Privacy Policy 

Privacy Policy

Last Updated: March 11, 2025

AI Assistant Ltd is an automotive IT solutions and consultancy company based in the United Kingdom. This website and our services, including WhatsApp messaging services, are managed by AI Assistant Ltd. We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the WhatsApp Business Terms of Service and Business Messaging Policy.

In managing this website, AI Assistant Ltd acts as the data controller for personal data collected from website visitors, as defined by the EU GDPR and UK GDPR. When providing WhatsApp messaging services on behalf of our clients, AI Assistant Ltd acts as a data processor, processing consumer data solely on the documented instructions of our clients, who act as data controllers.

Your privacy is important to us. If you have any questions about this website, our WhatsApp messaging services, or the contents of this Privacy Policy, please contact AI Assistant Ltd at enquiries@ai-assistant.io or at our postal address. Ritchie Kelk, AI Assistant Ltd, is the officer of the company with responsibility for data protection compliance. Further contact details are available on the Contact page of this website.

1. Data We Collect

We collect and process different types of personal data depending on whether you are a website visitor or a consumer receiving WhatsApp messages sent on behalf of our clients.

1.1 Website Visitors

AI Assistant Ltd collects certain personal data from you when you interact with our website, including but not limited to:

  • Identifying Information: Your name, email address, and any other information you provide when submitting inquiries via our contact form.
  • Non-Identifying Information: Technical data such as your IP address, referring URL, browser type, operating system, cookie information, and Internet Service Provider. Without a legal request lodged in the UK, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, this information cannot usually be used to identify you.

1.2 Consumer Data via WhatsApp

When providing WhatsApp messaging services on behalf of our clients, AI Assistant Ltd processes personal data of consumers, including but not limited to:

  • Consumer Contact Information: Phone numbers used to send and receive WhatsApp messages.
  • Message Content: The content of messages sent and received, which may include text, images, or other media.
  • Metadata: Information such as message timestamps, delivery status, and read receipts.

2. How We Use Your Data

We use the personal data we collect for specific purposes, depending on whether you are a website visitor or a consumer receiving WhatsApp messages.

2.1 Website Visitors

We may use your identifying or non-identifying information to:

  • Enhance, personalize, or improve the user experience, our website, or our services.
  • Respond to inquiries or provide customer support.
  • Perform any other function that we believe in good faith is necessary to protect the security or proper functioning of our website or services.

2.2 Consumer Data via WhatsApp

When acting as a data processor, we process consumer data via the WhatsApp Business API for the following purposes, as instructed by our clients:

  • Message Delivery: To send and receive messages on behalf of our clients, including transactional messages (e.g., order confirmations, appointment reminders) and marketing messages (e.g., promotional offers).
  • Analytics: To analyze message performance, such as delivery rates and engagement metrics, to improve client services.
  • Compliance: To ensure compliance with WhatsApp’s policies, applicable laws, and client instructions.

3. Lawful Basis for Processing

We process personal data based on lawful grounds under the UK GDPR and EU GDPR, depending on our role and the context of the data.

3.1 Website Visitors

When acting as a data controller for website visitor data, we process your personal data based on the following lawful basis:

  • Legitimate Interest: To improve our website, respond to inquiries, and ensure the security of our services.

3.2 Consumer Data via WhatsApp

When acting as a data processor for consumer data, we process personal data based on the lawful basis established by our clients, who act as data controllers. This lawful basis may include:

  • Consent: Where consumers have provided opt-in consent to receive WhatsApp messages, particularly for marketing messages, as required by WhatsApp’s Business Messaging Policy.
  • Legitimate Interest: Where clients have determined that legitimate interest applies, such as for transactional messages necessary to fulfill a service.

Our clients are responsible for ensuring a lawful basis for processing, such as obtaining consumer consent, and for informing consumers of their data subject rights.

4. Data Sharing

We may share your personal data with third parties in certain circumstances, as outlined below.

