Privacy notice

This notice covers personal data WhyLearn AI Ltd handles as a controller: what you send us through this website or by email, and the contact details we hold for people at organisations we work with or speak to.

It does not cover client data we handle under contract. In those engagements the client is the controller and we are the processor, acting only on their written instructions under a data processing agreement signed before any access is granted. That agreement sets out what we may do with the data, where it may be processed, who else may see it, and when it is deleted.

Who we are

WhyLearn AI Ltd, registered in England and Wales, company number 16845311, registered office Highland House, 165 The Broadway, Wimbledon, London SW19 1NE. For anything in this notice, write to contact@whylearn.ai.

What we collect, and why

Enquiries. When you write to us we hold your email address, whatever contact details you include, and whatever you choose to put in the message. From the enquiry form that is the name, organisation, email address and size band it asks for, plus your message. We use it to answer you and, if a conversation follows, to carry it on. The lawful basis is legitimate interests: responding to somebody who has approached us about our services.

Business contacts. During an engagement we hold work contact details for the people we deal with, on the same basis.

Server logs. Our hosting provider records standard request information, including your IP address, when a page is served. We use that to keep the site available and secure, on the basis of legitimate interests. The enquiry form separately counts how many messages have come from one address in the last few minutes, so that automated abuse can be slowed down. That count is held in memory for ten minutes and written nowhere, and your address does not appear in the enquiry we receive. None of it is used to build a profile of you, and nothing on this site makes an automated decision about anyone.

Cookies, analytics and third parties

This site sets no cookies. It runs no analytics, no advertising and no tracking of any kind. That is why you were not asked to consent to anything.

It loads nothing from a third-party server either. Fonts, images and scripts are served from this domain rather than from a content delivery network, so loading a page here does not reveal your IP address to anybody but our host. A firm that builds AI on other people’s data ought to be able to say that of its own website.

Who else sees it

Our hosting provider, and the email provider that carries our mail. Both act as processors on our instructions. We do not sell personal data and we do not share it for anyone else’s marketing.

The enquiry form on the contact page posts to this site’s own server rather than to a form service, so nobody else receives what you type. The message is then delivered into our own mailbox through Microsoft 365, which is already the provider carrying our mail and is named above. Sending it that way adds no processor beyond the two in this section, so we do it that way rather than through a service built for the purpose.

Some of these providers are based outside the United Kingdom, so your data may be transferred there. Where that happens it is covered by the UK Addendum to the European Commission’s standard contractual clauses, or by an adequacy decision where one applies. Ask us and we will send you the detail.

How long we keep it

Enquiries that do not lead anywhere are deleted within twelve months. Where a conversation becomes an engagement, contact records are kept for the life of the relationship and for six years afterwards, the period over which contractual claims can be brought. Server logs sit with our host and are deleted on their schedule, which we do not set. We do not copy them anywhere. Where we hold a work contact detail that came from a colleague or a public listing instead of from you, we will tell you within one month of first using it.

Your rights

You can ask for a copy of what we hold about you. You can ask us to correct it, delete it or restrict what we do with it, and you can object to our processing it on the basis of legitimate interests. Write to contact@whylearn.ai and we will respond within one month.

If you are not satisfied with how we have handled it you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you raised it with us first, but you do not have to.

Changes

If we change this notice, we will change the review date at the top. Where a change materially affects people whose data we already hold, we will tell them directly.