Privacy & Cookie Policy

1. Who we are

[Your Legal Business Name], trading as AcrossAI Tools (“we”, “our”, “us”), operates the interactive tools at tools.acrossai.co.uk and is the data controller for personal data processed through this site. Our main website with articles, news and guides is at acrossai.co.uk.

For privacy questions, contact us through the contact form on acrossai.co.uk.

2. What we collect

The interactive tools on this site are designed to run in your browser. Specifically:

• Tool inputs (e.g. answers in the readiness, savings or risk checkers) — processed locally in your browser. We do not store them on a server.
• Email address — only when you choose to use a "Email me my results" or newsletter form. Used to send the requested content and, if you opt in, our briefing.
• Analytics data — only if you accept analytics cookies. See section 4.
• Server logs — standard request data (IP, user agent, page accessed) retained briefly for security and abuse prevention. Lawful basis: legitimate interest.

We do not knowingly collect special category data through these tools. Please do not paste confidential or personal information into the input fields.

3. Legal basis (UK GDPR)

• Consent — for analytics, marketing cookies and newsletter sign-up.
• Legitimate interests — for running and securing the site, and for limited server logs.
• Contract / pre-contract — when you request information that we send to your email.

4. Cookies & tracking

We use a small number of cookies and similar storage. None of them are loaded until you give consent (or choose “analytics only”).

We use Google's Consent Mode v2 with all categories set to denied by default. We never load Google Analytics scripts before consent. We anonymise IP addresses and disable ad personalisation unless you accept all.

Manage cookie preferences →

5. Email & newsletter

If you submit your email to receive results, a download or our weekly briefing, we use it only for the purpose you requested. You can unsubscribe at any time using the link in any email.

We currently use placeholder email infrastructure. When we connect a provider (e.g. Mailchimp, Brevo or ConvertKit) we will update this policy and add the provider as a sub-processor below.

6. Who we share data with

• Paddle.com Market Limited — our Merchant of Record for Pro subscriptions. Paddle handles payments, billing, tax compliance, invoicing and subscription management on our behalf. See Paddle's privacy notice.
• Google Analytics (Google Ireland Ltd.) — only if you consent. Data may be transferred to the US under appropriate safeguards (UK IDTA / EU SCCs + UK Addendum).
• Hosting provider — to serve the site.
• Email provider — once connected, only for messages you opt into.
• Authorities — where required by law.
• Professional advisers — legal, accounting and similar, where necessary.

We never sell personal data.

7. How long we keep data

• Cookie preference: up to 1 year, or until you clear it.
• Email subscriptions: until you unsubscribe.
• Server logs: typically up to 30 days.
• Analytics: per Google's GA4 retention settings (we use 14 months).

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction or deletion
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (this doesn't affect prior processing)
• Complain to the ICO at ico.org.uk

To exercise any of these, contact us via acrossai.co.uk.

9. Security

Tool inputs are processed in your browser and not transmitted to our servers. Email and analytics data are transmitted over HTTPS. We restrict access to systems on a need-to-know basis.

10. Changes to this policy

We may update this policy as the site evolves. The "Last updated" date at the top will change. For material changes affecting consent, we will re-prompt the cookie banner.