Legal · UK GDPR

Privacy Policy

This policy explains, in plain English, what happens to your information when you use this website or work with me. I've tried to write it so you can actually read it rather than scroll past it.

1. Who I am

I'm Luke Povey, and I run Your Way to AI Ltd. For data protection law, Your Way to AI Ltd is the data controller — the business responsible for your information.

Your Way to AI Ltd · a company registered in England and Wales · company number 17341557
Registered office: 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE
Email: hello@yourwaytoai.co.uk · WhatsApp: 07777 278337

2. What I collect

When you contact me

• Your name, email address and phone number
• Your business name and what you've told me about it
• The content of our messages — WhatsApp, email or booking notes

When you use the enquiry form

The form on this site is handled by Netlify, my website host. What you type is delivered to me and stored in my hosting dashboard so I can reply. WhatsApp messages are governed by WhatsApp's own privacy policy inside their app.

When you visit the site

If you accept optional cookies, I may see anonymous statistics such as which pages are visited and roughly which country visitors come from. This doesn't identify you. If you reject optional cookies, none of this is collected.

When you download the free guide

The guide downloads directly. I don't ask for your email and I don't know who has downloaded it.

3. Why I collect it, and my lawful basis

• To reply to you and provide services you've asked for — lawful basis: contract, or legitimate interests where we're still talking about whether to work together.
• To keep proper business and tax records — lawful basis: legal obligation.
• To understand which pages are useful — lawful basis: consent, which you give or refuse through the cookie banner and can change at any time.

I do not send marketing emails, I do not run a mailing list, and I do not sell, rent or trade your information to anybody. Ever.

4. Who I share it with

Only the services I need to run the business, and only what they need:

• Calendly — booking your call
• My email and messaging providers — so we can correspond
• My website host — which serves the pages you're reading
• My accountant and HMRC — where the law requires records to be kept

Some of these providers are based outside the UK. Where information leaves the UK, it's protected by the safeguards those providers have in place, such as approved contractual clauses.

5. How long I keep it

• Enquiries that don't become work — up to 12 months, then deleted
• Client records and correspondence — while we work together and for 6 years afterwards
• Invoices and financial records — 6 years, as UK tax law requires
• Website statistics — up to 14 months, and never identifying

6. Your rights

Under UK GDPR you have the right to:

• Ask what information I hold about you, and get a copy
• Have anything inaccurate corrected
• Ask me to delete your information, where I'm not legally required to keep it
• Object to, or ask me to restrict, how I use it
• Ask for your information in a portable format
• Withdraw consent at any time, where consent is the basis I'm relying on

Email hello@yourwaytoai.co.uk and I'll deal with it within one month. It's free.

7. Client business data during a Setup Day

This section matters if you hire me. During a Setup Day I may see your business information — invoices, emails, quotes, customer records — while we build systems on your real work.

• I only look at what's needed for the work we've agreed.
• I don't copy, keep or take away your business data. I work on your systems, on your screens.
• I treat everything I see as confidential, indefinitely.
• Where you're the controller of your customers' personal data, I act as a processor on your instructions. If your business needs a formal written data processing agreement, ask and I'll provide one.
• I'll actively advise you on what should never be pasted into an AI tool — that's part of the day, not an afterthought.

8. AI tools and your information

I use AI tools, including Claude, in my own work — for example to help draft documents. I don't paste client personal data or confidential business information into them, and I'll tell you plainly if AI has been used to produce something for you.

Any AI system I set up in your business is under your control, using your own accounts. What goes into it afterwards is governed by that provider's terms and by the AI policy we agree on the day.

9. Security

Sensible, honest measures: strong unique passwords with two-factor authentication, encrypted devices, secure connections, and access limited to me alone. No system is perfect, and I won't claim otherwise — but if a breach ever occurred that put your rights at risk, I'd tell you and the ICO within 72 hours as the law requires.

10. Complaints

If you're unhappy with how I've handled your information, tell me first — I'd genuinely rather fix it. If you're still unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.