Last Updated: 22/04/2026

1. Introduction
Welcome to fortysix ai ltd ("we", "us", or "our"). We are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit our website [www.fortysixai.com] (the "Website") and use our services. We comply with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). By accessing or using our Website, you acknowledge that you have read, understood, and agree
to be bound by this Privacy Policy.

2. Important Information and Who We Are
Controller
fortysix ai ltd is the data controller responsible for your personal data.
Contact Details
If you have any questions about this Privacy Policy or our data protection practices, please
contact us at:
 Company Name: fortysix ai ltd
 Email Address: hello@fortysixai.com
 Phone Number: 07897749526
 Registered Office Address: fortysix ai ltd, 52 Leicester Street, Bulkington, CV21 9NG
Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office
(ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would
appreciate the opportunity to address your concerns before you approach the ICO, so please
contact us in the first instance.

3. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you:
 Identity Data: First name, last name, business name.
 Contact Data: Email address, telephone number, business address.
 Technical Data: IP address, browser type and version, time zone setting, browser plug-in
types and versions, operating system, and platform.
 Usage Data: Information about how you use our Website.

 Marketing and Communications Data: Your preferences in receiving marketing from us
and your communication preferences.
We also collect, use, and share Aggregated Data such as statistical or demographic data for any
purpose. This data does not directly or indirectly reveal your identity.

4. How We Collect Your Personal Data
We use different methods to collect data from and about you:
 Direct Interactions: You may provide Identity and Contact Data by filling in forms, using
our booking tools (e.g., Microsoft Bookings, LinkedIn), or by corresponding with us via
email or phone.
 Automated Technologies: As you interact with our Website, we may automatically collect
Technical Data using cookies and similar technologies.
 Third Parties: We may receive Technical Data from analytics providers like Google
Analytics and Meta Pixel.

5. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your
personal data in the following circumstances:
 To Perform a Contract: Processing necessary to perform a contract with you.
 Legitimate Interests: Processing necessary for our legitimate interests (to develop our
services, grow our business, and conduct marketing) and your interests and fundamental
rights do not override those interests.
 Consent: When you have given us explicit consent to process your data.
Purposes for Using Your Data
 Service Delivery: To provide and manage your access to our services, including scheduling
via booking tools.
 Marketing Communications: To send you updates and promotional materials based on
our legitimate interests.
 Website Improvement: To improve our Website and user experience.
 Analytics and Research: To analyse data using third-party tools (including AI tools) to
improve our services.
 Advertising and Retargeting: To deliver relevant advertisements to you.

6. How We Use Artificial Intelligence (AI)
As an AI consultancy, we use various AI tools and platforms to deliver our services, analyse data,
and improve our operations. We are committed to using AI responsibly and transparently.
Data Processing in AI Tools
We use AI tools for tasks such as data analysis, content generation, and CRM management.
When processing personal data within these tools, we adhere strictly to the UK GDPR principle
of data minimisation, ensuring that only the personal data strictly necessary for the specific task is processed. While we use paid, secure AI tools, personal data may be processed within
these environments to deliver our services to you.
Human Oversight
We do not use AI to make fully automated decisions that have a legal or similarly significant
effect on you. All significant outputs generated by AI tools are subject to human review and
oversight by our team.
Approved Tools
We maintain an internal data processing register of all approved third-party tools, including AI
platforms. We ensure that any AI tool we use complies with UK GDPR requirements and
provides adequate security for your data.

7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
 Essential Cookies: Necessary for Website functionality.
 Analytical/Performance Cookies: Help us understand Website usage.
 Functionality Cookies: Remember your preferences.
 Targeting Cookies: Record your visit and preferences for advertising purposes.
We use third-party services like Google Analytics and Meta Pixel for analytics and advertising.
Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling cookies
may affect your ability to use certain features of our Website.

8. Disclosure of Your Personal Data
We may share your personal data with the following categories of third parties:
 Service Providers: Including analytics providers, marketing platforms, email services, and
booking tools (e.g., Microsoft Bookings).
 Technology and AI Platforms: Third-party software and AI tools used for data analysis,
CRM, and operational efficiency.
 Legal Authorities: If required by law or to protect our rights.
We do not sell or rent your personal data to third parties. A full list of our third-party processors
is available upon request.

9. International Data Transfers
Some of our external third-party service providers (including analytics providers, booking tools,
and AI platforms) are based outside the UK and the European Economic Area (EEA). Therefore,
their processing of your personal data will involve a transfer of data outside the UK/EEA.

Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of
protection is afforded to it by ensuring at least one of the following safeguards is implemented:
 We will only transfer your personal data to countries that have been deemed to provide an
adequate level of protection for personal data.
 Where we use certain service providers, we may use specific contracts approved for use in
the UK which give personal data the same protection it has in the UK (e.g., Standard
Contractual Clauses or the UK Addendum).

10. Data Security
We implement appropriate security measures to protect your personal data:
 Secure Servers: Data stored on secure cloud servers.
 Access Controls: All data access is password-protected and restricted to authorised
personnel.
 Two-Factor Authentication: Additional security layer for logins to our systems and third-
party tools.
 No Local Storage: Personal data is not stored on local devices where possible.

11. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes
we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting,
or reporting requirements.
Typically, we retain your personal data for four years from the date of our last interaction with
you, or until you actively opt-out, whichever comes first. After this period, we will securely
delete or anonymise your data.

12. Your Legal Rights
Under data protection laws, you have rights including:
 Access: Request access to your personal data.
 Correction: Request correction of inaccurate data.
 Erasure: Request deletion of your data.
 Restriction: Request restriction of processing your data.
 Objection: Object to processing of your data (including where we rely on legitimate
interests).
 Data Portability: Request transfer of your data to you or a third party.
 Withdraw Consent: Withdraw consent at any time (where we rely on consent).
 Human Intervention: The right to request human intervention, express your point of
view, and contest decisions based solely on automated processing.
To exercise these rights, contact us at hello@fortysixai.com.

13. Opting Out of Marketing Communications
You can ask us to stop sending you marketing messages at any time by:

 Clicking the "unsubscribe" link in any marketing email we send you.
 Contacting us at hello@fortysixai.com.

14. Children's Privacy
Our Website is intended for adults and businesses. We do not knowingly collect data from
individuals under 16 years of age.

15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology
(including AI usage), or legal requirements. Changes will be posted on this page and, where
appropriate, notified to you by email.

16. Contact Us
For questions or concerns about this Privacy Policy, please contact us:
 Email: hello@fortysixai.com
 Phone: 07897749526
 Address: fortysix ai ltd, 52 Leicester Street, Bulkington, CV21 9NG