Privacy policy
Last updated 16 August 2026.
This policy explains what AI ORCA LTD does with personal information. It is written to be read, not to be survived.
Who we are
AI ORCA LTD is a digital transformation agency registered in Scotland, company number SC884036. We are the data controller for the information described here. Contact us at euan@aiorca.co.uk.
What we collect, and why
| What | When | Why |
|---|---|---|
| Name, business name, email address, website address, social handle | When you submit an enquiry, request a website check, or request the £49 Full Audit | To reply to you and to carry out the work you asked for |
| Anything you tell us in the message field, by email or on WhatsApp | When you send it | To answer you |
| Payment details | When you pay | Handled entirely by Stripe — we never see or store your card number |
| Usage data: pages viewed, approximate location, device and browser | Whenever you visit the site | To understand what people find useful |
We do not buy personal data, and we do not sell or rent yours to anyone.
Our legal bases
- Contract — to quote for and deliver work you have asked us to do.
- Legitimate interests — to reply to enquiries, keep records of what we agreed, and keep our own systems secure.
- Consent — for analytics cookies and for any marketing email. You can withdraw consent at any time.
- Legal obligation — to keep accounting records.
Who else processes it
We keep the list of suppliers short on purpose. Each of these processes data on our instructions:
- Make.com — routes form submissions to us and stores the enquiry record.
- Fastmail — our email.
- Stripe — payments. Stripe is the controller of your payment data; see their own privacy notice.
- Mailchimp — email lists, where you have opted in.
- Google Analytics — website usage measurement.
- Hosting — our own server, located in the EU.
Some of these are based outside the UK. Where that is the case, transfers are covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Automated tools and AI
We use AI tools to help draft and analyse work. Where a deliverable to you is drafted with AI assistance, a person reviews it before it reaches you — no output is sent to a client unread. We do not put client personal data into public AI chat tools, and we do not use your data to train anyone's model.
How long we keep it
- Enquiries that do not become work — up to 12 months, then deleted.
- Client records and anything needed for accounts — 6 years after the end of the relationship, as UK tax law requires.
- Marketing list entries — until you unsubscribe.
Cookies
The site sets Google Analytics cookies to measure usage. They are not required for the site to work and you can block or delete them in your browser at any time. We do not run advertising cookies.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to us using it. You can also ask for it in a portable format. Email euan@aiorca.co.uk and we will respond within one month.
If you are unhappy with how we handled your data
Tell us first — email euan@aiorca.co.uk with "Data complaint" in the subject line. We will acknowledge within 5 working days and give you a substantive response within 30 days.
You also have the right to complain directly to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first.