YOUR INFORMATION

Privacy notice.

Last updated: 21 October 2026.

Who is responsible for your information?

The data controller is Nathaniel Hiscocks, trading as JAAIB, responsible for deciding why and how your personal information is used. JAAIB (Just Another AI Business) is a UK trading name. It is not incorporated or registered as a limited company.

For privacy enquiries, rights requests or complaints, email [email protected]. You do not need to submit the Register Interest form first.

What this notice covers

This notice covers jaaib.com, the Register Interest form and related enquiry correspondence. It does not cover the separate MyAI application or a customer's internal documents. The website demonstration uses fictional, pre-written examples, not a live AI chat service.

Information collected

Information you provide: the form requires your name, company and email address. Your message is optional. Company details may identify you, particularly if you are a sole trader. We also receive information you choose to include in follow-up correspondence. Please do not send sensitive personal information, information about other people or confidential company documents.

Technical information: hosting and spam-prevention services process information such as your IP address, browser/device signals, requested URL and request timing. The form uses a Turnstile verification token and a hidden anti-spam field, which is normally blank.

The required fields are necessary to use this form; there is no legal obligation to register interest. Without those fields or successful spam verification, the form cannot accept an enquiry. You can leave the message blank or contact us directly by email.

How an enquiry is processed

When submissions are available, your browser sends the form data to a Cloudflare Pages Function. It validates the submission and sends the verification token and visitor IP address to Cloudflare Turnstile. If verification succeeds, it sends your name, company, email address and optional message to Resend to create an email to the enquiry inbox. Your email address is also used as Reply-To. A hash of the verification token is used as an email-request identifier to help avoid duplicate provider requests.

The receiving mailbox is Apple iCloud Mail. There is no application enquiry database or mailing list. The website code does not save enquiries in browser storage. Email providers may retain message content, delivery records and backups. Provider acceptance of an email request does not itself confirm inbox receipt.

If submissions are unavailable, the normal form flow does not send the entered enquiry to Resend. Hosting services may still process technical requests. A failed submission does not mean there are no provider service records.

Purposes and lawful bases

Responding to enquiries: we use your details to answer your questions, discuss your interest in MyAI and manage related correspondence. The lawful basis is legitimate interests under Article 6(1)(f) UK GDPR: responding to people who contact the business and understanding their requirements.

Running the website and preventing spam: we rely on legitimate interests under Article 6(1)(f) to operate a usable enquiry channel and limit automated misuse. You can object to processing based on legitimate interests, and your rights and interests must be considered.

Pre-contractual requests: where you specifically ask for steps necessary towards a contract with you personally, Article 6(1)(b) may apply to those steps. It does not apply automatically to an enquiry made on behalf of your employer.

Privacy rights and legal duties: where processing is necessary to meet obligations under data protection law, such as responding to a rights request, we rely on legal obligation under Article 6(1)(c).

Submitting Register Interest does not subscribe you to a newsletter or authorise unrelated marketing. We do not treat submitting the form as consent to all uses of your information.

Service providers

Cloudflare: Pages and Pages Functions host the site and process requests; Turnstile helps detect automated submissions. Cloudflare also acts as a controller for certain signals used to improve Turnstile's bot detection. See Cloudflare's privacy policy and the Turnstile privacy notice.

Resend: processes enquiry content, sender/recipient and Reply-To details for email delivery and associated service records. Its published terms distinguish customer-data processing from its own account, usage and abuse-prevention purposes. See Resend's privacy policy and data processing addendum.

Apple iCloud Mail: hosts the receiving mailbox used by Nathaniel Hiscocks to handle enquiries and related correspondence. Apple processes email content and associated service information under its applicable terms. See Apple's privacy policy and iCloud terms. Providers may use subprocessors as described in their policies and terms.

International processing

These providers operate internationally, so your information may be processed outside the UK. Resend states that customer data, including message content and delivery logs, is stored in the United States, and that selecting a European sending region does not change that storage location. Apple's privacy policy describes international processing and generally storing personal data in the United States. Cloudflare also describes international processing in its privacy policy.

The providers' published privacy and data-processing terms describe their international-transfer arrangements. Resend's published terms include a UK Addendum to standard contractual clauses. These descriptions are not a guarantee that your information remains in the UK or a statement that JAAIB has independently verified a particular account-specific transfer safeguard. For information available about the handling of your enquiry, contact [email protected].

How long information is kept

Enquiry emails and related correspondence are kept for 12 months after the last meaningful contact, meaning the most recent substantive enquiry or reply. Nathaniel Hiscocks reviews enquiries monthly and manually deletes expired enquiry emails and related correspondence, subject to justified legal retention requirements. Records that reach 12 months between reviews are deleted at the next monthly review.

This period supports reasonable follow-up without retaining enquiry correspondence indefinitely. If particular records need to be kept longer for a justified legal requirement or dispute, their use is limited to that purpose and the need to keep them is reviewed.

This is a manual process, not an automatic website deletion feature. The 12-month policy applies to enquiry records under the operator's control. Provider delivery/security records, deleted-item recovery systems and backups have separate retention and deletion arrangements under their policies and service terms. We do not promise that deleting an enquiry removes every provider-held copy immediately or that all providers use the same retention period.

Cookies, browser storage and tracking

The website code includes no advertising or analytics integration and does not save enquiry details in local storage or cookies. Browsers may remember form fields through their own autofill settings.

When enquiry configuration is available, the website loads Turnstile, potentially before you press Register Interest. It processes browser/device signals to distinguish people from automated requests. Cloudflare describes that processing in its Turnstile privacy notice linked above. The website does not implement a newsletter subscription or marketing-consent mechanism.

Your rights

Depending on the circumstances, you can request access to your personal information, correction, erasure or restriction of its use. You can object to processing based on legitimate interests. Portability applies in certain cases where automated processing is based on consent or a contract. If processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Rights have conditions and exceptions. Requests are normally free and must be handled without undue delay, generally within one month, subject to the legal rules on identity checks, clarification and permitted extensions. We may ask for proportionate information to confirm your identity.

Email [email protected], addressed to Nathaniel Hiscocks, trading as JAAIB. You do not need to use the enquiry form or wait for an enquiry reply.

The form uses automatic validation and spam checks. The website does not use enquiries for automated decisions producing legal or similarly significant effects, or implement AI enquiry analysis or customer profiling.

Complaints

You can raise a privacy concern at [email protected]. You also have the right to complain to the UK's Information Commissioner's Office (ICO): see how to make a complaint, or call 0303 123 1113.

Changes to this notice

We will update this notice when relevant practices change. If JAAIB incorporates and responsibility for your information changes, the notice will identify the new controller and explain the relevant changes. A future company is not the current controller.