Privacy Policy

1. Who we are

Ayoob AI Ltd ("Ayoob AI", "we", "us") is the data controller for personal data collected through this website (ayoob.ai). We are registered in the United Kingdom and can be contacted at contact@ayoob.ai.

2. What data we collect

We collect personal data only when you voluntarily provide it through our contact form:

• First name and last name
• Work email address
• Company name
• Message content (your enquiry)

We do not collect data from minors and our services are not directed at individuals under 18.

3. How we use your data

We process your personal data for the following purposes:

• To respond to your enquiry — lawful basis: legitimate interest (Art. 6(1)(f) UK GDPR)
• To provide requested services — lawful basis: performance of a contract (Art. 6(1)(b) UK GDPR)
• To comply with legal obligations — lawful basis: legal obligation (Art. 6(1)(c) UK GDPR)

We do not use your data for automated decision-making or profiling.

4. Cookies

We use only essential cookies required for the website to function (e.g. cookie consent preference). We do not use analytics, advertising, or third-party tracking cookies. For full details, see our Cookie Policy.

5. Data sharing

We do not sell your personal data. We may share data with:

• Email service providers — to deliver your contact form submission to our team
• Hosting providers — our website is hosted on infrastructure that may process data on our behalf
• Legal authorities — where required by law

All third-party processors are bound by data processing agreements and process data only on our instructions.

6. International transfers

We operate from the United Kingdom. Where personal data is transferred outside the UK for the purpose of providing our services, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Data retention

We retain contact form data for a maximum of 24 months from the date of submission, or until the enquiry is resolved and any resulting engagement concludes — whichever is later. After this period, data is securely deleted.

8. Your rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email us at contact@ayoob.ai. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect personal data. Ayoob AI holds ISO 27001:2022 certification and Cyber Essentials accreditation. All data is transmitted over encrypted connections (TLS).

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

11. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.