Privacy Notice

1. Who we are

2. What we collect

We only collect what we need to run the site and deliver what you ask for:

• Email address, and your first name if you give it, when you sign up for the free preface of our book and occasional updates.
• Your name, email address and the text of your review when you send us a book review through our review page. Reviews may be published on our website or in our marketing, and we explain what that means in section 3.
• Your name, email address, contact and order details if you buy a paid product such as the AI CEO Toolkit, the 60-Day Cohort or the Done-With-You service. Card and payment details are entered directly with our payment provider and are not stored by us.
• Your name, email address and whatever you write if you contact us by email or through a form.
• Technical information collected automatically when you visit: your IP address, browser and device type, the pages you view, how long you spend and the site you arrived from. This comes from server logs, cookies and similar technologies.

3. Why we use it and our lawful basis

Data protection law requires us to have a lawful basis for each thing we do with your information. Ours are:

• Consent (Article 6(1)(a) UK GDPR): to send you the preface PDF and occasional updates about our books and AI CEO, and to receive and publish your book review. Consent for email marketing also meets the UK rules on electronic marketing (PECR).
• Performance of a contract (Article 6(1)(b)): to process your order, give you access to what you bought, provide support and handle refunds.
• Legal obligation (Article 6(1)(c)): to keep tax, accounting and company records as UK law requires.
• Legitimate interests (Article 6(1)(f)): to reply to your enquiry, keep the website secure and working, prevent fraud, and understand which pages are useful. We balance our interests against your rights and expect you would not be surprised by any of this.

4. Who we share it with

We do not sell your personal information, and we do not share it with anyone so they can market their own products to you. We share it only with:

• Systeme.io, our email marketing, contact list, checkout and course platform. It stores our contact list and processes sign-ups and purchases.
• Our website hosting, infrastructure and email delivery providers, who keep the site and our email running.
• Our payment provider, which processes card payments for paid products.
• Analytics providers, where they are used, so we can understand how the site is being used.
• Our professional advisers, accountants, insurers and lawyers, where they need it to advise us.
• Courts, regulators or law enforcement, where we are legally required to disclose it.

Everyone who processes information for us does so under a written contract that requires them to protect it and use it only on our instructions.

5. Transfers outside the UK

Some of our providers are based outside the UK or the European Economic Area, so your information may be transferred or stored abroad. When that happens we make sure a lawful safeguard is in place: either the destination country is covered by UK adequacy regulations, or the transfer is made under approved terms such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, with extra measures where needed. You can ask us for a copy of the relevant safeguard.

6. How long we keep it

• Marketing contacts: until you unsubscribe or ask us to delete your details. We keep a minimal record of your opt-out so we do not contact you again by mistake.
• Book reviews: until you withdraw the review or ask us to remove it.
• Purchase and financial records: six years from the end of the financial year they relate to, because UK tax and accounting law requires it.
• General enquiries: 12 months after we last spoke.
• Technical and analytics data: 12 months, after which it is deleted or anonymised.

When we no longer need information, we delete it securely or turn it into something that can no longer identify you.

8. Your rights

You have the right to:

• see a copy of the personal information we hold about you, and be told how we use it;
• have inaccurate information corrected;
• have your information deleted, where there is no good reason for us to keep it;
• restrict us from using your information while a concern is looked into;
• receive information you gave us in a portable, machine-readable format, or have it sent to another organisation;
• object to processing based on our legitimate interests, and object to marketing at any time. For marketing, the objection is absolute and we will stop;
• withdraw consent at any time, where we rely on consent;
• complain to the Information Commissioner's Office (ICO).

9. Children

Our website, our books and AI CEO are meant for adults. We do not knowingly collect personal information from children. If you believe a child has given us their details, email us and we will delete them.

10. Changes to this notice

We may update this notice as our tools or the law change. The date at the top shows when it was last revised, and if a change materially affects how we use your information we will make that clear on the site and, where appropriate, tell you by email.

11. Contact

Any question, request or complaint about privacy can go to hello@aiceobypbi.com. If you are not satisfied with our response, you can contact the Information Commissioner's Office at ico.org.uk.