Last updated 14 May 2025 

This notice tells you how Illuminate AI Ltd (“Illuminate AI”, “we”, “us”, “our”) looks after the personal data you provide when you visit illuminateai.co.uk, download our resources, buy a course or interact with us for sales or events. 

1. Important information and who we are

Illuminate AI Ltd is the controller of the data described here.
Email (preferred): hello@illuminateai.co.uk
Postal address: 164 Yorkhill Street, Glasgow, G3 8PH, UK 

This notice covers website visitors, prospects, customers, learners and event attendees. Separate notices are provided to staff, job applicants and suppliers. 

2. The data we collect about you

• data you type in a contact form, chatbot or course-checkout page (name, work-email, phone if you give it, company, job title, message) 

• marketing-engagement data (newsletter opens, clicks, unsubscribe status) 

• Teams meeting recordings or transcripts where you knowingly join a recorded session 

• payment references and billing contacts (card numbers go straight to our payment provider and never touch our servers) 

• technical data from your browser (IP address, time-zone, device type, cookie ID – see section 10) 

We do not intentionally collect special-category data or children’s data on this website. 

3. How we collect your data

Direct interactions (forms, e-mails, chat, phone), automated capture (website analytics cookies) and reputable B2B data providers that list corporate-contact details. 

4. How and why we use your data

• To answer your enquiries and schedule demos – our legitimate interest in running a B2B business. 

• To send newsletters, product updates, webinar and event invitations – legitimate interest; there is an unsubscribe link in every message and you can object at any time. 

• To deliver consulting, software or training you purchase – necessary to perform the contract we have with you. 

• To provide online courses and track progress – contract. 

• To process payments and meet tax rules – contract and our legal obligation under UK tax law. 

• To accelerate internal work with an AI assistant – legitimate interest; prompts are retained for 30 days in “privacy mode” and never used to train the model. 

We never use your data for automated decisions that have legal or similarly significant effects. 

5. Marketing and opting out

We send B2B marketing only to corporate addresses that are likely to be relevant to your role. Click “unsubscribe” in any e-mail or write to hello@illuminateai.co.uk and we will stop. 

6. Disclosures of your personal data

We share data with a small number of trusted cloud providers for email delivery, website hosting, payment processing, contract signing, online learning and secure file storage. All suppliers are under contract, comply with recognised security standards (ISO 27001, SOC 2 or PCI-DSS) and act only on our instructions. We do not sell personal data. 

7. International transfers

Some providers operate in the United States. Whenever data leaves the UK it is protected by the UK-approved Standard Contractual Clauses with the UK Addendum, or by Binding Corporate Rules. Details are available on request. 

8. Data security

We protect your data with TLS 1.2+ encryption in transit, AES-256 encryption at rest, single sign-on with multi-factor authentication, role-based access controls and quarterly access reviews. Our information-security management system is audited to ISO 27001 and continuously monitored. 

9. How long we keep your data

• enquiry data – up to twelve months after our last communication 

• dormant marketing contacts – twenty-four months after the last email you opened or clicked, or immediately if you unsubscribe 

• project recordings and AI-generated design artefacts – two years after the project closes 

• finance records – six years after the end of the relevant tax year (legal requirement) 

• AI chat logs – automatically deleted thirty days after creation 

A full retention-and-erasure schedule is available on request. 

10. Cookies

Essential cookies keep the site working. Our cookie banner lets you refuse non-essential cookies. See our separate Cookie Policy for details. 

11. Your legal rights

You may ask us to access, correct, erase, restrict or port your personal data, or to object to our processing. Where we rely on consent (for example, employee voice or avatar volunteers) you can withdraw it at any time. To exercise any right, email hello@illuminateai.co.uk – we’ll respond within one calendar month. You may also complain to the UK Information Commissioner’s Office (ico.org.uk). 

12. Changes to this notice

We may update this notice from time to time. Any changes will appear on this page.