Privacy
Policy.

1. Who we are

Vaer AI Ltd is a consultancy providing AI search visibility research and advisory services. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the "data controller" responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at [email protected]. Our registered postal address is available on request.

2. The information we collect

We collect and process the following categories of personal data:

Information you give us. When you email us, enquire about our services, request a workshop, or book a call, we collect the details you choose to provide, typically your name, email address, company, role, and the contents of your message.

Information collected automatically. When you visit our website we collect a limited amount of technical data through privacy-friendly, cookieless analytics, such as the pages viewed, approximate location (country level), referrer, and general device and browser type. This is aggregated and is not used to identify you personally.

3. How we use your data, and our lawful bases

Under the UK GDPR we must have a lawful basis for processing your personal data. We rely on the following:

• To respond to your enquiries and prepare proposals: on the basis of taking steps at your request prior to entering a contract, and our legitimate interests in responding to people who contact us.
• To provide our services: on the basis of performance of a contract with you or your organisation.
• To operate, secure, and improve our website: on the basis of our legitimate interests in running a safe and effective site, balanced against your rights.
• To send you occasional relevant communications: where you have asked to hear from us or where we are otherwise permitted to do so, and always with an easy way to opt out.
• To comply with our legal obligations: for example keeping records required by law.

4. Cookies and analytics

We do not use advertising or cross-site tracking cookies. Our website analytics are cookieless and collect only aggregated, non-identifying usage data.

Some features rely on third-party services that may set their own cookies or receive technical data when you use them. In particular, our booking tool is provided by Google Calendar, and our web fonts are served by Google, which means Google may receive your IP address when a page loads. These third parties process that data under their own privacy policies. If you arrive from an advertising campaign, for example on LinkedIn, that platform may also process data about your visit under its own terms.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf and under contract, including:

• our website hosting and analytics provider (Cloudflare);
• Google, for appointment booking and web font delivery;
• our email and productivity providers;
• professional advisers, or authorities, where we are legally required to disclose information.

6. International transfers

Some of our providers are based outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK law, such as adequacy regulations or the UK International Data Transfer Agreement, to ensure your data receives an equivalent level of protection.

7. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out above. Enquiry and correspondence records are typically kept for up to two years after our last contact, unless a longer period is required for an ongoing relationship or to meet a legal obligation. When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Under the UK GDPR you have the following rights in relation to your personal data:

• the right to be informed about how your data is used;
• the right to access a copy of your data;
• the right to rectification of inaccurate data;
• the right to erasure ("right to be forgotten");
• the right to restrict processing;
• the right to data portability;
• the right to object to processing, including direct marketing;
• the right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. We will respond within one month. There is normally no charge.

9. Marketing

We will only send you marketing communications where you have consented, or where the law otherwise allows it. You can opt out at any time by replying to any message or contacting us at [email protected].

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, but we work to protect your data and maintain safeguards on an ongoing basis.

11. Children

Our website and services are intended for businesses and professional audiences. They are not directed at children, and we do not knowingly collect data relating to anyone under 18.

12. Third-party links

Our website may link to third-party sites. We are not responsible for their content or privacy practices, and we encourage you to read the privacy policies of any site you visit.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Please check back periodically for the latest version.

14. Complaints

We hope to resolve any concern you raise directly. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling their helpline on 0303 123 1113.

15. Contact us

For any question about this policy or your personal data, contact us at [email protected].