Privacy Policy
Last updated: 29 April 2026
This is the privacy notice for Insight Advisory UK (operating from England, contactable at hello@insightadvisory.uk). We are the data controller for personal data processed through this site.
If you spot anything in here that's unclear or missing, email us. We're a compliance consultancy — we'd rather you challenge a wording than walk away unsure.
What data we collect, and when
When you email us
If you email hello@insightadvisory.uk (including via the "Book a Discovery Call" button), we receive your email address, your name if you include it, and whatever you write in the message. The email is delivered through Zoho Mail (our email provider).
When you use the EduSafe AI tool at /check
You enter four profile answers (region, student age, sensitive-data flag, classroom-or-admin), an optional tool name, and either a privacy policy URL or pasted text. That information is sent to Anthropic's Claude API to produce the compliance verdict. We do not store any of it on our servers. Anthropic processes it under their privacy policy and does not use API inputs to train models.
Your browser stores a small counter in localStorage (key: edusafe_checks) so the free 3-check limit works. That counter never leaves your device. You can clear it at any time from your browser's site-data settings.
What we don't collect
- No analytics, no cookies, no tracking pixels.
- No account system, no signup.
- No retention of EduSafe inputs or outputs after the response is returned.
Lawful basis
- Email enquiries — legitimate interest (responding to a request you sent us).
- EduSafe AI processing — your explicit instruction (you submitted the form to receive a verdict). No personal data of children should be entered into the tool — it is designed to analyse vendor privacy policies, not student data.
Who else processes your data
- Netlify, Inc. — hosts this website. May log IP addresses for security purposes. Privacy policy.
- Zoho Corporation — provides our email (hello@insightadvisory.uk). Privacy policy.
- Anthropic, PBC — runs the Claude model that powers the EduSafe AI verdict. Privacy policy.
These processors are based in the US. Transfers rely on the UK International Data Transfer Addendum and standard contractual clauses where applicable.
How long we keep things
- Emails you send us: kept in our inbox until the conversation is closed and for a reasonable period after (typically 24 months) so we can pick the thread up if you come back.
- EduSafe AI inputs and outputs: not stored. Each request is processed in-session and discarded.
- Server logs from Netlify: retained per Netlify's standard retention (typically 30 days).
Your rights under UK GDPR
You have the right to access, correct, delete, restrict, port, or object to processing of your personal data. To exercise any of these, email hello@insightadvisory.uk with "Data rights request" in the subject. We respond within 30 days.
If you believe we've handled your data badly, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. We'd appreciate the chance to fix it first, but it's your right to go straight to the regulator.
Children
This site is intended for adults working in education, IT, or compliance. We do not knowingly collect data from children. The EduSafe tool is built to protect children's data by checking the vendors who handle it — it is not for children to use directly.
Changes to this notice
If we change anything material, we update the "Last updated" date at the top and, where appropriate, notify you in your next email reply. The history of changes is available in the public Git history of this site at github.com/apbrooks73/insightadvisory-uk.