Last updated 29 October 2026
Privacy policy
This policy explains what personal data AI360 LTD collects when you visit ai360group.com, book a consultation or work with us, why we use it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
AI360 LTD (“AI360”, “we”, “us”) is the controller of your personal data. Our address is 86–90 Paul Street, London, EC2A 4NE, United Kingdom. For any question about this policy or your data, email info@ai360group.com.
2. The data we collect
Data you give us
- Enquiries. Your name, email address and anything else you include when you email us or contact us on social media.
- Consultation bookings. When you book a call through our Calendly page, the name, email address, company details and answers you enter there, and the date and time of the meeting.
- Client and training work. Business contact details of you and your colleagues, billing details, and the business information you share with us during an assessment, project or training programme.
Data collected automatically
Our hosting provider records standard technical logs when you load the site, such as your IP address, browser type, the pages requested and the time of the request. These are used to keep the site running and secure.
We do not use advertising or analytics cookies, and the site does not set any cookies of its own. Our fonts are served from our own domain, so loading a page does not send your data to a font provider. If we introduce analytics or other cookies in the future, we will update this policy and ask for your consent where the law requires it.
3. How we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and arranging consultations | Legitimate interests (responding to people who contact us) or steps taken at your request before entering a contract |
| Delivering assessments, software, training and support to clients | Performance of a contract |
| Invoicing, accounting and keeping business records | Legal obligation |
| Occasional updates about our services sent to business contacts | Legitimate interests, or your consent where the law requires it. You can opt out at any time. |
| Keeping the website secure and working properly | Legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests |
We do not sell your personal data, and we do not make decisions about you based solely on automated processing.
4. AI tools and client data
Where a project involves processing your business data with AI tools, we agree the scope with you first. We use business-grade services that are bound by contract to process data only on our instructions, and we do not allow your data to be used to train third-party models. Where we process personal data on your behalf as a processor, the terms of that processing are set out in our agreement with you.
5. Who we share data with
We share personal data only where necessary, with:
- service providers who support our business, such as website hosting, email, scheduling (Calendly), video-conferencing, cloud storage and accounting providers, all of whom act on our instructions;
- professional advisers such as accountants, lawyers and insurers;
- regulators, law enforcement or other authorities where the law requires it; and
- a buyer or successor if our business is reorganised, sold or merged.
The site links to LinkedIn, YouTube, Trustpilot, Google Maps and Calendly. When you follow those links, the third party’s own privacy policy applies.
6. International transfers
Some of our service providers store or process data outside the UK. Where they do, we make sure the transfer is protected, for example because the country has UK adequacy regulations or because we use the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep data
- Enquiries and consultation bookings that do not lead to work: up to two years after our last contact.
- Client, contract and financial records: six years after the end of the financial year in which the engagement ended, to meet tax and legal requirements.
- Technical logs: kept by our hosting provider for a short period, normally no longer than 30 days.
When data is no longer needed, we delete or anonymise it.
8. Security
We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections and reputable service providers. No system is completely secure, but we will notify you and the Information Commissioner’s Office where the law requires us to after a data breach.
9. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to processing based on our legitimate interests, including direct marketing;
- receive your data in a portable format, where processing is based on consent or a contract; and
- withdraw consent at any time, where we rely on it.
To use any of these rights, email info@ai360group.com. We will reply within one month, and there is normally no charge.
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10. Children
This website is intended for businesses and adults. We do not knowingly collect personal data from children through it. Where we deliver a programme involving people under 18, we do so through the organising school or organisation and provide a separate notice.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.