Privacy Policy
Last updated: February 2026
This policy explains what personal data BRB AI collects, how we use it, and what rights you have under UK GDPR. If you have any questions, contact us at hello@brbai.co.uk.
1. Who We Are
BRB AI is an AI automation consulting business registered in England and Wales. We provide AI assessment, automation build, and training services to UK small and medium-sized businesses.
For the purposes of UK GDPR, BRB AI is the data controller for the personal data described in this policy.
2. What Data We Collect
We only collect data that is directly relevant to providing our services or understanding how people use our website. We do not collect data we don't need.
Enquiry and assessment data
When you book an AI Assessment, complete the free audit quiz, or send us a message, we collect your name, email address, business name, and the information you provide about your business and workflows. This is necessary to deliver the service you've requested.
Calendly booking data
When you book a call through Calendly, Calendly collects your name, email, and scheduling preferences on our behalf. Calendly operates as a data processor under our instruction. Their privacy policy is available at calendly.com/privacy.
Website usage data
We use Google Analytics to understand how visitors use our website — which pages are visited, how long people spend on them, and where traffic comes from. This data is anonymised and aggregated. It does not identify you personally. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.
Contact form data
If you contact us directly via email or a contact form, we retain your name, email address, and the content of your message in order to respond to your enquiry.
Cookies
Our website uses cookies to function and to collect analytics data. These include essential cookies (required for the site to work) and analytics cookies (Google Analytics). You can control cookie preferences through your browser settings.
3. How We Use Your Data
We use the data we collect for the following purposes:
- Delivering the AI Assessment, automation builds, training, or other services you have purchased or enquired about
- Sending you your assessment report, deliverables, and any follow-up communications related to your engagement
- Responding to enquiries and messages you send us
- Improving our website and understanding what content is most useful to visitors
- Meeting our legal and contractual obligations
Our lawful basis for processing your personal data is typically contract performance (where you have engaged us for a service) or legitimate interests (where we process data to understand and improve our website). We will only send you marketing communications if you have given explicit consent, and you can unsubscribe at any time.
4. Who We Share Data With
We do not sell your personal data. We share it only with trusted third-party tools that help us run our business, and only to the extent necessary.
| Provider | Purpose |
|---|---|
| Calendly | Scheduling discovery and assessment calls |
| Google Analytics | Anonymous website traffic analysis |
| Google Workspace | Email communication and document delivery |
All third-party providers are required to handle your data in accordance with applicable data protection law. Where providers are based outside the UK, we ensure appropriate safeguards are in place.
5. How Long We Keep Your Data
We keep your data for as long as necessary to deliver the services you've engaged us for, meet our legal obligations, or resolve disputes.
- Client data from paid engagements is retained for 6 years from the end of the engagement, in line with UK tax and legal requirements.
- Enquiry data from contacts who did not proceed to a paid engagement is deleted after 12 months.
- Website analytics data is retained in anonymised, aggregated form and does not have a fixed deletion schedule.
6. Your Rights Under UK GDPR
You have the following rights in relation to your personal data. To exercise any of them, contact us at hello@brbai.co.uk. We will respond within 30 days.
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your personal data, subject to legal obligations.
Right to restrict processing
Ask us to limit how we use your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests, including direct marketing.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
7. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include using secure, industry-standard services for email and document storage and limiting access to personal data to those who need it to deliver our services.
No method of transmission over the internet is completely secure. If you have concerns about a specific data security issue, contact us immediately at hello@brbai.co.uk.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we will notify active clients by email. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
9. Contact
For any questions about this policy or how we handle your data, contact us at hello@brbai.co.uk. We aim to respond to all data-related enquiries within 30 days.