Legal

Privacy policy

How I collect, use and protect your personal information, written in plain English.

Last updated: 3 November 2026

In short

  • I only collect what I need to reply to you and do the work you ask for.
  • This website doesn’t use cookies or tracking.
  • I never sell your information.
  • A few trusted services help me run my business, such as email and website hosting.
  • You can ask to see, correct or delete your information at any time.

1. Who I am

This website is run by Asim Hafeez, a sole trader trading as Ash Digital & AI Solutions. I am the “data controller” for the personal information described in this policy. That means I decide how it is used and I am responsible for keeping it safe.

Address
Sandby House, Peckham Road, London SE5 8QN
Email
hello@ashdigital.co.uk
Phone / WhatsApp
+44 7810 475852

2. What information I collect

I only collect what I need. This usually comes directly from you.

  • Contact form: your name, email address, business name (optional) and your message.
  • Email and WhatsApp: your name, contact details and anything you choose to tell me.
  • Discovery calls: notes about your business and what you’d like help with.
  • Clients: contact and billing details, and the information needed to deliver your project.
  • The “Ask my AI” assistant: the questions you type into the chat (see section 6).
  • Website visits: basic technical information kept in my web server’s logs for security, such as IP addresses.

I don’t knowingly collect sensitive information, such as health details, and I ask you not to share it through the contact form or the AI assistant.

3. How I use it, and why

UK data protection law says I must have a lawful reason (a “lawful basis”) for each use of your information.

What I use it for Lawful basis
Replying to your enquiry or message Legitimate interests: you contacted me and expect a reply.
Preparing a quote and agreeing work Contract: steps you ask for before working together.
Delivering projects and sending invoices Contract: to do what we agreed.
Keeping business and tax records Legal obligation: required by UK tax law.
Running the AI assistant and keeping the site secure Legitimate interests: to answer questions and prevent misuse.

I will never sell your information or use it for unrelated marketing. If I ever want to send you occasional news, I will ask first.

4. Who I share it with

I use a small number of trusted services to run my business. They only process your information on my instructions.

  • Email: Microsoft, which provides and stores my business email.
  • Contact form: Amazon Web Services (Amazon SES), which delivers messages sent through this website’s contact form to my inbox.
  • AI assistant: OpenAI, which processes messages typed into the chat to generate replies.
  • WhatsApp: run by Meta, if you choose to message me there. Meta’s own privacy policy also applies.
  • My accountant: for invoices and tax records, if you’re a client.

I may also share information if the law requires it, for example with HMRC.

5. Cookies

This website doesn’t use cookies, and there are no advertising or tracking tools. That’s why you won’t see a cookie banner.

6. The “Ask my AI” assistant

The assistant answers general questions about my services. When you use it:

  • your messages are sent to OpenAI to generate a reply;
  • please don’t share personal, financial or sensitive details in the chat;
  • conversations are kept for 30 days to help me improve the answers, then deleted;
  • the assistant has usage limits to prevent misuse, and it can make mistakes, so please check anything important with me.

7. How long I keep it

Enquiries that don’t go ahead 12 months after our last contact, then deleted.
Client records and invoices As long as UK tax law requires, currently at least 5 years after the relevant tax return deadline.
AI assistant chats 30 days, then deleted.
Server logs A short period for security, then deleted.

8. Where it’s stored

Your information is stored by the services listed above. Some of them may store data outside the UK. When that happens, I make sure appropriate safeguards are in place, such as UK-approved contract terms, so your information is protected to UK standards.

9. Keeping it safe

I use secure, password-protected services, and I only keep what I need. The website uses a secure (HTTPS) connection. Demo Lab tools on this site use made-up data only.

10. Your rights

You have the right to:

1 Access
Ask for a copy of the information I hold about you.
2 Correction
Ask me to fix anything that’s wrong or incomplete.
3 Deletion
Ask me to delete your information, where I don’t need to keep it.
4 Restriction
Ask me to pause using your information.
5 Objection
Object to how I use it, where I rely on legitimate interests.
6 Portability
Ask for your information in a format you can take elsewhere.

To use any of these rights, email hello@ashdigital.co.uk. It’s free, and I’ll reply within one month.

11. Complaints

If you’re unhappy with how I’ve handled your information, please tell me first and I’ll do my best to put it right.

12. Changes to this policy

I may update this policy from time to time, for example if I start using a new service. The date at the top shows when it last changed.

Ash Digital & AI Solutions is registered with the Information Commissioner’s Office (ICO), registration number ZC289607.

Questions about your information?

Email me and I’ll be happy to help.

hello@ashdigital.co.uk