Privacy notice
Effective date: 10 July 2026.
DATBRAIN LTD · Company number 09818520
16 Whitehall, London, SW1A 2DY, United Kingdom
Scope
This notice explains how DATBRAIN LTD processes personal data when you use datbrain.ai, submit an AI Knowledge Audit request, communicate with us or become a customer. We apply the UK GDPR and Data Protection Act 2018 and, where applicable to individuals in the European Economic Area, the EU GDPR.
Data we collect and why
| Data | Purpose and lawful basis |
|---|---|
| Identity and business contact details | Responding to enquiries, assessing fit and taking steps requested before a contract. Basis: pre-contractual steps and legitimate interests. |
| Company, role, project, AI goal and knowledge-source information | Understanding requirements, preparing a diagnostic and delivering services. Basis: pre-contractual steps, contract and legitimate interests. |
| Messages and service records | Customer support, project delivery, quality, security and dispute handling. Basis: contract and legitimate interests. |
| Page URL and campaign parameters | Attribution and performance measurement. Basis: legitimate interests; any non-essential analytics technology is consent-based. |
| Billing and transaction records | Payments, accounting and legal compliance. Basis: contract and legal obligation. |
We do not intentionally request special-category data. Do not include sensitive personal data in free-text fields.
Sources and required information
We receive data directly from you, from your organisation, from referrals and from public business sources where relevant to a legitimate B2B relationship. Fields marked required are needed to evaluate and respond to the request; without them we may be unable to proceed.
Recipients and processors
We share data only where necessary with providers supporting website hosting, email and lead management (including the form endpoint at email.humandataincome.com), communications, scheduling, customer relationship management, document storage, professional advice and security. Providers act under appropriate contractual and confidentiality obligations. We may also disclose information where required by law or in connection with a corporate transaction.
International transfers
Some providers may process data outside the United Kingdom or EEA. Where required, we use an adequacy decision, the UK International Data Transfer Agreement/Addendum, EU Standard Contractual Clauses or another lawful transfer mechanism, with supplementary safeguards where appropriate.
Retention
- Enquiries not becoming customers: up to 24 months after the last meaningful interaction.
- Customer and contractual records: for the contract and normally 6 years afterwards.
- Financial records: as required by applicable tax and company law, normally 6 years.
- Consent and suppression records: for as long as needed to demonstrate and respect the choice.
We may retain data longer where required for a legal claim, regulatory obligation or security investigation, and delete or anonymise it when no longer needed.
Marketing
An audit enquiry authorises us to respond to that request; it does not automatically subscribe you to a newsletter. Where electronic marketing requires consent, we ask separately. You can object to B2B marketing or withdraw consent at any time. We may keep a minimal suppression record so we do not contact you again.
Cookies and analytics
Optional analytics and marketing technologies are disabled until the relevant consent is given. You can reject or change choices without losing access to the site. See our cookie policy or open cookie settings.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, object to processing based on legitimate interests or direct marketing, and withdraw consent without affecting earlier lawful processing. You may also complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local EEA supervisory authority where applicable.
How to exercise your rights
Write to the registered office above, addressed to “Privacy — DATBRAIN LTD”, or use the website enquiry form and begin the message with “Privacy request”. We may need to verify identity and will normally respond within one month.
Security and automated decisions
We use proportionate organisational and technical controls to protect data. No internet service is completely secure. We do not make solely automated decisions through this website that produce legal or similarly significant effects.
Changes
We may update this notice when our processing or legal requirements change. The effective date above indicates the latest version.