Privacy Policy

Who we are

This website is operated by Beatrix Meszaros, trading as Pedey Limited (company registered in England and Wales). Registered office: London, UK. Contact: beatrix@pedey.co.uk

We are the data controller for personal data collected through this website.

What data we collect and why

1. Contact form submissions

Data collected: Name, email address, message content, and any other information you choose to provide.

Purpose: To respond to your enquiry and discuss potential work together.

Lawful basis: Legitimate interests (responding to a direct enquiry you initiated).

Retention: 24 months from last contact, or until you request deletion.

Processor: Netlify Forms (Netlify, Inc.) — Netlify Privacy Policy.

2. AI Maturity Assessment — email results

Data collected: Email address, first name (optional), assessment responses, and calculated maturity score.

Purpose: To send you a copy of your assessment results by email, as you explicitly requested by completing the form.

Lawful basis: Consent — you actively tick a checkbox and enter your email to receive this. You can withdraw consent at any time by contacting us.

Retention: Email addresses are retained for 12 months in our email service provider's logs, after which they are deleted. We do not add your email to any marketing list.

Processor: EmailJS (EmailJS.com) — acts as our data processor to transmit the results email. EmailJS Privacy Policy.

What we do not do: We do not sell, share, or use your email address for any purpose other than sending the results you requested.

3. Analytics

Data collected: Anonymised usage data including pages visited, time on site, device type, and general location (country/city level). No personally identifiable data is collected in analytics.

Purpose: To understand how visitors use the site and improve content and user experience.

Lawful basis: Legitimate interests.

Processor: Google Analytics 4 (Google LLC). Data is processed in the US under Standard Contractual Clauses. Google Privacy Policy.

You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Cookies

We use only essential and analytics cookies. See our Cookie Policy for full details.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restrict processing — limit how we use your data
• Data portability — receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where consent is the lawful basis

To exercise any of these rights, email beatrix@pedey.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled incorrectly.

International transfers

Some of our data processors (Google Analytics, EmailJS) are based in the United States. Transfers are covered by appropriate safeguards including Standard Contractual Clauses approved by the UK ICO.

Data security

We take appropriate technical and organisational measures to protect your personal data. Our website is served over HTTPS. We do not store assessment responses on our own servers — all processing is client-side (in your browser).

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions: beatrix@pedey.co.uk