Who we are
AI Consultancy Finder is run by Digital Tactics Ltd, which is the controller of the personal data described here. You can contact us about privacy at [email protected].
If you read this site
We hold no personal data about you. The site has no accounts, no newsletter and no comments, and it sets no cookies and stores nothing on your device (see our cookies page). The only form is the enquiry form, covered below.
- Visitor numbers. We use Cloudflare Web Analytics to count visits. It sets no cookies, stores nothing on your device and builds no profile of you, and we see only totals. Our lawful basis is legitimate interests: knowing which pages are useful.
- Request logs. Cloudflare, which hosts the site, keeps short-lived logs of requests for running the service and stopping abuse. Our lawful basis is legitimate interests.
Enquiries
Enquiries through this site are opening soon; this section applies once they do. You can send an enquiry to a listed practice from its page. This is what happens to it.
What we collect. Your name, work email address, organisation, phone number if you give it, the service you need, your budget and timeline, and your message. We also record when you sent it, which version of the notice you saw, whether the practice's minimum project matches your budget, the domain of your email address, how many links your message contains, and a scrambled (hashed) form of your internet address that cannot be turned back into the address.
Confirming your email address. We first email you a link. The practice gets nothing until you open the link and press "Confirm and send". If you don't confirm within 24 hours, we delete the enquiry. The confirmation email contains nothing you typed, only the practice's name, the service and a reference.
What we use it for, and why.
- Sending the confirmation email, and then passing your enquiry to the practice so it can reply to you. Our lawful basis is contract: you asked us to make the introduction.
- Checking an enquiry is genuine and stopping abuse (the hashed internet address, the link count and spam checks), and keeping a record of the enquiry that may be used to decide whether the practice is charged for it, to settle any dispute about that charge, and to produce statistics that identify no one. Our lawful basis is legitimate interests: running the service fairly and keeping it free of spam. We have assessed these interests against yours.
Who receives it. The practice you chose. Once we have sent it, the practice holds its own copy and is responsible for it as its own controller, and it should use your details only to reply to you. When you enquire with Digital Tactics, the practice and AI Consultancy Finder are the same company, Digital Tactics Ltd. Digital Tactics staff run the platform and can technically see every enquiry. Our policy limits that access to operations (abuse, rights requests and, later, disputes), and we don't use other practices' enquiries for Digital Tactics' own sales.
Spam protection. The enquiry page uses Cloudflare Turnstile to check that a person, not a program, is sending the form. Turnstile runs only on enquiry pages and processes signals from your browser and device under Cloudflare's own terms. We don't receive those signals, only a pass or fail.
Who helps us. Cloudflare hosts the site and stores enquiries in its database (in western Europe). Resend sends our emails and keeps a log of each one for up to 30 days. Cloudflare keeps short-lived logs of requests to run the service; our own logs record references and error codes, never your details or message.
How long we keep it.
- An enquiry you don't confirm: deleted within 24 hours of the link expiring.
- The hashed internet address: deleted 30 days after we send the enquiry to the practice.
- Everything else: 2 years after you sent it, after which we remove your details and your message and keep only statistics that identify no one.
- Backups: copies of our database are kept for up to 35 days, and Cloudflare's database history for about 30 days, so a deletion takes full effect once those copies expire.
Your rights. Email [email protected], as below. If you ask us to delete an enquiry, we delete your details from our records and tell you which practices received it, so you can contact them too, because each holds its own copy.
If you email us
Email to any of our addresses, such as hello@, privacy@ or billing@, is passed on by Cloudflare, which hosts the site, to a Digital Tactics inbox run on Microsoft 365. Cloudflare only passes the email on and doesn't keep a copy. Our reply may come from a Digital Tactics email address.
We use your name, email address and message to deal with what you wrote about: a question, a complaint, a privacy request, a billing query or a security report. We keep them only for as long as we need to do that, except that:
- we keep a record of a complaint or a request to take something down for 2 years, as our complaints procedure explains
- we keep a whistleblowing report for 2 years after the matter closes, in a private file only our founder can open, as our whistleblowing policy explains
- we keep a record of a privacy request, and how we handled it, for as long as we need to show we dealt with it properly.
If you ask us to tell you when the directory opens, we use your email address for that and nothing else. Our lawful basis is legitimate interests: answering the person who wrote to us. Keeping records of complaints and privacy requests is also a legal obligation.
Our authors
Each author's page shows their name, photo, biography, LinkedIn profile and credentials. We publish these only with the author's consent, which we record. An author can withdraw consent at any time by emailing [email protected], which goes to our founder, Chris Dean. We act on it within 1 month: we remove their profile, and each of their articles is either taken down or reviewed again and credited to another named member of staff, with a dated note.
Your rights
You can ask us for a copy of the personal data we hold about you, or ask us to correct it, delete it or stop using it. Email [email protected] and we will respond within 1 month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would like the chance to put things right first, so please contact us before you do: our complaints procedure explains how.
Changes to this notice
When the directory opens, consultants and buyers will have accounts, and we will update this notice before then to cover that data. We update the enquiries section before enquiries open. The date at the top of the page shows when it last changed.