Privacy policy.

Who we are

This website is operated by Saizen Acuity Limited (“Saizen Acuity”, “we”, “us”, “our”), a private limited company registered in England and Wales under company number 16006442, with its registered office at 60 Tottenham Court Road, Suite 5180a, London W1T 2EW, United Kingdom.

For the personal data described in this policy, Saizen Acuity Limited is the controller: we decide why and how that data is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, where it applies to you, the EU General Data Protection Regulation (EU GDPR).

Legal name

Saizen Acuity Limited

Company number

16006442 (England and Wales)

Registered office

60 Tottenham Court Road, Suite 5180a, London W1T 2EW

Privacy contact

info@saizenacuity.com

We have not appointed a statutory Data Protection Officer because the law does not require one for our activities. Data protection is overseen by our leadership team, and every privacy request is read by a person.

Scope of this policy

This policy covers personal data about:

• visitors to saizenacuity.com and its pages;
• people who contact us through an enquiry form, by email, by phone, at events or on social media;
• people who use the AI Readiness Review;
• representatives of prospective clients, partners, suppliers and practitioners, and people who register for our events or podcast.

It does not cover personal data we process on behalf of a client during an engagement. That processing is governed by the contract and any data processing agreement with that client. It also does not cover other organisations’ websites, including those of our partners, even where we link to them.

What we collect

3.1 Information you give us

Enquiry forms. Our enquiry forms ask for your name, your work email, and three short questions that depend on the page, for example your organisation, job title, the service or practitioner you are interested in, your timing, your company’s stage or your industry. There is an optional free-text box. If you opened the form from a specific button, the form also carries the selections you made on that page (for example a practitioner shortlist).

AI Readiness Review. To open the full report we ask for your name, work email, company name, job title and company size, and whether you would like to receive occasional Saizen insights (an unticked box that you choose to tick). With those details we receive a short summary of the review: the report reference, the overall index score and the version you completed. Your individual answers are worked through in your own browser; see section 6.

Direct contact. Anything you send us by email, phone, video call, LinkedIn or in person, including your contact details, your role and the content of the conversation.

Events, podcast, partners and practitioners. Registration and attendance details, guest or topic suggestions, partnership and referral enquiries, and, if you would like to work with us as a practitioner, your professional background.

Please give us only what is needed, and only details you are entitled to share. If you give us information about a colleague or another person, please make sure they are aware of this policy.

3.2 Information sent automatically with a form

When you send a form, it also sends technical and context information so we can route your enquiry to the right person, understand what prompted it and keep out spam. This is collected only when you choose to submit, not while you browse:

Location derived from an IP address is approximate. It usually identifies a town or region, often your provider’s rather than yours. We do not collect precise location from your device.

Forms also contain a hidden field that people cannot see; automated software that fills it in is treated as spam.

3.3 Information collected when you browse

• Hosting and security. Our website is delivered and protected by Cloudflare. Like any web host, it processes your IP address, the pages and files requested, your browser’s user agent and similar request data in order to deliver the site, block attacks and abuse, and keep the service reliable.
• Fonts and code libraries. Pages load typefaces from Google Fonts and some open-source code libraries from public content networks (jsDelivr, unpkg and cdnjs). Your browser contacts those services directly, so they receive your IP address and browser details as part of the normal request. They do not receive form content.
• News pages. To show Acuity Daily, your browser fetches publishers’ public news feeds through two feed services, rss2json.com and allorigins.win, and loads article images directly from the publishers’ websites. Those services and publishers receive your IP address and browser details as part of the request. They do not receive anything you type or submit.
• Browser storage. A small amount of information is kept in your own browser to make the site work as you expect. Section 12 lists every item.

We do not currently run analytics, advertising, social media or session-recording tags on this website.

3.4 Information from other sources

We may receive your details from someone who introduces you to us (a client, partner, practitioner or event co-host). Before a conversation, we may look at publicly available professional information, such as your company’s website, Companies House and your public LinkedIn profile, so that we understand your organisation and role.

