1. Who we are
The data controller is AIM Smart Solutions (Alaa Mostafa), based in Bolton, United Kingdom. Contact: enquiry@aimsmartsolutions.tech. [Owner to add: ICO registration number, if registered.]
2. What we collect
- Enquiry form: your first name, business name, email address, UK mobile number and message. If you choose an urgent AI call-back: your consent, the time you gave it and the wording you agreed to.
- Quote request: your name, business name, email, mobile number, the services you select and what you tell us about them.
- Booking a call: your name, business name (optional), email, mobile number, what you would like to discuss and the time you choose.
- Security and fair use: a one-way scrambled (hashed) version of your IP address to apply daily limits, and the result of the Cloudflare Turnstile check.
- AI call-back: if you ask for one, your mobile number is passed to Vapi to place the call, and the conversation is processed by Vapi and its AI providers.
- Emails: copies of the emails we send you and receive from you are kept in our mailbox.
- Website hosting: GitHub Pages keeps standard server logs (such as IP address and browser type) for security.
3. The live demos
- Supplier risk, sales lead scoring and property apps: the sample data is fictional. Anything you add is saved against a random identifier stored in your browser (not your name) and is deleted automatically after 24 hours. Please do not enter personal or confidential information.
- AI Content & Keyword Generator: what you type is sent to an AI service through our server to create the content. We do not store your inputs or the results. We keep only a hashed IP counter for the daily limit, deleted after a few days.
- Other demos (opportunity score, skills taster) run entirely in your browser and send nothing to us.
4. Why we use it and our lawful bases
- Replying to enquiries, preparing quotes and arranging bookings: to take steps at your request before a possible contract, and our legitimate interest in responding to people who contact us.
- AI call-back: your consent, given by ticking the box. You can withdraw it at any time by emailing us; this does not affect calls already made.
- Confirmation and reminder emails: to provide the booking you asked for.
- Security, spam prevention and daily limits: our legitimate interest in keeping the site and demos safe and available.
- Running the demos: our legitimate interest in showing how our services work.
We do not sell your data, use it for advertising, or make decisions about you by automated means that have legal or similarly significant effects.
5. Who processes data for us
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database and server functions for the forms, bookings and demos | UK (London data centre); Supabase is a US company |
| IONOS | Email: sending confirmations and holding our mailbox | UK / EU |
| Google (Calendar) | Holding booked appointments in our calendar | Global, including the US |
| Vapi | Placing the optional AI call-back to your mobile, if you ask for one | US |
| Cloudflare (Turnstile) | Checking that form submissions come from people, not bots | Global, including the US |
| OpenRouter and the AI model provider it routes to | Generating text in the AI demos (content generator, pharma assistant) | US and other countries |
| GitHub (GitHub Pages) | Hosting this website; keeps standard server logs such as IP addresses | US |
6. International transfers
Some providers are based in, or may access data from, the United States and other countries outside the UK. Where this happens we rely on UK adequacy regulations (for example the UK–US data bridge for certified companies) or the UK International Data Transfer Agreement or Addendum included in the provider's terms. [Owner to confirm the safeguard for each provider.]
7. How long we keep it
- Enquiries, quote requests, bookings and related emails: [owner to confirm, suggested: up to 24 months after our last contact], unless we go on to work together.
- Call-back consent records: for as long as we keep the related enquiry.
- Demo app records: 24 hours. Content generator inputs: not stored. Hashed IP counters: a few days.
- AI call records held by Vapi: [owner to confirm Vapi retention settings].
8. Cookies and browser storage
We do not use advertising or analytics cookies. The demo apps store a random identifier in your browser so your own records show up for 24 hours. Cloudflare Turnstile may use browser data to tell people and bots apart.
9. Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, ask for it to be transferred, and withdraw consent at any time. Email enquiry@aimsmartsolutions.tech. We will reply within one month.
10. Complaints
If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
11. Changes
We will update this page if our use of data changes, and show the date of the latest version at the top.