Privacy & contact.
How project enquiries are handled through this website.
Who is responsible?
AI Cyber Change Management is the commercial presentation of a Europe-based independent consulting practice. Before public launch, the legal identity of the data controller, registered business contact details and any mandatory business disclosures must be added here. Until that is completed this notice is a draft.
What the enquiry form collects
When you submit a business enquiry we process your name, corporate email address, organisation, country, selected industry, requested domains and services, engagement length, preferred contracting route and the project description you provide. Do not submit passwords, confidential documents, government identifiers or sensitive personal information.
Why and on what basis?
We use these details only to review and reply to a business enquiry, discuss potential services and, if appropriate, take steps towards a consultancy engagement. Depending on the circumstances, the relevant GDPR basis may be legitimate interests in responding to B2B enquiries or steps requested before entering into a contract. The final controller should confirm and document the relevant basis.
Who receives the information?
The website is intended to run on Cloudflare, which handles hosting, security checks and the enquiry endpoint. Cloudflare Turnstile processes technical details to assess bot activity. Enquiry contents are sent by the transactional email provider Resend to the practice's private Gmail inbox. These providers can process information outside the European Economic Area subject to their applicable contractual and data-transfer arrangements. We do not publish your details or add them to a marketing mailing list.
How long will it be kept?
Enquiries should be retained only as long as necessary to evaluate a potential engagement, respond and meet applicable legal obligations. A precise retention schedule and any deletion procedures must be defined by the controller before the site goes live.
Your rights and further questions
Depending on applicable law, you may request access, correction, deletion, restriction or objection, and may complain to an appropriate data protection authority. Use the contact form for initial contact; the final published policy must also provide a suitable direct privacy contact route and complete controller details.
Pre-launch requirement: replace the placeholder controller details, finalise retention and international transfer information, verify provider agreements and ensure a usable privacy rights contact before deployment. This notice must not be treated as a finished legal review.