What I collect, and what I don't.

Last updated 15 August 2026

Who is responsible

This site is run by Kevin Clubb, trading as AI Sustained, based in the United Kingdom. I am the data controller for anything collected here. For any privacy question, or to exercise the rights below, email [email protected].

Nothing runs until you choose

When you first arrive, a banner asks what you are willing to share. Until you answer, every non-essential cookie and script is blocked — this is enforced technically through Google Consent Mode, not just promised. Rejecting everything takes one click, in a button identical in size and prominence to the accept button, and the site behaves exactly the same afterwards.

You can change your mind at any time using the cookie choices link, which appears in the footer of every page. Your decision is remembered for six months, after which I ask again.

What I actually use

• Strictly necessary — the small amount of storage needed to remember your cookie choice and keep the site secure. No consent required for this under PECR, and it holds nothing that identifies you.
• Google Analytics 4 (property G-F7KKRZ56QC) — which pages get read, how people arrive, roughly which country. Runs only with your consent for audience measurement.
• Microsoft Clarity — anonymised session replays and heatmaps showing where visitors scroll, click and stop reading. Text you type into any field is masked before it leaves your browser. Runs only with your consent for session recording.
• Advertising pixels — none are active today. If I add TikTok or Meta pixels to measure whether social posts bring anyone here, they will sit behind the marketing toggle and this page will be updated before they go live.

What I do not do

• I do not sell your data. Not to anyone, at any price.
• I do not run advertising on this site.
• I do not build profiles of individual visitors, and I have no way to identify you from analytics.
• I do not use dark patterns to push you towards accepting. If you find one, tell me and I will fix it.

Free resources

The downloads on this site — the checklists, the one-page policy, the supplier questions — require no email address and no form. You click, you get the PDF. I record that a download happened as an anonymous event count, and only if you consented to analytics. I do not know who downloaded what.

The readiness check

The five-minute AI readiness check runs entirely in your browser. Your answers are not transmitted to me or stored on any server. Close the tab and they are gone. If you consented to analytics I record anonymous progress events — how far through people get, and where they abandon — with no answer content attached.

If you book a call or email me

Booking a call or emailing means I hold your name, email address and whatever you tell me about your business, for as long as we are in contact and for a reasonable period afterwards for my own records. Legal basis is legitimate interest in responding to an enquiry, or performance of a contract if we go on to work together. Ask me to delete it and I will.

Legal basis, plainly

Cookies and similar technologies are governed by the Privacy and Electronic Communications Regulations (PECR), which require consent for anything not strictly necessary. Personal data is governed by UK GDPR. I rely on consent for analytics, session recording and any future pixels, and on legitimate interest for correspondence.

Some exemptions to consent exist for narrowly-defined statistical purposes. I have chosen not to rely on them, because the tools I use send data to third parties who process it for their own purposes too. Consent is the honest position.

Where the data goes

Google and Microsoft both process data outside the UK, including in the United States, under their own transfer safeguards. Neither receives anything from this site unless you have consented. Their retention policies apply to what they hold; I keep no separate copy.

Your rights

• Ask what I hold about you, and get a copy
• Have it corrected, exported, or deleted
• Withdraw consent at any time, as easily as you gave it
• Object to processing based on legitimate interest
• Complain to the Information Commissioner's Office at ico.org.uk if you think I have got this wrong

Email [email protected] for any of the above. No form, no ticket number.

The editorial site

The AI Sustained editorial at ai-sustained.com is run by the same person under the same principles, but it is a separate site with its own analytics property and its own privacy notice. Consent given here does not carry across, and vice versa.

Changes

If I add a tool that collects anything, this page changes before it goes live, and the date at the top moves. That is the commitment.