Privacy Policy

1. Introduction

Dux AI ("we", "our", or "us") is operated by Alistair Anthony, a UK sole trader trading as Dux AI. Alistair Anthony is the data controller. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and services or receive a professional communication from us.

This includes information you give us directly and limited professional information we collect when researching businesses that may reasonably benefit from our services.

2. Information We Collect

When you contact us through our website, we may collect:

• Name (required) — to address you personally
• Email address or phone number (one required) — whichever you choose for our reply
• Reply preference — email or phone
• Business or role (optional) — to understand your context
• Message content (required) — the details of your enquiry
• Submission time — to manage and review the enquiry

For targeted business outreach, we may also collect your name, job title, employer, public professional profile, business email address, the source of that information, our research notes and a record of our communications. We use public company websites, publicly accessible professional profiles and Apollo's B2B data service. We do not seek personal-provider email addresses or sensitive personal data for this purpose.

3. How We Use Your Information

We use your information to:

• Respond to your enquiry
• Understand your business needs to provide relevant advice
• Follow up on our conversation if you request it
• Improve our services based on the types of enquiries we receive
• Send a small number of relevant, individually researched business communications about Dux AI's services
• Record and honour requests not to be contacted again

We will never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data based on:

• Steps before a contract — where you ask us to discuss or prepare work you may buy
• Legitimate interests — to respond to general enquiries, operate our services and introduce relevant services to professional contacts at businesses, where our interests do not override your rights
• Consent — only for optional marketing such as a newsletter, where a separate unticked choice is provided

You have an absolute right to object to direct marketing at any time. We stop marketing when you object and retain only the minimum information needed to ensure we do not contact you again.

5. Data Storage and Security

Your data is stored securely using industry-standard cloud services. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

We retain enquiry and client information only for as long as needed to respond, provide services and meet legal obligations. Website enquiries that do not become an active business relationship are reviewed within 12 months of submission and deleted when no longer needed. Targeted-outreach records that do not become an active business relationship are reviewed and removed within 12 months of the final communication. A proof-page access event is removed within 90 days. Suppression records are limited to the information needed to honour an objection and are kept for as long as needed to ensure we do not contact that person again.

6. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Withdraw consent — Withdraw your consent at any time
• Data portability — Request your data in a machine-readable format
• Object — Object to processing of your data in certain circumstances

You may object to direct marketing at any time by replying to an email or contacting us. We will stop marketing to you.

To exercise any of these rights, please contact us.

7. Cookies and Analytics

When you first visit our website, we ask for your consent before setting any non-essential cookies. You can accept or reject analytics cookies using the banner that appears on your first visit.

If you accept, we use the following services:

• Google Analytics 4 — to understand how visitors use our site (pages visited, time on site, traffic sources). Google Analytics sets cookies including _ga and _ga_*.
• Microsoft Clarity — to see how visitors interact with our site through heatmaps and anonymised session recordings. Clarity sets cookies including _clck and _clsk.

These services help us improve our website. No analytics data is loaded if you reject cookies or until you give consent.

Withdrawing consent: You can change your cookie preferences at any time by clicking "Cookie preferences" in the footer of any page, or by clearing your browser's local storage for this site.

8. Email Marketing and Communications

We offer free tools on our website, including an AI Readiness Quiz and a Time Waste Calculator. When you use these tools, we collect your responses to generate your results. If you provide your email address, we store it alongside your responses.

Subscriber email: We will only add you to a newsletter or automated marketing list if you explicitly tick the consent checkbox when submitting your email. This checkbox is never pre-ticked. You can also subscribe to our newsletter via the signup form in the footer of our website.

Our email communications are sent via Beehiiv, which acts as our email processing partner. Beehiiv stores your email address and subscription preferences on our behalf. Their privacy policy is available at beehiiv.com/privacy.

Unsubscribing: Every email we send includes an unsubscribe link. You can also request removal of your data at any time by contacting us. We will delete your email address and associated quiz or calculator data within 30 days of your request.

Targeted business outreach: Separately, we may send occasional, individually researched emails to professional contacts at businesses where we believe the subject is relevant to their role. These messages identify Dux AI, explain where the contact information came from and provide a simple reply-based opt-out. The current pilot uses Instantly's AirMail service to deliver the messages. We do not use open-tracking pixels or sender-side link rewriting in this pilot. A prospect-specific proof page may record one first-party, cookie-free access event consisting of the proof identifier and access time so we can tell whether the proof was viewed. This is not combined with wider browsing activity, advertising data or cross-site profiles and is removed within 90 days.

9. Third-Party Services

We use trusted service providers for business research, email delivery, website hosting, customer records and AI-assisted analysis. For targeted outreach these may include Apollo for professional work-contact data, Instantly for email delivery, our hosting provider for the recipient-specific proof page, and the AI service providers used to produce or review a prospect-specific concept. They process only the information needed for the relevant task and do not receive permission to market their own services to you from our records.

Website enquiries are stored in Supabase. An internal alert is sent through Apple's iCloud SMTP service to Alistair's private iCloud inbox. These providers process the enquiry only so it can be stored securely and answered.

Some providers process data outside the UK. Where UK data-protection law applies, we use the provider's applicable transfer safeguards and data-processing terms. We do not use solely automated decision-making that produces legal or similarly significant effects.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.

The controller is Alistair Anthony, trading as Dux AI in the United Kingdom. The residential correspondence address used where legally required in an individual commercial email is not published on this website.