Privacy policy
AiVACO Ltd ("AiVACO", "we", "us") runs this website. This page explains what personal information we collect through it, what we do with it, and the rights you have. We keep it short because we collect very little.
Who we are
AiVACO Ltd, 8 New Road, Leighton Buzzard, LU7 2LX, United Kingdom. We are the controller of the personal data described here. You can reach us at hello@aivaco.ai.
What we collect, and why
| When | What we collect | Why, and our legal basis |
|---|---|---|
| You send an enquiry through the contact form | Your name, work email, organisation, role, sector, the topics you are interested in and your message | To reply to you and to discuss working together. Legal basis: our legitimate interest in answering enquiries from organisations, and steps you ask us to take before a contract. |
| You request the whitepaper | Your first and last name, work email, organisation, role and sector, and your agreement to hear from us | To give you access to the whitepaper and, because you agreed, to send occasional insights on AI assurance. Legal basis: your consent, which you can withdraw at any time. |
| You email us | Your email address and whatever you write | To reply. Legal basis: legitimate interest. |
| You visit the website | Our hosting provider records technical information such as your IP address, the page requested, the date and time and your browser type, in server logs | To keep the site secure and working. Legal basis: legitimate interest in running a secure website. |
We do not use analytics or advertising trackers on this website, and we do not set cookies. See the cookie notice. We do not ask for, and you should not send us, sensitive personal information about yourself or others.
Who we share it with
We use a small number of service providers to run the website and handle email. They process data only on our instructions:
- Netlify, Inc. hosts the website and collects the form submissions on our behalf. Netlify is based in the United States. Transfers of personal data to it rely on the UK's international transfer safeguards.
- Our email provider delivers the notification emails we receive and the replies we send.
We do not sell personal data, and we do not share it for other companies' marketing.
How long we keep it
Enquiries are kept for as long as the conversation is live and then for up to 24 months, so that we can pick it up again if you come back. If you become a client, records are kept for the period our contract and legal duties require. If you asked for the whitepaper and agreed to hear from us, we keep your details until you unsubscribe or ask us to delete them. Server logs are kept by our host for a short period, in line with its own policy.
Your rights
Under UK data protection law you can ask us to: tell you what we hold about you; correct it; delete it; restrict or stop using it; give you a copy in a portable form; and stop using it for direct marketing. Where we rely on your consent you can withdraw it at any time, and doing so does not affect anything we did before. To use any of these rights, email hello@aivaco.ai. We will reply within one month.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first.
The demonstrator
The interactive demonstrator at demo.aivaco.ai is a separate site that uses fictional data. Please do not enter real personal or confidential information into it. It uses two cookies that are strictly necessary for it to work, described in the cookie notice.
Changes to this page
If we change how we use personal data we will update this page and its date. This version was last updated on 28 October 2026.