How we use it, and the law

Data protection law only lets us use personal data where we have a lawful basis. The table shows each purpose and the basis we rely on.

Where we rely on legitimate interests, we have weighed our interests against your rights and expectations, and we think you would reasonably expect a business you contact to use your details in these ways. You can ask us for a copy of that assessment and you can object (see section 11).

You do not have to give us any personal data. If you do not, we may not be able to reply to you or open your AI Readiness Review report.

Sensitive information

We do not ask for, and ask you not to send us, special category data (information about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, sex life or sexual orientation) or information about criminal convictions or offences.

Please also do not send confidential or commercially sensitive information through the website forms. If we need it, we will agree a suitable channel and, where appropriate, a non-disclosure agreement. If we receive sensitive information we did not ask for, we will delete it unless we have a lawful reason to keep it.

Automated scoring and AI tools

The AI Readiness Review calculates an indicative score and report automatically from your own answers, using fixed rules. That calculation runs in your browser. The result is a self-assessment for your information. It does not decide anything about you, has no legal effect and is not used to make decisions that significantly affect you, so it is not automated decision-making of the kind restricted by Article 22 of the UK GDPR.

AI tools in our own work. We may use software, including automation and artificial intelligence tools, to help organise, summarise and route enquiries and to prepare replies. We only use such tools under business terms that protect confidentiality and do not permit the provider to train its models on your data, and a person at Saizen Acuity reviews any decision about you.

We do not make decisions about individuals based solely on automated processing.

Who we share it with

We share personal data only where we need to, with people bound by confidentiality, and never for sale.

Service providers

Our hosting, automation, email and professional providers act on our instructions under written terms that require them to keep the data secure and use it only for the services they provide to us. The public font, code and news feed services are independent services that your browser contacts directly when it loads a page; they receive only standard request data (section 3.3) and are governed by their own terms and privacy policies.

Our practitioners and partners

• Council practitioners and associates. Some of the senior practitioners we work with are independent consultants rather than employees. Where you ask to speak to someone, or where it is needed to answer your enquiry, we share the relevant details with them under confidentiality.
• Technology partners. If you ask about a particular partner, or ask us to introduce you, we share what is needed for that introduction. We do this only with your request or agreement, and the partner then handles your data under its own privacy policy.

Others

• Courts, regulators, law enforcement and other authorities where the law requires it, or where it is needed to establish, exercise or defend legal claims or to protect the rights, property or safety of Saizen Acuity, our clients or others.
• A buyer, investor or successor if our business, or part of it, is reorganised, sold or merged, under confidentiality and on terms consistent with this policy.

International transfers

Some of our providers, and some of our practitioners, are based or store data outside the United Kingdom, including in the European Economic Area and the United States. When personal data leaves the UK, we make sure it is protected by at least one of these safeguards:

• the destination country has UK “adequacy” or data bridge regulations (for example the EEA, or US organisations certified under the UK Extension to the EU-US Data Privacy Framework);
• the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses approved for use in the UK, together with a transfer risk assessment; or
• another lawful mechanism or exception permitted by UK GDPR.

For people in the EEA, transfers outside the EEA rely on an EU adequacy decision or the EU Standard Contractual Clauses. You can ask us for more detail about the safeguards for a particular transfer.

How long we keep it

We keep personal data only as long as we need it for the purposes in section 4, then delete or anonymise it. As a guide:

We may keep data for longer where the law requires it, or where it is needed for a complaint, a dispute or a legal claim.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) for every page and form, a same-site check and size limits on form submissions, spam protection, access to enquiries limited to the people who need it, and confidentiality obligations on everyone who handles data for us.

No website, network or email system is completely secure, so we cannot guarantee the security of information sent to us over the internet, and you send it at your own risk. Ordinary email is not end-to-end encrypted.

If a personal data breach occurs that is likely to put your rights at risk, we will notify the Information Commissioner’s Office within 72 hours where required, and tell you without undue delay where the risk to you is high.

