Privacy Policy
Last updated: 6 July 2026
Nimble AI Solutions ("we", "us", "our") helps UK SMEs use AI confidently and stay compliant. We practise the plain-English approach to governance we preach, including with your data. This policy explains what we collect, why, and what rights you have under UK GDPR and the Data (Use and Access) Act 2025.
Who we are
Nimble AI Solutions is an AI governance consultancy based in Lincoln, United Kingdom. For any privacy question or request, contact us at [email protected].
What we collect and why
When you use our contact form, we collect your name, work email, and (optionally) your company, a service you are interested in, and any message you send. We use this solely to respond to your enquiry and arrange a consultation. Legal basis: your consent (the tick box) and our legitimate interest in responding to business enquiries.
When you take the AI Readiness Scorecard, we show your results immediately in the browser. If you choose to email yourself a copy, we collect your name and email address and your answers to the assessment questions, in order to send your RAG-rated readiness report. We will not follow up unless you ask us to. Legal basis: your consent.
First-party site analytics, we use our own cookieless measurement system (described below) to understand how the site is used in aggregate. This does not use cookies or any persistent identifiers. Legal basis: our legitimate interest in improving the website.
Automatically, our hosting provider (Cloudflare) records standard server logs (IP address, browser type, pages visited) for security and to keep the site running.
Our first-party analytics
This site uses a small first-party script that measures page visits and key on-page steps (such as starting the Scorecard). It is cookieless: it sets no cookies and stores nothing in your browser between visits. Each visit generates a random in-memory session identifier that exists only for the duration of the page load and is never written to storage. No third-party analytics service receives your data. The information we collect (page path, referral source, and on-page events) is used only in aggregate to understand how the site is used and to improve it, and is periodically deleted.
If you visit the site via a link in one of our emails, the link may include a source parameter that allows us to associate that visit with the email we sent you. We use this solely to measure whether our communications are useful. No personal data beyond what you already provided when signing up is created or shared.
Cookies
This site sets no cookies at all. Our first-party analytics are cookieless (see above). We do not use any third-party analytics or advertising scripts. If that ever changes, we will ask for your consent first and update this policy before doing so.
Who we share data with
We do not sell your data. We share it only with the service providers that make the site work:
- Our own customer-relationship system: your enquiry or scorecard submission is stored in our own CRM and used only to respond to you.
- Our email provider: so we can read and reply to your enquiry.
- Where the law requires us to.
How long we keep it
We keep enquiry and scorecard data only as long as needed to respond to you and for our legitimate business records, then delete it. You can ask us to delete it sooner at any time. Aggregate analytics data is periodically deleted.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to our use of your personal data, and to data portability. To exercise any of these, email [email protected] and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.