Privacy
Privacy notice
This notice explains what personal information we collect when you visit this site, book a session or fill in our questionnaire, what we do with it, and the choices you have.
Last updated 22 October 2026
Who we are
The AI Opportunity Review is provided by Phil Thomas Tech Ltd, a company registered in England and Wales (company number [company number]), whose registered office is at [registered office address]. Phil Thomas Tech Ltd is the controller of your personal information and is registered with the Information Commissioner's Office (registration number [ICO registration number]).
Reviews are delivered by Phil Thomas and Elliot Lewis, an independent consultant who works with us on the AI Opportunity Review.
For anything about your information, email us at aiopportunityreview@gmail.com.
What we collect
- When you book a session: your name, email address and chosen time. You enter these into Google's booking calendar, which shares them with us.
- When you fill in the questionnaire: your name, email address, business name and role, and your answers about your business, such as its sector, size, the systems it uses, where work is slowest and how it uses AI today.
- During and after your session: notes we take, and the report we write for you.
- When you email us: your contact details and whatever you choose to tell us.
- When you visit the site: technical details such as your IP address and browser, which our hosting provider records for security. If you accept analytics cookies, also how you use the site.
The questionnaire asks about your business, not about you personally. Please don't include anyone else's personal details, or sensitive information such as health details, in your answers.
How we use it, and why we're allowed to
Data protection law says we need a lawful basis for each use of your information. These are ours:
| What for | What we use | Lawful basis |
|---|---|---|
| Arranging your session | Your name, email address and chosen time, from the booking calendar. | Contract: taking steps you've asked for before providing the review. |
| Preparing for and running your review, and writing your report | Your name, email address, business name, role, and your questionnaire answers about your business, its systems and how it uses AI. | Contract: providing the review you've asked for. |
| Replying when you contact us | Your name, email address and whatever you tell us. | Legitimate interests: answering enquiries about our service. |
| Keeping the site and forms secure and free of spam | Your IP address, browser details and the time of your visit. | Legitimate interests: protecting the site and the people who use it. |
| Understanding how the site is used | Pages visited, how you arrived, approximate location and device type, via Google Analytics cookies. | Consent: only if you click Accept on the cookie bar. |
We don't sell your information, use it for automated decision-making, or add you to a marketing mailing list. If you'd like to hear from us after your session, we'll ask first.
Who we share it with
Your information is seen only by Phil Thomas and Elliot Lewis. We use these providers to run the service. They act on our instructions and may only use your information to provide their service to us:
- Google: Booking calendar, email (Gmail, where we receive questionnaire answers), the spreadsheet we use to track bookings, and Google Analytics (only with your consent).
- Resend: Sends our booking confirmations and passes questionnaire answers to our inboxes.
- Vercel: Hosts this website and runs the questionnaire form.
- Cloudflare: Turnstile, a check that stops automated spam on the public questionnaire.
- Microsoft: Email (Outlook), where we also receive questionnaire answers.
We'll only share your information with anyone else if the law requires it, for example with our accountants or a regulator.
Transfers outside the UK
Some of these providers store or process information in the United States or the European Union. Where they do, the transfer is protected by UK adequacy regulations (including the UK–US data bridge) or by the Information Commissioner's approved contract clauses, which require them to protect it to UK standards.
How long we keep it
- Booking details, questionnaire answers, session notes and your report: for 2 years after your session, so we can answer follow-up questions, then deleted. Tell us if you'd like them deleted sooner.
- Emails you send us: for up to 2 years after we last hear from you.
- Google Analytics data: 14 months, after which Google deletes it.
- Hosting security logs: kept by Vercel for a short period, typically a few days.
Cookies
We only use analytics cookies if you click Accept on the cookie bar. If you reject them, or don't choose, Google Analytics doesn't load. You can change your mind any time with Cookie settings at the bottom of every page.
| Name | Set by | What it does | How long |
|---|---|---|---|
| _ga, _ga_* | Google Analytics, only after you accept | Tells visits apart so we can count visitors and see which pages are useful. | Up to 2 years |
| aor-cookie-consent | This site, in your browser's local storage | Remembers whether you accepted or rejected analytics cookies, so we don't ask again. | Until you clear it |
| Google cookies | Google, on the booking page only | Make the embedded booking calendar work, and may recognise you if you're signed in to Google. | Set by Google |
The booking page embeds Google's calendar so you can choose a slot, and Google may set its own cookies there. Google's use of them is covered by Google's privacy policy.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that's wrong or incomplete
- ask us to delete your information
- ask us to limit how we use it, or object to us using it on the basis of our legitimate interests
- ask for the information you gave us in a format you can pass to someone else
- withdraw your consent to analytics cookies at any time
To use any of these rights, email aiopportunityreview@gmail.com. It's free, and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your information, please email us at aiopportunityreview@gmail.com. We'll look into it and reply within one month, and we'll do our best to put things right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator.
Changes to this notice
If we change how we use your information, we'll update this page and the date at the top.