Privacy policy
Last updated: 24 April 2026
Who we are
Aigura is an AI consultancy that helps owner-managed professional services firms audit their operations and implement AI tools built around their specific workflows and voice. We operate as a sole trader under the trading name Aigura.
For the purposes of UK data protection law, Aigura is the data controller — meaning we decide why and how your personal data is processed.
What data we collect and why
We only collect data that has a clear purpose. The table below sets out every category, what we collect, the legal basis, and how long we keep it.
| Who | Data collected | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Website visitors | Cookie preference, survey variant assignment | Consistent site experience; A/B survey assignment | Legitimate interests (strictly necessary cookies); consent (optional cookies) | 90 days – 12 months (see cookie policy) |
| Survey respondents | Answers to survey questions; email address if provided voluntarily | Understanding what to build first; following up with interested respondents | Consent (submitting the form constitutes consent) | 24 months |
| Outreach contacts | Business name, email address, professional role — sourced from publicly available business websites | Direct outreach to professional services firms that may benefit from our services | Legitimate interests (B2B marketing to relevant businesses) | Until opt-out or 24 months from last contact |
| Discovery call leads | Name, email, business details shared during or before a call | Preparing for and following up a discovery conversation | Legitimate interests; pre-contract steps | 12 months if no engagement; indefinitely if a client relationship begins |
| Clients | Business and personal contact details; information shared during the audit or implementation process (which may include client names and business data) | Delivering the service; producing audit reports and AI tools | Contract | 6 years from end of engagement (legal obligation) |
A note on AI processing
Where we use AI tools to assist in producing client work — for example, analysing meeting transcripts or generating draft proposals — we do not submit identifiable client data to third-party AI providers without agreement in place. Where we do use AI providers, we use those with contractual data processing agreements that prohibit model training on submitted data.
We will always be transparent with clients about where AI is involved in their work.
Who we share data with
We do not sell personal data. We share it only where necessary to deliver our services or meet a legal obligation.
- Tally.so — our survey tool. Survey responses (including any email address you provide) are stored on Tally's servers. Tally's privacy policy is available at tally.so/help/privacy-policy.
- Google Workspace — email, calendar, and document storage. Data processed under Google's standard data processing terms.
- Calendly — booking tool. Name and email address are shared when you book a call. Calendly's privacy policy is available at their website.
- Cloud hosting providers — our website and any tools we build are hosted on infrastructure in the United Kingdom or European Economic Area.
Where data is transferred outside the UK, we ensure equivalent protections are in place through adequacy decisions or appropriate contractual safeguards.
Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right to be informed — to know how your data is used (this policy fulfils that).
- Right of access — to request a copy of the data we hold about you.
- Right to rectification — to correct inaccurate data.
- Right to erasure — to request deletion of your data where there is no overriding legal reason to retain it.
- Right to restrict processing — to ask us to limit how we use your data while a dispute is resolved.
- Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.
- Right to object — to object to processing based on legitimate interests, including direct marketing. We will stop immediately on request.
- Rights related to automated decision-making — we do not make solely automated decisions that produce legal or similarly significant effects.
To exercise any of these rights, email hello@aigura.co.uk. We will respond within one calendar month. We may ask you to verify your identity before fulfilling a request.
Withdrawing consent
Where processing is based on your consent — for example, submitting the survey or agreeing to optional cookies — you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Email us or, for cookies, update your preferences via the cookie banner.
Cookies
We use a small number of cookies — two strictly necessary, with optional analytics and marketing cookies gated behind your consent. Full details, including a table of every cookie we set, are in our cookie policy.
How to complain
If you believe we have handled your data unlawfully, you have the right to complain to the UK's data protection regulator — the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
0303 123 1113
We would ask that you contact us first — most issues can be resolved quickly and we take every concern seriously.
Changes to this policy
If we make material changes to how we handle personal data, we will update this page and revise the "last updated" date at the top. For significant changes, we will take reasonable steps to notify affected individuals directly.
Contact
For any privacy-related question, request, or concern: