Privacy Notice

Who we are

AI for Brokers is a trading name of Certta Ltd, a company registered in England and Wales. We are the data controller for personal data collected through this website and through direct correspondence with us.

Contact for data queries: contact@aiforbrokers.co.uk

What data we collect and why

Newsletter subscriptions

When you subscribe to the AI for Brokers newsletter, your email address is collected and stored by Substack Inc., our newsletter platform. We use this to send you the weekly newsletter and occasional updates about AI for Brokers products and publications.

The lawful basis for this processing is consent (UK GDPR Article 6(1)(a)). You can withdraw that consent at any time by clicking the unsubscribe link in any email we send, or by emailing us directly.

Direct correspondence

If you contact us by email, we collect your name and email address and any information you include in your message. We use this solely to respond to your enquiry. The lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, our interest in responding to correspondence sent to us.

We treat all correspondence as confidential unless you tell us otherwise.

Website analytics

This website uses Plausible Analytics, a privacy-preserving analytics service. Plausible does not use cookies, does not track individuals across websites, and does not collect personal data. It provides us with aggregate data only (page views, referrers, geography at country level). No consent is required and no cookie banner is shown because no personal data is processed.

Chaps AI chatbot

This website includes Chaps, an AI chatbot that answers questions about AI compliance in UK broking. When you use Chaps, the following data may be collected depending on the choices you make:

• Conversation content: if you give explicit consent at the start of the conversation, your chat transcript is stored securely by AI for Brokers so we can identify what brokers need and improve our tools and products. If you decline consent, only anonymous usage counters are recorded — no content, no identity. The lawful basis for storing conversation content is consent (UK GDPR Article 6(1)(a)). You can withdraw this at any time by contacting us at contact@aiforbrokers.co.uk.
• Email address: if you voluntarily provide your email address via the Chaps widget, it is held securely by AI for Brokers and used to contact you about our products and services, and to follow up on any specific query you have asked us to pass to the team. The lawful basis is consent (UK GDPR Article 6(1)(a)). You can withdraw consent at any time by emailing contact@aiforbrokers.co.uk.
• Anonymous usage data: regardless of your consent choice, anonymised counters (topic category, message count) are recorded to help us understand how Chaps is being used. These contain no personal data and no conversation content.

Your data collected via Chaps is held securely by AI for Brokers. It may be used to contact you and tell you about our products and services. It is never sold or passed to any third party.

Who processes your data

Substack Inc. processes subscriber email addresses on our behalf as a data processor under UK GDPR Article 28. Substack is a US-based company. Data transfers to the United States are covered by Substack’s Standard Contractual Clauses and their published Data Processing Agreement. You can review Substack’s privacy policy at substack.com/privacy.

Plausible Analytics (EU-based) processes aggregate website data only. No personal data is transferred.

Chaps AI processing. Conversations with Chaps are processed in the United States by Anthropic, under Standard Contractual Clauses. Anthropic does not use these conversations to train its models and automatically deletes them within 30 days.

We do not sell, share, or pass data collected via this website or via Chaps to any third party. We do not use it for advertising purposes.

How long we keep your data

• Newsletter subscribers: for as long as your subscription is active. When you unsubscribe, Substack removes your email address from the active list in accordance with their data retention policies.
• Direct correspondence: we retain emails for up to two years, then delete them unless there is an ongoing matter that requires us to keep them longer.
• Chaps conversation transcripts: retained for up to 12 months from the date of the conversation, then deleted. You can request earlier deletion by emailing contact@aiforbrokers.co.uk.
• Email addresses collected via Chaps: retained until you withdraw consent. To withdraw, email contact@aiforbrokers.co.uk and we will delete your address within five working days.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to ask us to delete your data (“right to be forgotten”)
• Right to restrict processing — to ask us to limit how we use your data
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw newsletter consent at any time, without affecting anything that happened before withdrawal
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, contact us at contact@aiforbrokers.co.uk. We will respond within 30 days.

Cookies

This website does not set marketing cookies or advertising cookies. We do not use Google Analytics, Meta Pixel, or any other tracking technology that processes personal data. The only cookies present are those set by Substack’s embedded subscribe widget, which are governed by Substack’s own cookie policy. Browser storage: Chaps stores a single non-personal marker in your browser's local storage to remember it has already shown you its welcome message. This contains no personal data, is not a cookie, and is never used for tracking.

Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Correspondence to and from aiforbrokers.co.uk is handled via Proton Mail, which provides end-to-end encryption for emails between Proton users and TLS encryption in transit for all other email.

How to complain

If you have a concern about how we handle your personal data, please contact us first at contact@aiforbrokers.co.uk. We will acknowledge your concern within five working days and aim to resolve it within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (the UK’s data protection supervisory authority) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this notice

We will update this notice when our data practices change or when required by law. The date at the top of this page shows when it was last revised. Material changes will be noted in the AI for Brokers newsletter.

Contact

Yasmin Gee, Founder
AI for Brokers, a trading name of Certta Ltd
Registered in England and Wales
contact@aiforbrokers.co.uk