent — for newsletter subscriptions and non-essential cookies
    • Contract — to deliver services you have purchased
    • Legitimate interest — to respond to enquiries and improve our services
    • Legal obligation — to comply with tax and regulatory requirements

  5. Clause 5

    Third Parties

    We share data with the following third parties, only as necessary:

    • Google Workspace

      Leaves our systems

      Email and document storage.

    • Calendly

      Leaves our systems

      Appointment scheduling. Name, email, and booking details, per clause 2.

    • Stripe

      Leaves our systems

      Payment processing. Payment information, per clause 2.

    • Vercel

      Leaves our systems

      Website hosting.

    We do not sell your data to anyone. Ever.

  6. Clause 6

    Cookies

    Our website uses minimal cookies:

    • Essential cookies

      Stays with us

      Required for the website to function.

    • Analytics cookies

      Leaves our systems

      To understand how visitors use our site. Set only with your consent, and off until you give it.

    You can control cookie preferences through your browser settings.

  7. Clause 7

    Data Retention

    • Contact form submissions: 2 years
    • Client project data: duration of contract + 30 days (then securely deleted)
    • Financial records: 7 years (legal requirement)
    • Newsletter subscribers: until you unsubscribe

  8. Clause 8

    Your Rights

    Under the UK GDPR, you have the right to:

    • Access — request a copy of your personal data
    • Rectification — correct inaccurate data
    • Erasure — request deletion of your data
    • Portability — receive your data in a structured format
    • Objection — object to processing based on legitimate interest
    • Withdraw consent — at any time, for consent-based processing

    To exercise any of these rights, email hello@bespokeaihub.com. We will respond within 30 days.

  9. Clause 9

    Security

    We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.3), access controls, and regular security reviews. Project-specific security measures are set out in the Statement of Work for each engagement.

  10. Clause 10

    International Transfers

    Your data is primarily processed within the United Kingdom. Where data is processed outside the UK or EEA (for example, by the third-party services listed above), we ensure appropriate safeguards are in place through Standard Contractual Clauses or the UK International Data Transfer Agreement.

    • Processing outside the UK or EEA

      Leaves the jurisdiction

      Applies to the third-party routes in clause 5, under the safeguards named above.

  11. Clause 11

    Terms of Service

    By using our website, you agree to these terms. Our services are governed by the Master Service Agreement signed with each client, which takes precedence over these general terms for client engagements.

  12. Clause 12

    Changes to This Policy

    We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

  13. Clause 13

    Complaints

    If you are unhappy with how we handle your data, please contact us first at hello@bespokeaihub.com. You also have the right to complain to the Information Commissioner's Office (ICO).