Privacy Policy

Who we are

AIWeekly is a UK-focused AI publication and advisory service. For data-protection queries, or to exercise any of the rights below, email privacy@aiweekly.co.uk.

What we collect and why

We only collect the personal data needed to run the services below. Where you place a paid order, card details are entered on Stripe’s checkout and are processed by Stripe — we never see or store your full card number.

• Newsletter subscribers: email address, subscription source (for example a lead magnet or sign-up form) and subscription date. Used to send the newsletter you asked for. Lawful basis: consent.
• Lead-magnet downloads: email address and the resource requested, which also creates a newsletter subscription. Lawful basis: consent.
• Business enquiries: name, work email, telephone (optional), company name, website, industry, company size, service of interest, a description of your challenge, indicative budget and timescale, plus your consent to be contacted. Used to respond to and qualify your enquiry. Lawful basis: consent and our legitimate interest in responding to enquiries you have initiated.
• Advertising enquiries: name, work email, company, website, product name, campaign objective, placement preference, budget and any additional information you provide. Used to respond to advertising and sponsorship requests. Lawful basis: consent and legitimate interest.
• CRM leads and activities: where an enquiry becomes a prospective client, our team may record contact details, company information, deal notes and activity history (calls, emails, meeting notes) internally to manage the relationship. Lawful basis: legitimate interest in managing our commercial relationships.
• AI Risk Scan: your sector, organisation size and self-assessment answers. You can see your score, risk band and priorities without giving us any contact details. If you additionally request the detailed action plan, we collect the optional qualification details you provide — full name, work email, organisation name, role or job title, telephone (optional), website (optional), the AI tools or use case you described, your primary concern, timescale and indicative budget range. Consent to be contacted about your results and consent to receive marketing are recorded separately: you can ask for the report without agreeing to marketing. Lawful basis: consent.
• Prompt Studio orders: Prompt Studio is not linked from our primary navigation, but the route remains live and accepts orders. If you place one we collect your name, email address, the brief or requirements you submit, the tier and order details, the Stripe payment reference and status, and any correspondence needed to deliver your order. Card details are entered on Stripe’s checkout and processed by Stripe; we receive a payment reference and status, not your card number. Lawful basis: performance of a contract, and our legal obligation to keep transaction records.
• Workspace / organisation accounts: for customers using our governance workspace, we hold account and organisation details and the AI systems, policies, risks and actions you or your team choose to record there, for as long as the workspace is in use. Lawful basis: performance of a contract.
• Tool reviews and article comments: your account email (used to derive a display name), and the content of the review or comment you submit. Lawful basis: consent / legitimate interest in enabling reader engagement.
• Tool claims: name, work email, job title, company website, supporting evidence link and any message provided when a vendor asks us to verify a tool listing. Lawful basis: legitimate interest in verifying listings.
• Surveys: your answers to any survey you choose to complete. Lawful basis: consent.
• Abuse-prevention data: where you submit a public form (enquiries, risk scan, tool claims), we store a one-way cryptographic hash of your IP address, not the IP address itself, so we can rate-limit spam and abuse. We cannot reverse this hash to identify an IP address. Lawful basis: legitimate interest in protecting the service.

How we use your data

• To deliver the newsletter and content you have signed up for.
• To respond to business, advertising and tool-claim enquiries.
• To provide and support workspace accounts for customers of our governance tools.
• To reply to comments and reviews and moderate them where necessary.
• To detect and prevent abuse of our public forms.
• To meet our legal and accounting obligations.

Who we share data with

We do not sell personal data. We share it only with the processors we rely on to run the service:

• Supabase — hosting, database and file storage.
• Resend — sending transactional and newsletter email.
• Stripe — payment processing and checkout for paid orders, including Prompt Studio orders. Stripe processes your card data as a controller in its own right; we receive only a payment reference and status.

We may also disclose data where required by law or to protect our legal rights.

Retention

• Newsletter and lead-magnet data is kept until you unsubscribe or ask us to delete it.
• Business and advertising enquiries and tool claims are kept for as long as reasonably needed to respond and, where a relationship develops, as part of our CRM records.
• Risk Scan answers and scores are kept for service improvement and, where you provided an email and consent, to follow up; you can ask us to delete them at any time.
• Workspace data is kept for the duration of the customer relationship and a reasonable period afterwards, or as agreed in the applicable order.
• Comments and reviews are kept until you or we remove them.
• Records needed for tax and accounting purposes are kept for the period required by law (typically up to six years).

Your rights

Under the UK GDPR you may ask us to access, correct, delete or restrict the personal data we hold about you, to receive a copy in a portable format, and to object to certain processing. Where we rely on your consent — for example the newsletter, Risk Scan or a survey — you can withdraw it at any time, including by using the unsubscribe link in any email or by emailing us. Email privacy@aiweekly.co.uk to exercise any of these rights.

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children

Our services are intended for business and professional audiences and are not directed at children.

Changes to this policy

We may update this policy as our services change. The date at the top shows when it was last revised.