You are a lawyer and I am not. This is a starting draft based on what the site currently does; it must be checked against the actual data flows (analytics, email provider, form handler, host logs) and against the regimes that apply to your visitors before it stands as the site’s policy.
What we collect
If you fill in a form on this site, we collect what you type into it — typically your name, email address, business type and what you are trying to do — so that a person can reply. If you subscribe to the weekly email, we store your email address for as long as you stay subscribed.
Our host keeps standard server logs, which include IP addresses, for security and troubleshooting. If site analytics are enabled, they are described here [confirm which analytics, if any, and whether IPs are anonymised].
What we do with it
Reply to you, send the email you asked for, and keep the site working. We do not sell personal information, and we do not share form submissions with the vendors we write about.
Third parties
[List the actual processors: the host, the form handler, the email platform, any analytics, and the CRM if leads are routed to one.] Each of these sees only what it needs to do its job.
Cookies
[Confirm what actually sets cookies — caching, analytics, embedded video — and whether a consent banner is required for your audience.]
Your choices
Unsubscribe from any email using the link in it. To ask what we hold about you, or to have it deleted, use the contact form on Work With Us.
Client data is different
This policy covers this website. If we install AI in your office, the data that system handles stays on your hardware and is covered by the engagement agreement, not by this page — that is the entire point of the service.