What happens to the information we send AI UVD?
AI UVD uses what you send only to reply and, if it becomes work, to carry it out. The lawful basis is legitimate interests to reply to enquiries, and contract once work starts. Nothing is sold, and nobody is put on a mailing list. The only message beyond the reply is one follow-up, if the reply defers your enquiry and names the date. Enquiries are kept for 12 months. You can ask to see, correct or delete it.
Who is responsible for your information
The controller is AI UVD Limited.
- Company number: 16977480
- Registered office: 1192 Stratford Road, Hall Green, Birmingham, West Midlands, United Kingdom, B28 8AB
- Privacy contact: privacy@aiuvd.com
Privacy requests are handled by Sam Naseem.
What AI UVD collects
If you use the contact form: your name, work email address, your message and the time it was sent. If you reached the form from a link on another page of this site, it also sends a short label for that page, such as "backstop". The service that receives the form, Amazon Web Services (API Gateway, Lambda and Simple Email Service), run by AI UVD, may also record technical details, such as your IP address, for security. Those technical logs are kept for 30 days and then deleted.
If you email: your email address and name, what you write, any attachments, and the details in your email signature.
If a conversation or work follows: notes of what was discussed, proposals, the contract, and invoicing details.
If you become a client: the contract or signed scope, the name and email of the person who approves invoices, the company's billing address, any purchase-order number you give, and a record of what was invoiced and paid. AI UVD does not hold your card or bank details.
If work involves your systems or data: Where the work needs it, AI services see personal data in samples, logs or notes only on a business or API plan that has a data processing agreement and does not train on it. Records of the work itself are kept as set out below.
What not to send: passwords, special category data (for example, health information), or personal data about your customers or staff. If any arrives unasked, AI UVD deletes what it does not need.
When you visit the site: no cookies and no analytics. The hosting provider may keep server logs, which can include IP addresses, for security.
Why AI UVD uses it, and the lawful basis
| What it is used for | Lawful basis |
|---|---|
| Reading and replying to your enquiry | Legitimate interests: replying to people who have written to the business |
| Keeping a record of the conversation, in case you write again | Legitimate interests |
| Keeping the enquiry and client record in the CRM | Legitimate interests; contract once work starts |
| Preparing a proposal, and carrying out work you ask for | Contract, including steps you ask for before a contract |
| Contracts, invoices and payment records | Contract; legal obligation for accounting records |
| One follow-up, on the date named in a reply that defers your enquiry, asking whether the work is still a priority | Legitimate interests, and the follow-up itself tells you how to say no. If you are a sole trader or a partnership, it is sent only if you said yes when the reply asked (consent, as the email marketing rules require). |
| Any other marketing | Not used. If that ever changes, AI UVD will ask you first. |
Where the basis is legitimate interests, you have the right to object (see "Your rights").
Automated decisions. No decision about you is made by automated means. No automated tool sorts or routes enquiries. Sam Naseem writes and approves every reply; Claude may help draft one, on a business or API plan that has a data processing agreement and does not train on your data.
Who sees it and where it is stored
- Sam Naseem, who reads enquiries and replies to them.
- Accounts lead, who handles proposals, contracts and invoices once work is agreed.
- Trusted engineers brought in for specific client work, named in the proposal, only where that work needs it.
- Service providers that store or carry information on AI UVD's behalf, under contracts that limit what they may do with it:
- Form handling and storage: Amazon Web Services (API Gateway, Lambda and Simple Email Service), run by AI UVD, London (eu-west-2)
- Enquiry and client records: a CRM built and run by AI UVD, hosted on Amazon Web Services in London (eu-west-2). It holds your name, email, company, the enquiry, and notes of what was agreed.
- Email: Google Workspace
- Website hosting: Amazon Web Services: Amazon S3 in the London region (eu-west-2), delivered through Amazon CloudFront
- Invoices and accounting records: Dext, which stores data on Amazon Web Services in Ireland and Germany, with backups in the US, and AI UVD's accountants, who see invoices, including client names, to prepare the accounts.
