Privacy Policy
This policy explains how Sovereign Chain Ltd ("we", "us") collects, uses and protects personal data when you use AI Social Care (aisocialcare.co.uk).
1. Who we are
- Sovereign Chain Ltd
- Companies House: 16139802
- ICO Registration: ZC182670
- Registered in England and Wales
- Contact for privacy: privacy@aisocialcare.co.uk
2. What we collect
2.1 When you take the readiness check
Your answers are processed in your browser only. They are not transmitted to us unless you request the PDF report at the end.
2.2 When you request the PDF report
- Your name, email address, service name (optional), service size band (optional)
- Your assessment score and answers (so we can generate the personalised PDF)
2.3 When you contact us or book a service
- Your name, email, organisation, and message content
2.4 Automatically
Standard HTTP request logs (IP address, user agent, timestamp) via our hosting provider, retained for security and abuse prevention.
We do not use analytics cookies, no advertising cookies, no tracking pixels. The site uses only session cookies strictly necessary to make the readiness check work.
3. Why we process it (lawful basis)
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Delivering the readiness check PDF you requested | Contract (6(1)(b)) |
| Delivering paid services (gap analysis, workshop) you book | Contract (6(1)(b)) |
| Sending occasional guidance emails | Consent (6(1)(a)) — with explicit opt-in, unsubscribe any time |
| Security and abuse prevention | Legitimate interests (6(1)(f)) |
4. How long we keep it
- Readiness check submissions: 24 months, then deleted or anonymised
- Client records (paid services): 7 years (statutory record-keeping requirement)
- Marketing email subscribers: until you unsubscribe
- Server logs: 30 days
5. Who we share it with (sub-processors)
We share data only with the following sub-processors, strictly to deliver the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting and DNS | US / global edge |
| Netlify Forms (or Tally, as applicable) | Form submission handling | US |
| SendGrid (Twilio, Inc.) | Transactional email delivery | US |
| Stripe, Inc. | Payment processing (paid services only) | US / EU |
International transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable.
We do not sell your personal data. We do not share it with advertisers.
6. Your rights (UK GDPR)
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion (subject to legal retention obligations)
- Restriction — pause our processing
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — for marketing emails, at any time
- Complain to the ICO — ico.org.uk
To exercise any right, email privacy@aisocialcare.co.uk. We respond within one calendar month as required by law. Under the Data (Use and Access) Act 2025, we acknowledge complaints within 30 days.
7. Security
- All traffic is TLS 1.3 encrypted
- Access to production systems is restricted and uses two-factor authentication
- Data breaches materially affecting your data will be reported to the ICO within 72 hours
8. Children
This site is not directed at children under 16 and we do not knowingly collect their personal data.
9. Changes to this policy
Material changes are notified by email to registered users at least 30 days before taking effect. The current version is always at this URL.
10. Contact
- Privacy questions and GDPR requests: privacy@aisocialcare.co.uk
- Security disclosures: security@aisocialcare.co.uk
- General: hello@aisocialcare.co.uk