Privacy Policy

1. Who We Are

Third Sector AI is a sole trader AI operations consultancy based in the United Kingdom, trading as Third Sector AI. We provide AI implementation support and consultancy services to non-profit organisations, charities, and social enterprises.
For the purposes of UK data protection law, Third Sector AI is the data controller in respect of personal data collected through our website and service delivery.

Contact: hello@thirdSectorAI.co.uk | thirdSectorAI.co.uk

2. What Personal Data We Collect

2.1 Website visitors

Name and email address (if submitted via the contact form or audit widget)
Organisation name and role
Responses to the AI Readiness Audit questionnaire
Technical data: IP address, browser type, device type, pages visited (via analytics cookies, with your consent)

2.2 Clients and prospective clients

Contact details: name, email address, phone number
Organisation details: name, size, sector, registered address
Information provided during Clarity Calls and scoping conversations
Information shared during service delivery, including workflow details and operational data
Payment information (processed by third-party providers — we do not store card details)

2.3 Toolkit purchasers

Name and email address (provided at point of purchase via Gumroad)
Purchase history

3. How We Use Your Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide the services requested
To deliver the AI Readiness Audit report and follow-up recommendations
To fulfil purchases of the AI Self-Help Toolkit
To send service-related communications (booking confirmations, programme updates, handover documents)
To send occasional marketing communications about our services (with your consent, where required)
To improve our website and services
To comply with our legal obligations

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Contract: where processing is necessary to deliver services you have requested or purchased
Legitimate interests: for follow-up communications with prospective clients and to improve our services
Consent: for marketing emails and non-essential cookies
Legal obligation: where required by law

5. Third-Party Services We Use

We use the following third-party platforms that may process your personal data on our behalf:
Gumroad - Payment processing and product delivery for the AI Self-Help Toolkit
Calendly - Booking and scheduling of Clarity Calls
Make.com- Workflow automation (including audit report delivery)
Anthropic API - AI-generated report content (anonymised inputs only)
123-reg / Wix - Website hosting and domain management

We ensure all third-party processors provide appropriate data protection guarantees. We do not sell your personal data to any third party.

6. Data Retention

Enquiry and audit data: retained for 12 months from date of submission
Client data: retained for 6 years from end of engagement (for legal and financial compliance)
Toolkit purchaser data: retained for 3 years from date of purchase
Marketing contact data: retained until you unsubscribe or withdraw consent

7. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data (in certain circumstances)
Object to or restrict processing
Data portability
Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, please contact us at hello@thirdSectorAI.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies. Please see our separate Cookie Policy for full details. You can manage your cookie preferences at any time via the cookie banner on our website.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. We will notify existing clients of material changes by email.