Privacy Policy

1. Who we are

AIValueWorx is a joint venture between Goal Atlas Ltd and weareCrank Ltd (“we”, “us”, “our”). We help leadership teams move from AI ambiguity to defensible business cases using a combination of human expertise and AI-powered tools.

For data protection enquiries, contact us at hello@valuelabai.com.

2. What data we collect

We collect the following categories of personal data:

Information you provide directly

• Name, email address, and job title when you contact us or start a diagnostic
• Organisation name, sector, revenue band, and strategic priorities entered during the diagnostic process
• Documents you voluntarily upload (e.g. annual reports, strategy decks, AI policies) for analysis
• Communications you send us via email or contact forms

Information collected automatically

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Pages visited, time spent, and interaction patterns on our website
• Referral source (how you reached our site)

3. How we use your data

We process your personal data for the following purposes:

• Delivering our service: Running diagnostics, matching case studies to your context, generating governance assessments, and producing board-ready business cases
• AI-powered analysis: Your organisational data is processed by our AI tools to match against our library of 200+ verified case studies and to score governance alignment against ICO, DSIT, and CDEI frameworks
• Communication: Responding to enquiries, scheduling consultations, and providing progress updates during engagements
• Improving our service: Analysing aggregate usage patterns to improve diagnostic accuracy and case-study matching
• Legal compliance: Meeting our obligations under applicable law

4. Legal basis for processing

We rely on the following legal bases under UK GDPR:

• Contract: Processing necessary to deliver the service you have engaged us for
• Legitimate interests: Improving our tools and service quality, provided this does not override your rights
• Consent: Where you have opted in to marketing communications (you can withdraw at any time)

5. AI processing and automated decisions

Our service uses AI to analyse organisational data, match case studies, and score governance policies. These AI outputs are always reviewed by our human practitioners before being presented to you. We do not make solely automated decisions that have legal or similarly significant effects on individuals.

Documents you upload for governance scoring are processed in real time and are not retained after the analysis is complete unless you explicitly request it.

6. Data sharing

We do not sell your personal data. We share data only with:

• Goal Atlas and weareCrank practitioners who are directly involved in delivering your engagement
• Infrastructure providers (hosting, analytics) who process data on our behalf under appropriate data processing agreements
• Legal or regulatory authorities where required by law

7. Data retention

Diagnostic data and engagement materials are retained for the duration of the engagement plus 12 months, unless you request earlier deletion. Uploaded documents used for governance scoring are deleted immediately after analysis unless otherwise agreed. Website analytics data is retained for 26 months.

8. Data security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. Our hosting infrastructure is provided by Railway and Vercel, both of which maintain SOC 2 compliance.

9. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email hello@valuelabai.com.

10. Cookies

We use essential cookies required for the website to function. We may also use analytics cookies to understand how visitors interact with our site. You can manage cookie preferences through your browser settings. We do not use advertising or tracking cookies.

11. International transfers

Your data is primarily processed within the United Kingdom and European Economic Area. Where data is transferred to processors outside the UK/EEA (e.g. cloud infrastructure providers), we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email to active clients and posted on this page with an updated date.