What we collect, and what we do not.
Short, because there is not much of it. This site runs no advertising trackers, no session recording, and no third-party analytics cookies. Last updated 8 August 2026.
What we collect
Four things, and only when you hand them over or visit a page.
- What you type into a form. The application, contact, and Foundation forms ask for your name, email, company, role, website, a revenue band, how you found us, and what you want to work on. The newsletter form asks only for an email address.
- Payment details, which we never see. Card data goes straight from your browser to Stripe. It does not touch our servers. We receive the fact that a payment succeeded, your name, and your email.
- Aggregate page views. Which pages are read and which are ignored. The tool we use sets no cookies and does not build a profile of you.
- Anything you put in an email or a booking. If you book a call or write to us, we hold what you sent until it is no longer needed.
We do not buy contact data, we do not enrich what you give us against third-party databases, and we do not sell anything to anybody.
Why, and the lawful basis
- To reply to you and deliver what you bought. Performance of a contract, or steps taken before entering one.
- To send the newsletter. Consent, given when you subscribe, withdrawable from any issue.
- To understand which pages work. Legitimate interest in running a site people can use, met with a tool that identifies nobody.
- To keep records of payments. Legal obligation, because tax records have to exist.
Who processes it
Everyone with access, and why. There is nobody else.
- Vercel. Hosts the site and provides the aggregate analytics.
- Stripe. Takes payments. Their systems hold the card data, not ours.
- Google. Google Analytics, which measures how the site is used. This one sets cookies, which is why you are asked before it runs. Google is based in the United States, and the transfer relies on the safeguards Google publishes for that service.
- Our email provider. Form submissions arrive as email, so they sit in an inbox.
- Microsoft Bookings. If you book a call, the booking lives there.
- Substack. The newsletter runs there, not here. Subscribing takes you to Substack and your email address is held by them, under their own privacy policy. We never see a card, and we do not hold the list on this site.
Cookies
As of the date above, this site sets no advertising or tracking cookies on any page. The only cookies set are Stripe’s, on the checkout pages, and they are strictly necessary to take a payment.
You will still see a consent banner on your first visit. That is deliberate rather than required: it means you can switch analytics off if you would rather not be counted, and it means nothing changes silently if we add anything later. Refusing is one click, the same size as accepting, and you can change your mind at any time from the Cookie settings link at the bottom of any page.
How long we keep it
- Enquiries and applications. While there is a live conversation, and for two years afterward, so we recognize you if you come back.
- Newsletter. Until you unsubscribe.
- Payment records. Six years, because tax rules require it.
- Analytics. Aggregate only. There is nothing in it that is about you individually.
Your rights
Under UK data protection law you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us using it, and ask for it in a portable form. Where we rely on consent, you can withdraw it at any time, and that does not affect anything done before you did.
Email us and we will act within one month. If you are not satisfied with how we handle it, you can complain to the Information Commissioner’s Office at ico.org.uk.
Contact
AI Strategy League Ltd is the data controller for everything described on this page. Write to grace@aistrategyleague.com, which reaches Grace directly rather than a queue.