Privacy Policy

1. Who I Am

This website is operated by Conrad Annan, trading as Conrad Annan AI Consulting, based in High Barnet, London, United Kingdom.

Contact: mrannan@outlook.com

2. What Data I Collect

I collect information you voluntarily provide through:

• Enquiry form (/enquiry): name, email, phone number, company, details about your project or challenge, service interest, timeline, and budget range
• Contact form: name, email, service interest, and message
• AI Tool (/tool): the task description and context you submit for analysis
• Newsletter signup: email address

3. How I Use Your Data

Your data is used exclusively to:

• Respond to your enquiry with a personalised recommendation
• Deliver the service you have requested
• Send you relevant updates if you have opted in to the newsletter
• Improve the AI analysis tool (anonymised usage patterns only)

I will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK GDPR, I process your data on the following bases:

• Consent: when you submit an enquiry or sign up for the newsletter
• Legitimate interest: to respond to your enquiry and deliver services
• Contractual necessity: to fulfil a service agreement

5. Data Storage & Security

Your data is stored securely using:

• Supabase (database): hosted on AWS EU infrastructure with encryption at rest and in transit
• Vercel (website hosting): EU/UK data processing with SOC 2 Type II compliance
• Anthropic Claude API (AI tool only): your submissions are processed in real-time and are not stored by Anthropic under their API terms (zero-retention policy)

I implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

6. Data Retention

• Enquiry data: retained for 24 months after your last interaction, then deleted
• Newsletter subscribers: retained until you unsubscribe
• AI tool submissions: retained for 12 months for service improvement, then anonymised

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Port your data to another service
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, email mrannan@outlook.com. I will respond within 30 days.

8. Cookies & Analytics

This website uses:

• Google Analytics 4: to understand how visitors use the site. This uses cookies to collect anonymised usage data. You can opt out using your browser settings or a Google Analytics opt-out extension.
• Essential cookies: for theme preference (light/dark mode) stored in localStorage. These do not track you.

No advertising cookies or third-party tracking pixels are used.

9. Third-Party Services

10. Children

This website and its services are not directed at individuals under 18. I do not knowingly collect data from children.

11. Changes to This Policy

I may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email to existing clients.

12. Complaints

If you have concerns about how your data is handled, please contact me first at mrannan@outlook.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.