Legal
Privacy Policy
Last updated: 18 April 2026
Who we are
Quilliam AI is the trading name of Quilliam AI Ltd, a UK private limited company registered in England and Wales (Companies House number 17151006), with registered office at 25 Red Cove Close, St. Eval, Wadebridge, Cornwall, PL27 7GB. We are a UK AI agency offering AI workflow, supervised agent, and adoption services to businesses nationwide. When this policy mentions “we”, “us”, or “our”, it refers to Quilliam AI Ltd.
Contact: levi@quilliam.ai
What data we collect
We collect the following information when you use our website or services:
- Contact form submissions— your name, email address, phone number (if provided), business name, and message content.
- Analytics data— usage data such as pages visited, buttons clicked, time on site, and referring URL. With your consent, we also record browsing sessions (with passwords masked). See the Cookies section below.
- Communication records— emails, WhatsApp messages, or other correspondence you send us.
- Business contact information— when we research potential clients, we may collect publicly available business contact details such as name, job title, business email address, and company name from sources including company websites, LinkedIn, and business directories.
How we use your data
We use the data we collect to:
- Respond to your enquiries and booking requests.
- Deliver and improve our AI workflow, agent, and adoption services.
- Send project updates and follow-ups you have requested.
- Understand how visitors use our website so we can improve it.
- Contact businesses we believe may benefit from our services (see “Direct marketing and B2B outreach” below).
We will never sell your data to third parties or use it for unsolicited marketing without your explicit consent.
Legal basis for processing
Under UK GDPR, we process your data on the following bases:
- Consent— when you submit a contact form or reach out to us directly.
- Legitimate interests— to improve our website, understand how our services are used, and to contact businesses that may benefit from our services (see below).
- Contractual necessity— to deliver services you have engaged us for.
Direct marketing and B2B outreach
We occasionally contact businesses we believe may benefit from our services. This is targeted, low-volume outreach to specific companies — not bulk marketing.
Lawful basis:legitimate interests under UK GDPR Article 6(1)(f). We have conducted a legitimate interest assessment and concluded that targeted B2B outreach to publicly listed business contacts is proportionate and minimally intrusive, particularly where the recipient’s business operates in a sector we serve.
Data sources:we collect business contact details from publicly available sources only — company websites, LinkedIn profiles, Companies House filings, and business directories. We do not purchase contact lists or scrape personal email addresses.
Your right to opt out: every outreach email includes a one-click unsubscribe link. We honour all unsubscribe requests promptly and will not contact you again. You can also email levi@quilliam.ai to opt out or request deletion of your data at any time.
Third-party services
We use a limited number of third-party services to operate our business:
- Resend— to deliver transactional emails (booking confirmations). Their privacy policy.
- Vercel — to host this website. Their privacy policy.
We do not use Google Analytics, Facebook Pixel, or any advertising trackers.
PostHog— we use PostHog (EU Cloud, data hosted in Frankfurt) for website analytics and session recordings. PostHog processes data as a processor on our behalf. Their privacy policy.
Data retention
We retain your personal data only for as long as necessary to fulfil the purpose it was collected for:
- Booking enquiries— retained for 12 months after your last interaction, then deleted.
- Client project data— retained for the duration of the engagement plus 24 months.
- Prospecting data— if you ask us to stop contacting you, we delete your contact details within 30 days and add your email to a suppression list to prevent future contact.
- Analytics data— retained for 12 months, then automatically deleted. Session recordings are retained for 30 days.
Your rights
Under UK GDPR, you have the right to:
- Access your personal data we hold.
- Correct inaccurate data.
- Deleteyour data (“right to be forgotten”).
- Restrict or object to processing.
- Data portability— receive your data in a structured, machine-readable format.
To exercise any of these rights, email us at levi@quilliam.ai. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We will not reduce your rights under this policy without your explicit consent.
Contact
If you have any questions about this privacy policy or how we handle your data, get in touch:
- Email: levi@quilliam.ai
- Registered office: 25 Red Cove Close, St. Eval, Wadebridge, Cornwall, PL27 7GB
- Company No.: 17151006(England & Wales)