How Be Digital Confident uses your personal data, in plain English.
Be Digital Confident ("we", "us") provides AI training, AI security and governance advice, and technology consulting to UK businesses. We decide how and why your personal data is used, so we are the "controller" under UK GDPR and the Data Protection Act 2018.
For anything about your personal data, contact us at bedigitalconfident@gmail.com.
Enquiry form. Your name, work email address, organisation and the message you type. You give us these directly.
Emails and calls. What you send us and what we send you, plus any details you share while we work with you.
Business contact details from public sources. To find businesses that may benefit from our services, we keep a prospect list with business contact details taken from places such as company websites, Companies House and professional profiles. This usually covers a person's name, job title, business email address and employer. Where we have not collected these details from you directly, this notice is how we tell you about it.
We do not ask for sensitive (special category) information and we do not use your data for automated decisions.
To reply to your enquiry and provide what you ask for. Basis: legitimate interests (answering people who contact us), or taking steps at your request before a contract.
To contact businesses about our services. Basis: legitimate interests (promoting our services to relevant businesses). We keep this to business contacts, keep it relevant, and stop when you ask. Marketing emails follow the Privacy and Electronic Communications Regulations (PECR).
To run the business. Keep records, handle invoices and meet legal duties. Basis: legal obligation or legitimate interests.
Where we rely on legitimate interests, you can ask us for the balancing assessment we carried out.
We do not sell your data. We use a small number of service providers who handle data for us: our website host (IONOS), our email provider (Google) and the tools we use to keep records. They may only use it to provide their service to us. We may also share data where the law requires it.
Some providers may process data outside the UK. Where they do, we use safeguards recognised under UK data protection law, such as the UK international data transfer agreement or addendum.
Enquiries and client correspondence: up to 24 months after our last contact, unless we need longer to meet a legal or accounting duty.
Prospect list entries: up to 12 months from when we added you or last spoke with you, then we review and delete them.
If you ask us to stop contacting you, we keep only your name and email on a suppression list so we do not contact you again.
You can ask us to: see the data we hold about you; correct it; delete it; restrict how we use it; move it to another provider; or stop using it where we rely on legitimate interests (including for direct marketing, which we will always stop). To use any of these, email us at bedigitalconfident@gmail.com. We aim to reply within one month.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
We will update this page when our use of data changes. Last updated: 4 October 2026.