Privacy policy

This page explains, in plain English, how CloudburstAI handles personal information: what we collect through this website (cloudburstai.co.uk and any pages on that domain), and what we hold about the business contacts and prospects we deal with.

Who we are

"CloudburstAI", "we" and "us" refer to CloudburstAI Ltd, the business operating this website. We're a company registered in England and Wales (company number 17543661). Registered office: 19 Upper King Street, Norwich, NR3 1RB. We help UK service businesses build practical AI-powered systems.

CloudburstAI Ltd is responsible for the personal information described on this page — in data-protection terms, we're the "controller". You can reach us using the contact details at the end of this page.

What we collect through this website

Most of this website can be read without giving us any personal information. We collect information in three situations:

• Guide requests. If you request The AI Advantage, we ask for your name, email address and (optionally) your business name and what you're hoping AI could help with. The form also has an optional tick-box asking whether you're happy for us to email you about the guide and related services — we record your answer.
• Strategy session bookings. If you book a free strategy session, the booking tool collects your name, email address and the answers to any booking questions.
• Standard web logs. Like every website, our hosting provider records basic technical information (IP address, browser type, pages requested) for security and reliability.

How we use it

We use the information you give us to:

• Send you, or give you access to, the guide you requested.
• Arrange and run a strategy session if you book one.
• Reply to any question you send us.
• Email you about the guide and related services — but only if you ticked the box saying you're happy for us to. Every such email has an unsubscribe option, and you can withdraw that permission at any time by emailing us.

We do not sell your information, and we do not share it with third parties for their own marketing. Our lawful bases under UK GDPR are: performing the steps you ask us to take (delivering a guide, arranging a call you booked); our legitimate interest in running the website securely and replying to enquiries; and your consent for any follow-up marketing email, which you give by ticking the box on the form and can withdraw whenever you like.

Third-party services we use

Three external services process information on our behalf when you visit this site or use its forms and booking links:

• Vercel hosts the website and keeps the standard web logs described above. See the Vercel privacy policy.
• Formspree handles form submissions (the guide request form). See the Formspree privacy policy.
• Calendly handles strategy-session bookings. When you choose a time, you're using their site and their privacy notice applies.

These providers are based in, or store data in, the United States. We rely on their published UK GDPR safeguards for that transfer — the UK Addendum to the EU Standard Contractual Clauses, or certification under the UK-US Data Bridge where the provider holds it — and each acts only on our instructions as a processor.

We also link out to external sites such as LinkedIn. When you follow a link off this site, that site's own privacy policy applies.

Analytics and cookies

This site does not load advertising cookies or marketing pixels. If we add analytics in future, we'll use a privacy-respecting, cookie-free tool and update this section to name it.

Business contacts and prospects

We also hold personal information about people we deal with in business, not only people who use this website: contacts at our clients, suppliers and partners; people we meet at events or are introduced to; and people at businesses we think our services could help (our "prospects").

• What we hold. Your name, job title and the organisation you work for; your work email address, phone number and business address; your professional profile, such as LinkedIn; and a record of our conversations and emails with you, including anything you've told us about whether you want to hear from us.
• Where it comes from. Mostly from you — when you email or call us, swap details at an event or book a call. Otherwise from someone who introduces us, or from public business sources: your organisation's website, LinkedIn and the Companies House register.
• What we use it for. To manage our working relationship with you and your organisation, to keep a record of what we've discussed, and to tell you about our services where we reasonably think they're relevant to your role or business.
• Our lawful basis. Our legitimate interest in running and growing the business — keeping in touch with the people we work with, and letting relevant businesses know what we do. We contact you only in your business capacity, about things relevant to your work. Where the law needs your permission before we email you about our services (for example, if you're a sole trader or in a partnership), we ask for it first.
• Who handles it. We keep these details in our business email and the online tools we use to run the company. The providers of those tools process it on our behalf, under contracts that require them to keep it secure; where they're based outside the UK, the safeguards described above apply. We don't sell it or share it with anyone for their own marketing.

You can tell us to stop at any time. If you'd rather we didn't contact you, reply to any email from us or use the contact details at the end of this page, and we'll stop. We then keep only your name and contact details on a "do not contact" list, so we don't get in touch again by mistake.

How long we keep information

Guide requests and enquiries are kept for up to 24 months from your last contact with us. Business-contact and prospect details are kept for up to 24 months from when we got them or last heard from you, whichever is later. After that they're deleted, unless we've ended up working together — then they're kept as part of our business records for as long as that relationship lasts and for the period afterwards that UK tax and company law requires. If you've asked us not to contact you, we keep only what we need to make sure we don't. If you'd like us to delete what we hold sooner, just ask.

How we keep it safe

The site is served over HTTPS only, uses a strict content-security policy, and sets no tracking cookies. Form data goes directly to the processors named above over encrypted connections; we don't run our own database of visitor details. Access to the inboxes and accounts that receive your details is limited to the two founders.

Your rights

Under UK data-protection law, you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete information we no longer need to hold.
• Ask us to stop using your information for a specific purpose.
• Tell us to stop marketing to you at any time, including withdrawing any consent you've given — reply to any email we send, or use the unsubscribe link in it.
• Ask for a copy of your information in a portable format.
• Complain if you're unhappy with how we've handled your information. Please tell us first so we can put it right — we'll acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office.

Contact

For anything relating to this policy, email info@cloudburstai.co.uk. You can also write to us at CloudburstAI Ltd, 19 Upper King Street, Norwich, NR3 1RB.

Changes to this notice

We may update this page from time to time. The "Last updated" date at the top changes when we do.