Home Methodology Principal Insights Take the Assessment Strategy Session
Home
Legal

Privacy Policy

How Arrell Advisory collects, uses, and protects your personal data.

Last updated: June 2026

Summary

We do not sell your data. We do not run advertising or tracking systems. We collect only what you voluntarily submit through our forms, and we use it solely to respond to your enquiry or deliver your assessment results. You have the right to access, correct, or erase your data at any time.

1. Who we are

Arrell Advisory is an AI governance consulting firm. Our data controller contact is: hello@arrelladvisory.com. For all data protection enquiries and rights requests, use this address.

2. What data we collect and why

Contact form

When you submit the contact form we collect: your name, email address, organisation name, area of interest, and message. Legal basis: your explicit consent (GDPR Art. 6(1)(a)), given by ticking the consent checkbox before submitting. We use this data solely to respond to your enquiry.

Assessment email gate

When you complete the AI Transformation Readiness Assessment, you provide your work email address and your responses to 15 questions. Legal basis: your explicit consent (GDPR Art. 6(1)(a)), given before submitting your email. We use this data to deliver your readiness profile and, if you subsequently consent, to contact you about relevant services.

Booking (Calendly)

If you book a Strategy Session, you interact directly with Calendly's platform. Calendly is an independent data controller. Please review Calendly's Privacy Policy for details of how they handle your booking data.

3. Data processors

We use the following third-party processors to operate this site. Each is engaged under a data processing agreement and processes data only as instructed:

  • FormSubmit.co — Receives and forwards form submissions to our email address. Data is transmitted over HTTPS. FormSubmit does not retain submissions beyond delivery. FormSubmit Privacy Policy →
  • Google Fonts — This site loads fonts from Google's servers (fonts.googleapis.com). Your browser sends a request to Google, which may transmit your IP address. We use Google Fonts for typographic consistency. To avoid this transmission, you can use a browser extension that blocks external font requests. Google Privacy Policy →
  • GitHub Pages — This site is hosted on GitHub Pages (Microsoft). GitHub may log standard server access data (IP addresses, request timestamps) as part of its infrastructure. GitHub Privacy Statement →

4. Cookies and local storage

This site does not use tracking cookies, advertising cookies, or analytics cookies. We store a single item in your browser's localStorage to record that you have dismissed the privacy notice, so it does not reappear on subsequent visits. This item contains no personal data and is not transmitted to any server. You can clear it at any time by clearing your browser's site data.

5. Data retention

Form submissions are received as emails and retained only as long as necessary to respond to your enquiry or maintain a business relationship, and no longer than 24 months. Assessment responses are retained for the same period unless you request earlier deletion.

6. International transfers

FormSubmit.co and GitHub Pages may process data in the United States. These transfers are made on the basis of Standard Contractual Clauses or equivalent safeguards as recognised under applicable data protection law.

7. Your rights

Under the GDPR and equivalent legislation, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — request that we limit how we use your data while a dispute is resolved
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent — withdraw consent at any time without affecting the lawfulness of processing before withdrawal
  • Lodge a complaint — you have the right to lodge a complaint with a supervisory authority (e.g. the ICO in the UK, or your national data protection authority in the EU)

To exercise any of these rights, email hello@arrelladvisory.com. We will respond within 30 days.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated via a notice on the site.

9. Contact

For all privacy-related questions or rights requests: hello@arrelladvisory.com