Your rights

Under data protection law you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate or incomplete data corrected;
• have your data erased in certain circumstances;
• restrict how we use your data in certain circumstances;
• object to our use of your data where we rely on legitimate interests, and to direct marketing at any time (an absolute right);
• data portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organisation, where processing is based on consent or contract and carried out by automated means;
• withdraw consent at any time where we rely on it, without affecting anything done before you withdrew it; and
• not be subject to decisions based solely on automated processing that significantly affect you.

These rights are not absolute and some apply only in certain circumstances. To use any of them, email info@saizenacuity.com with “Privacy request” in the subject line. We may need to confirm your identity first. We will respond within one month, which the law allows us to extend by up to two further months for complex or numerous requests; if so, we will tell you why. There is normally no fee, but we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

If you live outside the UK and EEA, your local law may give you further rights. Contact us and we will consider your request in line with the law that applies.

Cookies, storage and analytics

12.1 What we use today

We do not set analytics, advertising or social media cookies. The site keeps a few items in your browser’s own storage (local storage and session storage), which works much like a cookie but is not sent to us with each page request. Nothing in it reaches us unless you submit a form.

Under PECR, as amended by the Data (Use and Access) Act 2025, we may store information on your device without asking for consent where it is strictly necessary for a service you request, where it adapts the website to your preferences, or where it is used only to understand and improve our website, provided we tell you clearly and give you a simple, free way to object. Every item below falls into one of those categories, and none is used for advertising or shared with advertisers.

Any other item whose name begins with sz or saizen. stores display state of the same kind, never personal data or anything used for tracking.

You can also delete or block browser storage and cookies at any time through your browser settings. Blocking them will not stop you using the site, though forms will not be pre-filled and the AI Readiness Review will not be able to resume.

12.2 Google Analytics, when we introduce it

We plan to use Google Analytics 4, provided by Google LLC and Google Ireland Limited, possibly through Google Tag Manager, to understand in aggregate how the site is used: which pages are visited, how people arrive, which devices they use and which pages lead to enquiries. When we do:

• it will only load after you agree through a cookie banner, unless the law allows a particular measurement without consent, in which case we will say so and offer an easy opt-out; you will be able to change your choice at any time;
• it will set cookies such as _ga and _ga_<ID>, which distinguish visitors and sessions and expire after no more than 2 years by default;
• it will record events such as page views, scrolling, outbound clicks and when an enquiry form is opened or sent (which form, not what you wrote). We will not knowingly send your name, email or message to Google Analytics;
• Google Analytics 4 does not log or store full IP addresses; Google uses them briefly to estimate location and then discards them;
• we will turn off Google Signals and advertising personalisation features, and set data retention to no longer than 14 months;
• Google acts as our processor for this service, and data may be transferred to the United States under the safeguards in section 8.

Before we switch it on, we will update this section and the table above. You can read how Google uses data at policies.google.com/technologies/partner-sites, and opt out of Google Analytics across all sites with the Google Analytics opt-out browser add-on.

Marketing

We send marketing emails, such as insights, research and event invitations, only where you have agreed to receive them, or where the law allows us to contact business contacts about relevant services. Every marketing email includes a way to unsubscribe, and you can also simply reply or write to info@saizenacuity.com. We will act on your request promptly and free of charge.

Replies to your own enquiry, and messages about work we are doing together, are not marketing and are not affected by unsubscribing.

Children

This website and our services are intended for businesses and professionals. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

Other websites

Our pages link to other websites, including partners, publishers, podcast platforms and social networks. We are not responsible for their content or their privacy practices. Please read the privacy policy of any website you visit.

Changes to this policy

We may update this policy from time to time, for example when we introduce Google Analytics or change a provider. The “Last updated” date at the top shows when it last changed. Where a change is significant, we will make it clear on this page and, where appropriate, tell you directly.

Contact and complaints

Questions, requests and complaints about how we handle personal data should go to info@saizenacuity.com, with “Privacy request” in the subject line. We will acknowledge a complaint, look into it, and tell you the outcome without undue delay.

If you are not satisfied, you have the right to complain to the UK supervisory authority, the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you live in the EEA, you may also complain to the data protection authority in your country. We would appreciate the chance to resolve your concern first.