Privacy Policy

What data we collect

We collect information you choose to provide when you contact us, book a call or use the AI Capability Assessment. This may include:

• Your name, work email address, phone number, company name and role.
• Your industry or business type, number of people, annual turnover band and current AI experience.
• Your assessment answers, AI Capability Score, score preview, report inputs and biggest business challenge.
• Messages, enquiries, booking details and any other business information you send to us.
• Basic technical information needed to keep the site secure and working, such as browser type, device type and server logs.

Why we collect it

We use this information to provide the website, run the AI Capability Assessment, generate your score preview and prepare the AI Capability Report experience. We may also use it to respond to enquiries, arrange calls, understand where practical AI, automation or custom software could help your business, improve our services and keep records of our relationship with you.

Where you submit an assessment or enquiry, we use the information to provide the score and report experience, respond to you and help identify practical next steps. If CRM, report email delivery, analytics or automation are used, this policy will reflect those processors and explain how they support the service.

Lawful basis

We process personal data under UK GDPR using the lawful bases that fit the activity. This includes legitimate interests for responding to business enquiries and improving our services, consent where you ask us to follow up or receive future communications, contract where processing is needed to provide a requested service, and legal obligation where we need to keep records required by law.

Assessment reports, CRM and future AI support

Your assessment answers and contact details may be used to create an AI Capability Score and AI Capability Report, support relevant follow-up and create internal summaries to help our team understand your needs before a call.

Where AI tools are used, they will be used for internal support such as summarising assessment answers, drafting CRM notes or suggesting follow-up angles. We do not use AI to make solely automated decisions with legal or similarly significant effects about you.

Follow-up and marketing

If you consent to follow-up, we may contact you about your assessment, practical AI opportunities, automation ideas, custom software and related Small Plus Mighty services. You can withdraw consent or ask us to stop contacting you at any time by emailing privacy@smallplusmighty.com.

Who has access

Your data is accessed by Small Plus Mighty Ltd and trusted suppliers who help us operate our website, bookings, forms, hosting, CRM, email systems and internal tools. We only give suppliers the access they need to provide their service. We do not sell your personal data to third parties.

International transfers

Some suppliers may process data outside the UK. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to standard contractual clauses or equivalent protections.

How long we keep it

We keep personal data only for as long as needed for the reason it was collected, including to answer enquiries, provide services, keep business records, resolve issues and meet legal obligations. Assessment and lead information will be reviewed periodically and deleted when it is no longer needed.

Data security

We use reasonable technical and organisational measures to protect personal data, including HTTPS for data in transit and access controls for systems used by the business. No online service can be guaranteed completely secure, but we work to keep risk proportionate and controlled.

Cookies and tracking

We only use cookies, analytics and similar technologies where they help us keep the site working, understand performance or improve the service. If additional analytics, cookies or similar technologies are added, this policy and any cookie notices will be updated to explain what is used and why.

Children

Small Plus Mighty provides business-to-business services and the AI Capability Assessment is not intended for children. We do not knowingly collect personal data from anyone under 18.

Your rights

Under UK GDPR, you have the right to access your personal data, correct inaccurate data, request erasure, restrict processing, object to processing and request data portability. Where we rely on consent, you can withdraw it at any time.

To make a request, email privacy@smallplusmighty.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Data deletion

To request deletion of your personal data, email privacy@smallplusmighty.com. We will respond in line with UK GDPR and may need to keep limited records where required by law or for legitimate business reasons.

Changes to this policy

We may update this policy from time to time. The last updated date at the top will show when it was most recently changed.