Privacy Notice

Who we are

AI for Brokers is a trading name of Certta Ltd, a company registered in England and Wales. We are the data controller for personal data collected through this website and through direct correspondence with us.

Contact for data queries: contact@aiforbrokers.co.uk

What data we collect and why

Newsletter subscriptions

When you subscribe to the AI for Brokers newsletter, your email address is collected and stored by Substack Inc., our newsletter platform. We use this to send you the weekly newsletter and occasional updates about AI for Brokers products and publications.

The lawful basis for this processing is consent (UK GDPR Article 6(1)(a)). You can withdraw that consent at any time by clicking the unsubscribe link in any email we send, or by emailing us directly.

If you subscribe through this website, your email address is held securely by AI for Brokers and used only to send you our articles. The lawful basis is consent (UK GDPR Article 6(1)(a)), and you can unsubscribe from any email at any time.

Direct correspondence

If you contact us by email, we collect your name and email address and any information you include in your message. We use this solely to respond to your enquiry. The lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, our interest in responding to correspondence sent to us.

We treat all correspondence as confidential unless you tell us otherwise.

Website analytics

This website uses Plausible Analytics, a privacy-preserving analytics service. Plausible does not use cookies, does not track individuals across websites, and does not collect personal data. It provides us with aggregate data only (page views, referrers, geography at country level). No consent is required and no cookie banner is shown because no personal data is processed.

Chaps AI chatbot

This website includes Chaps, an AI chatbot that answers questions about AI compliance in UK broking. When you use Chaps, we may collect the following:

• Conversation content: we keep a record of every Chaps conversation so we can understand what brokers need and improve our tools and products. We do not store names. The lawful basis is legitimate interests (UK GDPR Article 6(1)(f)), not consent, and the interest is improving our products and services for brokers. We ask you, both in Chaps and here, not to type anything that identifies you or a client. Because this basis is legitimate interests, you have the right to object at any time: email contact@aiforbrokers.co.uk and we will stop processing your conversation and remove it.
• Email address: if you voluntarily provide your email address via the Chaps widget, it is held securely by AI for Brokers and used to contact you about our products and services, and to follow up on any specific query you have asked us to pass to the team. The lawful basis is consent (UK GDPR Article 6(1)(a)). You can withdraw consent at any time by emailing contact@aiforbrokers.co.uk.
• Anonymous usage data: anonymised counters (topic category, message count) are also recorded to help us understand how Chaps is being used. These contain no personal data and no conversation content.

Your data collected via Chaps is held securely by AI for Brokers. It may be used to contact you and tell you about our products and services. It is never sold or passed to any third party.

AI Compliance Self-Audit requests

When you ask us to email you the AI Compliance Self-Audit from our audit page, your email address is held securely by AI for Brokers and used to send you the audit and to contact you about our products and services. The lawful basis is consent (UK GDPR Article 6(1)(a)). You can withdraw consent at any time by emailing contact@aiforbrokers.co.uk. We do not add you to any third-party newsletter from this form.

The AI Self-Check

When you use our AI Self-Check tool, your email and your answers are kept separately, and your answers are stored anonymously, not linked to you. If you ask us for help at the end, for example by booking a call, we then connect your email together with your result so we can help you without you having to repeat yourself. The tool tells you this before you click, and the lawful basis is your consent. Bookings are handled by Calendly. You can ask us to delete your details at any time by emailing contact@aiforbrokers.co.uk.

The bottleneck form (/help)

If you tell us what is slowing your business down using our /help form, we keep your message so we can understand what brokers need and build better tools, and if you leave your email we keep that too so we can reply to you personally. The lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): responding to you and improving our products for brokers. We do not add you to any marketing list off the back of it, and we never sell or share it. We ask you not to include anything that identifies you or a client. You can ask us to delete your message and email at any time by emailing contact@aiforbrokers.co.uk, and because the basis is legitimate interests you can object at any time.

Who processes your data

Substack Inc. processes subscriber email addresses on our behalf as a data processor under UK GDPR Article 28. Substack is a US-based company. Data transfers to the United States are covered by Substack’s Standard Contractual Clauses and their published Data Processing Agreement. You can review Substack’s privacy policy at substack.com/privacy.

Plausible Analytics (EU-based) processes aggregate website data only. No personal data is transferred.

Chaps AI processing. Chaps conversations are processed by trusted third-party AI providers under UK GDPR safeguards (Standard Contractual Clauses for any processing outside the UK). These providers do not use your conversation to train their models. They delete the conversation from their own systems in line with their retention policies.

We do not sell, share, or pass data collected via this website or via Chaps to any third party. We do not use it for advertising purposes.

How long we keep your data

• Newsletter subscribers: for as long as your subscription is active. When you unsubscribe, Substack removes your email address from the active list in accordance with their data retention policies.
• Direct correspondence: we retain emails for up to two years, then delete them unless there is an ongoing matter that requires us to keep them longer.
• Chaps conversation records: AI for Brokers keeps the raw conversation for up to 90 days to understand what brokers need and improve our tools. After that the raw conversation is deleted and only anonymised insight is kept. You can request earlier deletion by emailing contact@aiforbrokers.co.uk.
• Email addresses collected via Chaps: retained until you withdraw consent. To withdraw, email contact@aiforbrokers.co.uk and we will delete your address within five working days.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to ask us to delete your data (“right to be forgotten”)
• Right to restrict processing — to ask us to limit how we use your data
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw newsletter consent at any time, without affecting anything that happened before withdrawal
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, contact us at contact@aiforbrokers.co.uk. We will respond within 30 days.

Cookies

This website does not set marketing cookies or advertising cookies. We do not use Google Analytics, Meta Pixel, or any other tracking technology that processes personal data. The only cookies present are those set by Substack’s embedded subscribe widget, which are governed by Substack’s own cookie policy. Browser storage: Chaps stores a single non-personal marker in your browser's local storage to remember it has already shown you its welcome message. This contains no personal data, is not a cookie, and is never used for tracking.

Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Correspondence to and from aiforbrokers.co.uk is handled via Proton Mail, which provides end-to-end encryption for emails between Proton users and TLS encryption in transit for all other email.

How to complain

If you have a concern about how we handle your personal data, please contact us first at contact@aiforbrokers.co.uk. We will acknowledge your concern within five working days and aim to resolve it within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (the UK’s data protection supervisory authority) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this notice

We will update this notice when our data practices change or when required by law. The date at the top of this page shows when it was last revised. Material changes will be noted in the AI for Brokers newsletter.

Contact

Yasmin Gee, Founder
AI for Brokers, a trading name of Certta Ltd
Registered in England and Wales
contact@aiforbrokers.co.uk