42answers

1. Types of Data We Collect

To provide sustainability insights, the tool requests the following information:

• Professional Data: Your company name, your role within the organisation, and your industry.
• Operational Data: Information regarding your products or services.
• Technical Data: IP address and browser type (collected automatically by our WordPress host for security and site functionality).

2. How We Collect Your Data

• Direct Interaction: When you fill out our “Contact Us” form, submit an application via the Audition Portal, the contact page or apply for the Partner Program.
• Automated Technologies: As you interact with our Website, our host (WordPress.com) may automatically collect Technical Data about your equipment and browsing actions.

3. How We Use Your Data

We process your data for the following strictly limited purposes:

• Service Delivery: To generate bespoke sustainability guidance via our AI integration.
• Safety & Security: To monitor for automated abuse of the tool and ensure the security of our website.

We do not sell your personal data. Technical data and usage logs are used strictly for operational processes.

4. Where We Store Your Data

Hosting: Our Website is hosted by WordPress.com (Automattic Inc.).

Our Service uses Anthropic, PBC as a third-party sub-processor to generate AI responses.

• Transmission: When you submit information, it is sent securely to Anthropic’s API.
• Temporary Storage: Anthropic may store this data temporarily (typically for up to 30 days) solely for the purpose of identifying abuse or safety violations. It is not used by them to train their global models.
• No Local Storage: Ian Ellison Consulting Ltd does not save a copy of your inputs or the AI’s outputs on our WordPress servers.

5. Data Retention

Input Data: Your specific inputs (Company, Role, etc.) exist only for the duration of the API transaction. Once the guidance is generated and your session ends, this data is cleared from our active system memory.

Technical Logs: Standard server logs (IP addresses) are retained for a maximum of 30 days to protect against cyber-attacks, after which they are deleted.

6. Lawful Basis for Processing

Under the UK GDPR, we rely on the following bases:

• Legitimate Interests: To provide the specialized consulting services requested by our clients and their authorized users.
• Contractual Necessity: Where the tool is provided as part of a formal consulting agreement between Ian Ellison Consulting Ltd and your organisation.

7. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Erasure: Request that we delete your data (e.g., withdraw your audition application).
• Correction: Request that we correct incomplete or inaccurate data.

To exercise any of these rights, please email us.

8. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of external sites. We recommend you read the privacy policy of any website you visit.

9. Contact & Complaints

We are registered with the Information Commissioner’s Office (ICO) in the UK. If you have any concerns about how we handle your personal data, you have the right to complain to the ICO in the UK.

Information Commissioner’s Office  

Wycliffe House  

Water Lane  

Wilmslow  

Cheshire  

SK9 5AF  

Telephone: 0303 123 1113  

Website: [ico.org.uk](https://ico.org.uk)