- AI services used in delivery work: Anthropic (Claude), on a business or API plan (Team, Enterprise or the Anthropic API), which processes data in the United States under a data processing agreement and does not train on inputs or outputs by default. Where a client has its own AI account (Claude Enterprise, or a model service in the client's own Azure tenant), the work is done inside that account instead, so the data stays in the client's own tenant under the client's own agreement with the provider.
- Outside the UK: Anthropic, which provides Claude for delivery work, processes data in the United States; the safeguard is the Standard Contractual Clauses with the ICO's UK Addendum, which form part of Anthropic's data processing agreement. Dext, which holds accounting records, stores data in Ireland and Germany, both in the EEA and covered by the UK's adequacy regulations, and keeps backups in the United States under the same Clauses and Addendum. AI UVD's Google Workspace data region is set to Europe, which covers data at rest, including backups, and processing for Google's core services such as Gmail; it does not cover every kind of data, such as logs and cached content, so it is not a promise that nothing ever leaves Europe.
- Nobody else. Your details are not sold, rented or shared for anyone's marketing. They are disclosed only if the law requires it.
How long it is kept
- Enquiries that do not lead to work: 12 months after the last contact, then deleted.
- Records of work carried out: Six years after the engagement ends.
- Contracts, invoices, payment and accounting records: as long as company and tax law require.
Your rights
Under UK data protection law you can ask AI UVD to:
- tell you what it holds about you and give you a copy (access)
- correct anything that is wrong (rectification)
- delete it, where there is no longer a good reason to keep it (erasure)
- limit how it is used while a question is being resolved (restriction)
- stop using it where the basis is legitimate interests (objection)
- give it to you in a portable format, where the basis is contract (portability)
To ask, email privacy@aiuvd.com. There is normally no charge. AI UVD may need to confirm who you are. It replies within one month. If a request is complex, or one of several, that can be extended by up to two further months, and AI UVD will tell you why within the first month.
Complaints
If you are unhappy with how AI UVD has handled your information, tell AI UVD first, at privacy@aiuvd.com or any other way you prefer. AI UVD acknowledges a complaint within 30 days, looks into it without undue delay, keeps you informed, and tells you the outcome.
You can also complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: https://ico.org.uk/make-a-complaint/
Cookies
The site sets no cookies and uses no analytics. If analytics is added later, this section will say which tool is used, what it stores and how to refuse it, before it goes live.
Changes to this notice
Last updated: 2 October 2026. If the way AI UVD uses personal information changes, this page changes first.
Frequently asked questions
Will you add me to a mailing list?
No. Writing to AI UVD does not put you on any list. Your details are used to reply to your enquiry and, if it becomes work, to carry it out.
Do you sell or share my details?
No. They are not sold, rented or shared for anyone's marketing. The only others who handle them are the service providers that store and carry them for AI UVD, such as email and hosting, under contracts that limit what they may do.
Does an AI read my enquiry?
Every message is read by Sam Naseem and answered in writing. He decides whether work is accepted, deferred or declined. No automated tool sorts or routes enquiries. Sam Naseem writes and approves every reply; Claude may help draft one, on a business or API plan that has a data processing agreement and does not train on your data.
Can I ask you to delete my enquiry?
Yes. Email AI UVD and ask. AI UVD will delete it and confirm in writing, unless the law requires part of it to be kept, such as an invoice. In that case the reply says what is kept and why. You get a reply within one month.
Does the site use cookies?
No. The site sets no cookies and runs no analytics. If that changes, this notice will say so before it happens, including how to refuse them.
Questions about this notice
Write to AI UVD through the contact page, or email privacy@aiuvd.com.
Every engagement is architected by me, and I'm the person you deal with.
Sam Naseem
We take on a small number of clients at a time.