Privacy Policy

SCORE-AI Ltd (“SCORE-AI”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our marketing website at score-ai.com, submit a form, or book a meeting with us.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR).

Using the SCORE-AI Platform? A separate privacy notice applies to personal data processed through our maturity assessment platform at app.score-ai.co. Read it at https://app.score-ai.co/privacy-policy.

1. Who we are

SCORE-AI Ltd is a company registered in England and Wales (company number 16942674). Our registered office is 12 Beechcroft Close, Ascot, SL5 7DB. You can contact us about this policy at help@score-ai.co.

2. Scope

This policy covers:

• Our public marketing website and any related landing pages, blogs, or forms.
• Meetings you book with us using the scheduler embedded on our site.
• Emails and other communications we send in connection with those interactions.

3. Personal data we collect

Data you give us directly

• Contact details you submit through our forms or meeting scheduler — typically your name, business email address, company name, job title, and the message or enquiry you send us. Some forms may optionally capture a phone number or LinkedIn URL.
• Communications you send us by email or through support channels.

Data we collect automatically

• Technical and usage data: IP address, browser and device information, pages visited, features used, timestamps, and referring URLs.
• Cookie data: limited cookies set by third-party services embedded on our site — see section 9 below.

Our website is aimed at business users. We do not knowingly collect special category data (such as health, political, or religious information), and we ask that you do not submit such data through our forms.

4. How we use your data and our legal basis

Under UK GDPR / GDPR Article 6, every use of your personal data must have a lawful basis:

• Respond to enquiries and book meetings — legitimate interests (replying to people who contact us) or, where you are a prospective customer, steps taken at your request prior to entering a contract.
• Send service communications (meeting confirmations, responses to your enquiries) — legitimate interests.
• Keep the website secure and detect abuse — legitimate interests and legal obligation.
• Improve our website and marketing, using aggregated or pseudonymised data wherever possible — legitimate interests.
• Send marketing communications about our own similar products and services (with an opt-out in every message) — legitimate interests. Where the law requires consent, we will ask for it first.
• Comply with legal, tax, and regulatory obligations — legal obligation.

Where we rely on legitimate interests, we have carried out a balancing test and believe our interests do not override your rights. You can ask us about that balancing test at any time.

5. How we share your data

We do not sell your personal data. We share it only with a small number of carefully selected service providers who help us run our website and respond to enquiries, and with professional advisors, regulators, or law enforcement where required.

Each service provider operates under a written data-processing agreement committing them to process personal data only on our behalf and in line with applicable data protection law. A current, up-to-date list of our processors is available on request by emailing help@score-ai.co.

We may also disclose personal data in connection with a merger, acquisition, or sale of assets, where the recipient agrees to honour this policy.

6. International data transfers

Some of the service providers we use are based outside the UK and the European Economic Area (EEA), mainly in the United States. When we transfer personal data outside the UK or EEA, we put in place an appropriate safeguard such as:

• UK or European Commission adequacy decisions, where available.
• The UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
• Additional technical measures such as encryption and pseudonymisation where appropriate.

You can request a copy of the safeguards we use by contacting us.

7. How long we keep your data

• Enquiry and meeting data: kept while we are corresponding with you and for a reasonable period afterwards to handle follow-ups and disputes.
• Marketing data: kept until you opt out or withdraw consent.
• Website security and audit logs: kept for a limited period to support investigations and compliance.
• Financial and contractual records: retained for 6 years to comply with UK tax and accounting law.

8. How we protect your data

Security is fundamental to how we build and run SCORE-AI. Our website is served over TLS, and we apply access controls, encryption, input validation, and regular security reviews. No system can be 100% secure. If we ever become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the UK Information Commissioner’s Office without undue delay and, where required, notify affected individuals.

9. Cookies and similar technologies

Our marketing website embeds a HubSpot meetings scheduler and forms so visitors can contact us or book a call. When you load a page containing these, HubSpot may set a small number of cookies (including __hstc, hubspotutk, __hssc, and __hssrc) used to recognise returning visitors and measure form and scheduler usage. Cloudflare may also set infrastructure cookies such as __cf_bm and __cfuvid to protect those services from abuse.

The HubSpot analytics cookies are treated as non-essential and are only set where consent is required and, where applicable, given. You can control or delete cookies at any time through your browser settings, and where a cookie banner is shown you can change your choices from that banner. If we add further analytics or marketing cookies in the future we will update this policy and, where required by law, ask for your consent before they are set.

10. Your rights

Under UK GDPR and GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct data that is wrong or incomplete.
• Erasure — ask us to delete data where we no longer have a lawful reason to keep it (“right to be forgotten”).
• Restriction — ask us to limit how we process your data in certain circumstances.
• Portability — ask us to give you, or transfer to another organisation, data you have provided in a structured, commonly used, machine-readable format.
• Object — object to processing that relies on legitimate interests, including direct marketing.
• Withdraw consent — at any time, without affecting the lawfulness of processing we carried out before you withdrew it.
• Complain to the UK Information Commissioner’s Office at ico.org.uk or your local data protection authority in the EEA.

To exercise your rights, email us at help@score-ai.co. We aim to respond within one month. Complex requests may take up to three months in total, and we will tell you if we need the extra time. We may need to verify your identity before acting on your request.

11. Marketing

We will only send you marketing emails where we have a lawful basis to do so. You can opt out at any time by clicking the unsubscribe link in any marketing email or by emailing us. Opting out of marketing will not stop us sending you essential communications such as responses to enquiries or meeting confirmations you have asked for.

12. Links to other websites

Our website may link to third-party websites, including our Platform at app.score-ai.co. We are not responsible for the privacy practices of external sites and encourage you to read their privacy notices.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will post a prominent notice on our website before the change takes effect. The “Last updated” date at the top tells you when the policy was last revised.

14. Contact us

Questions, requests, or complaints? Contact us at:

SCORE-AI Ltd
Company number 16942674
Registered office: 12 Beechcroft Close, Ascot, SL5 7DB
Email: help@score-ai.co

If you are not happy with our response, you have the right to complain to the UK Information Commissioner’s Office at ico.org.uk or your local data protection authority in the EEA.