Privacy Policy

1. Who we are

AI Value Worx is a joint venture between Goal Atlas Ltd and weareCrank Ltd (“we”, “us”, “our”). We help organisations identify AI initiatives, commit to them, and realise value from them through a specifications-led advisory service.

For data protection enquiries, contact us at mike@aivalueworx.com or peter@aivalueworx.com.

2. What data we collect

We collect the following categories of personal data:

Information you provide directly

• Name, email address, and job title when you contact us via the website contact form or email
• Organisation name and context you choose to share in enquiries or engagements
• Communications you send us via email or contact forms

Information collected automatically

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Pages visited, time spent, and interaction patterns on our website
• Referral source (how you reached our site)

3. How we use your data

We process your personal data for the following purposes:

• Delivering our service: Responding to enquiries, scoping engagements, and delivering advisory work
• Communication: Responding to contact form submissions, scheduling conversations, and providing updates during engagements
• Improving our service: Analysing aggregate usage patterns to improve the website and our materials
• Legal compliance: Meeting our obligations under applicable law

4. Legal basis for processing

We rely on the following legal bases under UK GDPR:

• Contract: Processing necessary to deliver the service you have engaged us for
• Legitimate interests: Improving our service and responding to enquiries, provided this does not override your rights
• Consent: Where you have opted in to marketing communications (you can withdraw at any time)

5. Data sharing

We do not sell your personal data. We share data only with:

• Goal Atlas and weareCrank practitioners who are directly involved in delivering your engagement
• Infrastructure and email providers (hosting, analytics, transactional email) who process data on our behalf under appropriate data processing agreements
• Legal or regulatory authorities where required by law

6. Data retention

Contact form submissions and engagement materials are retained for the duration of the enquiry or engagement plus 12 months, unless you request earlier deletion. Website analytics data is retained for 26 months.

7. Data security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and access controls. Our website is hosted on Cloudflare Pages and contact form email is delivered via Resend.

8. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email mike@aivalueworx.com or peter@aivalueworx.com.

9. Cookies

We use essential cookies required for the website to function, including Cloudflare Turnstile for spam protection on the contact form. We may also use analytics cookies to understand how visitors interact with our site. You can manage cookie preferences through your browser settings. We do not use advertising or tracking cookies.

10. International transfers

Your data is primarily processed within the United Kingdom and European Economic Area. Where data is transferred to processors outside the UK/EEA (e.g. cloud infrastructure providers), we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email to active clients and posted on this page with an updated date.