4.1 Website Visitors

We use third-party individuals and organizations to assist us with this website, including but not limited to contractors, web hosts, and maintenance providers. These third parties are granted the same rights you afford us under this Privacy Policy for the purpose of operating, maintaining, repairing, or otherwise improving or preserving ourbecome necessary for AI Assistant Ltd to release your information in response to a request from a UK, EU, or other international government agency or a private litigant. You agree that we may disclose your information to a third party where we believe, in good faith, that it is necessary to do so for the purposes of a civil action, criminal investigation, or other legal matter. In the event that we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. You release us from any damages that may arise from or relate to the release of your information to a request from UK law enforcement agencies or private litigants.

4.2 Consumer Data via WhatsApp

When providing WhatsApp messaging services, we share consumer data with the following entities:

  • WhatsApp/Meta: Data processed via the WhatsApp Business API is shared with WhatsApp Ireland Limited (a Meta company) and may be further shared with Meta for purposes such as message delivery, analytics, and legal compliance, as outlined in WhatsApp’s Privacy Policy [link to WhatsApp Privacy Policy].
  • Business Solution Providers (BSPs): We may engage third-party service providers, such as WhatsApp Business Solution Providers, to assist in delivering messaging services. These providers are contractually obligated to process personal data in accordance with GDPR and our instructions, and their use of data is governed by their respective privacy policies.
  • Our Clients: We share message performance data (e.g., delivery rates, engagement metrics) with our clients to help them evaluate the effectiveness of their messaging campaigns.

4.3 International Data Transfers

Personal data processed via the WhatsApp Business API may be transferred to WhatsApp servers located outside the UK and EU, including in the United States. Such transfers are subject to appropriate safeguards, such as Standard Contractual Clauses, to ensure compliance with GDPR and UK data protection laws. For more information, see WhatsApp’s Privacy Policy [link to WhatsApp Privacy Policy].

5. Your Rights

Under the UK GDPR and EU GDPR, you have certain rights regarding your personal data, whether you are a website visitor or a consumer receiving WhatsApp messages.

5.1 Website Visitors

As a website visitor, you have the following rights:

  • Right to Access: You may request a copy of the personal data we hold about you by submitting a Subject Access Request. We will comply with your request within one month, provided you submit proof of ID for verification.
  • Right to Erasure: You have the right to request that your personal data is erased by AI Assistant Ltd at any time and without undue delay. Please email enquiries@ai-assistant.io with the subject line ‘Request to erase data’ or write to Ritchie Kelk of AI Assistant Ltd at our postal address. We will contact you to confirm that all of your data has been deleted. Note that individuals cannot use the Right to Erasure to avoid any financial liabilities should they be incurred.
  • Other Rights: You also have the right to rectify inaccurate data, restrict processing, object to processing, and data portability, where applicable.

5.2 Consumers Receiving WhatsApp Messages

Consumers who receive WhatsApp messages sent by AI Assistant Ltd on behalf of our clients have the same data subject rights under GDPR, including the right to access, rectify, erase, or restrict the processing of their personal data. To exercise these rights, consumers should contact the relevant client (the data controller) directly. Alternatively, consumers may contact AI Assistant Ltd at enquiries@ai-assistant.io, and we will assist by forwarding the request to the appropriate client, where applicable.

6. Commercial Communications

WhatsApp messages sent on behalf of our clients may include:

  • Transactional Messages: Such as order confirmations, appointment reminders, or customer service updates.
  • Marketing Messages: Such as promotional offers or newsletters.

All messages comply with WhatsApp’s Business Messaging Policy, which requires consumer opt-in consent for marketing messages. Consumers may opt out of receiving messages at any time by replying ‘STOP’ or contacting the client directly.

7. Cookies and Tracking

This site uses cookies from Google Analytics, which helps AI Assistant Ltd understand where site traffic originates. You can view further details about their privacy policy here: https://policies.google.com/privacy