Who we are
Attercop ("we", "our", or "us") is committed to protecting your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This policy explains how we collect, use, and protect your personal data when you visit our website.
1. Data We Collect
We only collect personal data when you:
- Subscribe to our AI Threads newsletter (email address)
- Request downloadable resources such as our PE AI Playbook (name, job title, company, country, email address)
- Fill out our enquiry form (name, company name, email address, and your message)
We do not collect or process special category (sensitive) data.
2. Lawful Basis for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- Legitimate Interests – We process personal data based on our legitimate business interests in:
- Providing AI consultancy services, products, and resources to business customers
- Sending marketing communications about our services, products, and events that are relevant to your professional role
- Building and maintaining business relationships with organisations in our target sectors
We primarily communicate with business email addresses (not personal email addresses) and our marketing is B2B-focused, targeting professionals in roles relevant to AI strategy and implementation. We have conducted a Legitimate Interest Assessment to ensure our interests are balanced against your rights and freedoms.
- Consent – When you subscribe to our AI Threads newsletter or opt in to receive marketing communications, you may provide explicit consent. However, we may also send you relevant business communications based on legitimate interests as described above.
- Contract Performance – When you fill out an enquiry form or request resources, we process your data to respond to your request and provide the information or services you've requested.
Your Right to Object: You have the right to object to processing based on legitimate interests at any time. You can unsubscribe from marketing communications using the unsubscribe link in every email we send, or by contacting us directly.
You can also withdraw consent at any time where processing is based on consent.
3. How We Use Your Data
We use your personal data for the following purposes:
- Marketing Communications: We may send you information about our AI consultancy services, products, resources (such as reports and playbooks), events, and other relevant business communications. This includes our AI Threads newsletter. We send these based on legitimate business interests as described in Section 2, primarily to business email addresses. Every marketing email includes an unsubscribe link allowing you to opt out at any time.
- Resource Delivery: When you request downloadable resources (such as our PE AI Playbook), we use your contact details to deliver the resource and may follow up with related information that we believe would be valuable to you in your professional role.
- Enquiry Response: When you fill out our enquiry form, we process your data to respond to your message and provide information about our services.
- Service Delivery: To provide AI consultancy services, maintain client relationships, and fulfil contractual obligations.
Third-Party Service Providers: We use third-party email service providers (such as SendGrid) to manage and send communications, ensuring compliance with UK GDPR. We also use secure database services (such as Supabase) to store subscriber information. These providers are bound by data processing agreements and only process your data on our instructions.
We never sell, rent, or share your data with third parties for their own marketing purposes.
4. How Long We Keep Your Data
We will only retain your personal data for as long as necessary for the purposes set out in this policy:
- Marketing Contacts and Newsletter Subscribers: Until you unsubscribe or object to processing. We periodically review our contact lists to remove inactive contacts.
- Resource Download Requests: We retain contact details to deliver resources and send follow-up communications until you unsubscribe or the legitimate interest no longer applies.
- Enquiry Form Submissions: Up to 6 months after responding to your request, unless further engagement or a business relationship develops.
- Client Data: For the duration of our business relationship and up to 6 years afterwards for legal and regulatory purposes.
You can request deletion of your data at any time, subject to any legal obligations we have to retain certain information.
5. Data Storage and Security
We take all necessary security measures to protect your data, including encryption, access controls, and secure third-party services.
If we transfer data outside the UK or EEA (e.g., if our third-party provider stores data internationally), we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) or UK GDPR adequacy decisions.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to Access – Request a copy of the data we hold about you
- Right to Rectification – Request correction of inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten") – Request deletion of your data in certain circumstances
- Right to Restrict Processing – Request that we limit how we process your data
- Right to Data Portability – Request to transfer your data to another provider
- Right to Object – You have an absolute right to object to processing based on legitimate interests, including for marketing purposes. You can exercise this right at any time by clicking the unsubscribe link in any marketing email we send, or by contacting us directly. We will stop processing your data for marketing purposes immediately upon receiving your objection.
- Right to Withdraw Consent – Where we process your data based on consent, you can withdraw your consent at any time (e.g., by unsubscribing from our newsletter using the link provided in emails)
How to Exercise Your Rights:
- Unsubscribe from Marketing: Click the unsubscribe link in any email we send
- Other Rights: Contact us at hello@attercop.com
We will respond to your request within one month. In some cases, we may need to verify your identity before actioning your request.
If you believe we have mishandled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.
7. Cookies
We use cookies to improve your browsing experience. By using our website, you consent to our use of cookies unless you disable them in your browser settings.
8. Contact Us
If you have any questions about this policy or your data, please contact us:
Email: hello@attercop.com
