Privacy
InkLLM AI Data-Use Review — privacy notice
For people who enquire about or buy the InkLLM AI Data-Use Review.
Who we are
The data controller is Elliot Inkley, trading as InkLLM (“we”, “us”).
Business address: 52 Hilda Wharf, Aylesbury, Bucks, HP20 1RJ.
Contact: elliot@inkllm.co.uk.
What we collect
When you enquire about or buy an AI Data-Use Review we collect:
- business and trading name; legal entity name if you give it;
- contact name, work email and role;
- approximate staff numbers using AI (if provided);
- categories of information staff might put into AI tools (categories only — not the records themselves);
- names of up to five AI tools and account tiers/plans;
- optional public documentation URLs;
- a short note on what you currently tell staff;
- how you heard about InkLLM.
If you pay by UK bank transfer, we see the payment amount, the reference, and the name and account details your bank shows on the transfer. We do not take card payments at present.
What we do not want
Please do not send customer records, staff HR files, passwords, API keys, access tokens or screenshots of private systems. If you send any of these by mistake, we will delete them and tell you.
Why we use this information
We use it to:
- assess whether your request fits the fixed scope;
- deliver the review and written deliverables;
- deliver the written handover and any factual revision;
- administer the engagement (including payment and records we must keep for tax).
Legal basis
UK GDPR: processing is necessary for the performance of a contract with you (or to take steps at your request before entering that contract), for the AI Data-Use Review engagement.
PolicyPeek ratings
We do not use your intake answers or review findings to change PolicyPeek public ratings. Paying for a review never buys or alters a rating.
Who else sees it
We do not use a card processor at present. We do not sell your information. We may use standard email and document tools to deliver the work. We keep your non-public information confidential and use it only for this engagement, as described in the statement of work.
How long we keep it
Draft operational practice (not legal advice):
- Deliverables and intake are kept for 12 months after delivery, then deleted unless a legal reason requires longer.
- You may ask us to delete or return them earlier at any time.
- Payment and invoice records are kept as required for tax.
Your rights
You can ask for access to the personal data we hold about you, correction of inaccurate data, or deletion in the circumstances the law allows. You can complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data (ico.org.uk). To exercise your rights, email elliot@inkllm.co.uk.
Changes
If we update this notice we will use the version linked from the review page or provided with your statement of work.