Privacy Policy

1. Who I am

Your Way to AI Ltd is the data controller for information collected through this website and in the course of selling my services. Company number 17341557, registered office 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE. Contact: hello@lukepovey.co.uk or WhatsApp 07777 278337.

2. What I collect

• When you message me: your name, phone number, email address, business name, what you tell me about the business, and the content of our messages on WhatsApp or email. WhatsApp messages are also governed by WhatsApp's own privacy policy.
• When you become a client: the material you send me for the work (logos, photos, text, logins to your own accounts, business information), invoices and payment records (no card numbers; payments go through your bank or a payment provider).
• When you visit this site: nothing that identifies you. This site sets no cookies, has no analytics, no forms and no tracking. My hosting provider keeps standard, short-lived server logs (IP address, browser type, pages requested) to serve the site securely and prevent abuse.
• Fonts are loaded from Google Fonts, which means your browser requests the font files from Google; Google's privacy policy applies to that request.

3. Why I use it and the lawful basis

• To reply to you and discuss work: legitimate interests, then contract once you instruct me.
• To do the work you have asked for: contract.
• To keep business and tax records: legal obligation.
• To show your project in my portfolio: consent, which you can withdraw at any time.
• To protect the website and my systems: legitimate interests.

I do not send marketing emails, run a mailing list, or sell, rent or trade your information.

4. AI tools

I use AI tools to do the work, and information you give me for a project will be processed by them. I use tools on business terms that do not train on customer data. I do not put payment details, passwords, or special-category data into AI tools, and I do not put material you have marked confidential into them without asking. Automations I build for you run on your own accounts; for your customers' data you are the controller and I act as your processor on your instructions. The AI Policy has the full detail.

5. Who I share it with

• AI providers (for example Anthropic, OpenAI, Google) and software tools I use to build and test the work;
• my hosting, domain, email and messaging providers;
• payment providers and my bank, for invoices;
• my accountant and HMRC, where the law requires records;
• a subcontractor, only where your proposal says so and under the same obligations.

Some providers are outside the UK. Where information leaves the UK it is protected by the provider's safeguards, such as UK-approved contractual clauses.

6. How long I keep it

• Enquiries that do not become work: up to 12 months, then deleted.
• Client files and correspondence: for the project and 6 years after, in case of a dispute.
• Invoices and financial records: 6 years, as tax law requires.
• Server logs: as set by the hosting provider, typically days, not months.

7. Your rights

Under UK GDPR you can ask what I hold about you and get a copy, have inaccurate information corrected, ask me to delete information I am not legally required to keep, object to or restrict how I use it, ask for it in a portable format, and withdraw consent where consent is the basis. Message hello@lukepovey.co.uk and I will respond within one month. It is free.

8. Security

Strong unique passwords with two-factor authentication, encrypted devices, secure connections, and access limited to me. No system is perfect. If a breach ever put your rights at risk I would tell you and the ICO within 72 hours as the law requires.

9. Complaints and changes

If you are unhappy with how I have handled your information, tell me first. You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. If this policy changes materially, the date on this page changes and the new version appears here.