This notice explains how BeUsefulAI Ltd handles personal information through this website, business enquiries, investor communications and client engagements. It should be read alongside any client terms or data processing agreement agreed for a specific engagement.
1. Who we are
BeUsefulAI Ltd, also referred to as BUAI, is registered in England and Wales, company number 17297090. Our registered office is Oxford Centre for Innovation, Blue Boar Court, 9 Alfred Street, Oxford, OX1 4EH.
ICO registration number: ZC208519.
Contact: info@beusefulai.com.
2. Who this notice covers
This notice applies to website visitors, people who contact BUAI, prospective clients, client personnel, business contacts, prospective investors, suppliers, contractors and job applicants.
3. What we collect and why
| Context | Personal information | Purpose | Likely lawful basis |
|---|---|---|---|
| Website enquiries | Name, email address, organisation, role, phone number and message content. | To respond, understand whether we can help, arrange follow-up conversations and keep appropriate business records. | Legitimate interests. Where needed before entering into a contract, contract may apply. |
| Client engagements | Information needed to deliver the agreed Discover, Build or Run work. This may include business records, workflow information, role information and selected contact details. | To provide the agreed service, build and operate relevant agents, support human review and maintain agreed records. | Usually contract or legitimate interests where BUAI is controller. Where BUAI acts for a client as processor, we act on the client's documented instructions. |
| Business contacts and market research | Name, job title, employer, business contact details and professional information from public or business sources. | To identify relevant commercial contacts, understand market needs and support business development. | Legitimate interests, subject to appropriate balancing and opt-out rights. |
| Prospective investors and the BUAI Investor CRM | Name, preferred name, organisation, professional profile, business contact details, relevant relationship context, public-source research and source links, founder notes, next actions, invitation delivery status, dates when a private deck link is opened or reopened, confirmation of contact details, and the investor category declared at the deck-access step. | To manage a genuine prospective investment relationship, provide controlled access to investor information, keep a concise shared record for BUAI's founders, record minimal evidence of the deck journey and arrange appropriate follow-up. The access declaration is not BUAI's final eligibility, KYC or AML decision. | Usually legitimate interests, following a balancing assessment. Consent is used where the electronic-marketing rules require it. Contract and legal obligation may apply if an investment proceeds to formal onboarding. |
| Investor onboarding, suppliers, contractors and applicants | Contact details, role information, communications, identity and due diligence material, payment details or application information where relevant. | To complete compliant investor onboarding, manage supplier relationships, contracts, recruitment and company records. | Contract, legal obligation, legitimate interests or consent where appropriate. |
4. Our approach to AI, trust and control
BUAI designs AI agents around defined business purposes, agreed information, named users, human decision points and monitored outputs. We do not treat client information as an unmanaged experiment.
For client work, we agree what the agent is for, what information is needed, who may use it, where a person must decide, and how access, retention and deletion should work. Demonstrations, fictional case studies and live client work are kept separate.
Where the Investor CRM helps prepare a summary from public professional sources, the source links are retained and a BUAI founder must review the draft before it becomes an approved relationship note. The summary is not used to make a solely automated decision about the person.
5. Data in transit and at rest
Client information is protected in transit using encrypted connections. Where information is retained for an agreed engagement, it is protected at rest and governed by agreed access, retention and deletion controls.
Some AI processing requires approved providers to process information in controlled runtime environments to produce the requested output. That is not the same as publishing, selling or using client information to train public models. Provider terms, data-flow position and retention settings are reviewed for the relevant engagement.
6. Providers and sharing
We may share personal information with professional advisers, IT providers, hosting providers and other service providers where needed to run the business or provide the agreed service. We do not sell personal information.
The Investor CRM and private deck journey may use Microsoft for founder authentication and email delivery, Netlify for secure web hosting and delivery, Supabase for controlled database services, and a selected SMS provider where a text invitation is requested. These providers receive only the information needed for their role.
External links, including LinkedIn and the Information Commissioner's Office, are governed by those organisations' own privacy notices.
7. International transfers
Some providers may process information outside the UK. Where UK data protection law requires safeguards, we rely on appropriate safeguards such as adequacy arrangements or contractual protections. Client-specific transfer positions may be set out in the relevant client terms or data processing agreement.
8. Cookies and website services
This website does not use advertising trackers. The site host may process basic technical information needed to deliver and protect the website. The site may load fonts or other technical assets from third-party providers, which can involve those providers receiving basic browser or network information.
A private investor-deck invitation uses an expiring unique link and strictly necessary access cookies. BUAI records whether the invitation link is opened or reopened, whether the displayed contact details are confirmed, and the investor category declared at the access step. We do not use advertising pixels, device fingerprinting, or page-by-page and dwell-time surveillance in the investor deck.
9. Retention
We keep personal information only for as long as it is useful for the reason it was provided, or as required for legal, accounting, contractual or business record purposes.
For client engagements, retention should be agreed in the relevant contract, data processing agreement or engagement terms. For website enquiries where no relationship develops, we normally keep enquiry information for no longer than 12 months.
Private investor-deck links normally expire after 14 days. Prospective-investor CRM records are reviewed no later than 12 months after the last meaningful contact or after the relationship is closed, and are deleted or reduced when they are no longer needed. If an investment proceeds, onboarding, company, tax and transaction records may need to be retained for longer under separate legal or regulatory requirements.
10. Your rights
Depending on the circumstances, you may ask us to access, correct, delete or restrict use of your personal information, object to how we use it, or ask for a copy in a portable format. These rights are not absolute and may depend on the lawful basis and context.
You can object at any time to the use of your personal information for direct marketing. We will stop using it for that purpose.
To exercise your rights, contact info@beusefulai.com.
11. Where investor information comes from
Investor information may be provided by the individual, a BUAI founder, a mutual business contact, or a public professional source such as an organisation website or professional profile. Where we obtain it from someone else or from a public source, we provide this privacy information at the first communication or otherwise within the period required by law.
12. Automated decision-making
BUAI does not make decisions about people based solely on automated processing without meaningful human involvement. AI-assisted output is used to support human judgement, not replace it.
13. Concerns and complaints
Please contact us first if you have a privacy concern, so we can try to resolve it.
You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint.
Review note
This notice is intended to be practical and clear. It should be reviewed when BUAI's live client processing arrangements, providers, retention model or client terms change materially.