Legal

Privacy Policy

Last updated: 18 April 2026

Who we are

Quilliam AI is the trading name of Quilliam AI Ltd, a UK private limited company registered in England and Wales (Companies House number 17151006), with registered office at 25 Red Cove Close, St. Eval, Wadebridge, Cornwall, PL27 7GB. We are a UK AI agency offering AI workflow, supervised agent, and adoption services to businesses nationwide. When this policy mentions “we”, “us”, or “our”, it refers to Quilliam AI Ltd.

Contact: levi@quilliam.ai

What data we collect

We collect the following information when you use our website or services:

  • Contact form submissions— your name, email address, phone number (if provided), business name, and message content.
  • Analytics data— usage data such as pages visited, buttons clicked, time on site, and referring URL. With your consent, we also record browsing sessions (with passwords masked). See the Cookies section below.
  • Communication records— emails, WhatsApp messages, or other correspondence you send us.
  • Business contact information— when we research potential clients, we may collect publicly available business contact details such as name, job title, business email address, and company name from sources including company websites, LinkedIn, and business directories.

How we use your data

We use the data we collect to:

  • Respond to your enquiries and booking requests.
  • Deliver and improve our AI workflow, agent, and adoption services.
  • Send project updates and follow-ups you have requested.
  • Understand how visitors use our website so we can improve it.
  • Contact businesses we believe may benefit from our services (see “Direct marketing and B2B outreach” below).

We will never sell your data to third parties or use it for unsolicited marketing without your explicit consent.

Legal basis for processing

Under UK GDPR, we process your data on the following bases:

  • Consent— when you submit a contact form or reach out to us directly.
  • Legitimate interests— to improve our website, understand how our services are used, and to contact businesses that may benefit from our services (see below).
  • Contractual necessity— to deliver services you have engaged us for.

Direct marketing and B2B outreach

We occasionally contact businesses we believe may benefit from our services. This is targeted, low-volume outreach to specific companies — not bulk marketing.

Lawful basis:legitimate interests under UK GDPR Article 6(1)(f). We have conducted a legitimate interest assessment and concluded that targeted B2B outreach to publicly listed business contacts is proportionate and minimally intrusive, particularly where the recipient’s business operates in a sector we serve.

Data sources:we collect business contact details from publicly available sources only — company websites, LinkedIn profiles, Companies House filings, and business directories. We do not purchase contact lists or scrape personal email addresses.

Your right to opt out: every outreach email includes a one-click unsubscribe link. We honour all unsubscribe requests promptly and will not contact you again. You can also email levi@quilliam.ai to opt out or request deletion of your data at any time.

Third-party services

We use a limited number of third-party services to operate our business:

  • Resend— to deliver transactional emails (booking confirmations). Their privacy policy.
  • Vercel — to host this website. Their privacy policy.

We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

PostHog— we use PostHog (EU Cloud, data hosted in Frankfurt) for website analytics and session recordings. PostHog processes data as a processor on our behalf. Their privacy policy.

Data retention

We retain your personal data only for as long as necessary to fulfil the purpose it was collected for:

  • Booking enquiries— retained for 12 months after your last interaction, then deleted.
  • Client project data— retained for the duration of the engagement plus 24 months.
  • Prospecting data— if you ask us to stop contacting you, we delete your contact details within 30 days and add your email to a suppression list to prevent future contact.
  • Analytics data— retained for 12 months, then automatically deleted. Session recordings are retained for 30 days.

Your rights

Under UK GDPR, you have the right to:

  • Access your personal data we hold.
  • Correct inaccurate data.
  • Deleteyour data (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability— receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at levi@quilliam.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Cookies

When you first visit our website, we show a cookie consent banner. You can choose to accept or reject non-essential cookies.

  • If you accept— we set cookies and use localStorage to track your session across pages and visits. This enables session recordings (a replay of how you interacted with the site, with passwords masked) and persistent analytics that help us improve the website. We use PostHog for this, hosted on EU infrastructure (Frankfurt).
  • If you reject— we do not set any cookies or use localStorage for tracking. Analytics events (page views, button clicks) are still captured in memory during your visit but cannot be linked across sessions or identified to you. Session recordings are disabled.

Your preference is stored in your browser’s localStorage. To change your preference, click “Manage Cookies” in the footer of any page — the consent banner will reappear.

We do not use any advertising cookies, third-party tracking pixels, or retargeting tools.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We will not reduce your rights under this policy without your explicit consent.

Contact

If you have any questions about this privacy policy or how we handle your data, get in touch:

  • Email: levi@quilliam.ai
  • Registered office: 25 Red Cove Close, St. Eval, Wadebridge, Cornwall, PL27 7GB
  • Company No.: 17151006(England & Wales)