Last updated: 3 August 2026
Who we are
Savvy AI is a sole trader business run by Michael Sathorar in Glasgow. Michael is the data controller, which is the legal term for the person who decides what information is held and why, and who is responsible for it.
You can reach us by email at hello@savvyai.co.uk, which is the fastest route and the one to use for anything in this notice.
Or by post at: Savvy AI, 0/2, 9 Strathyre Street, Glasgow G41 3LL.
Where we got your details
If we have contacted you out of the blue about a website, here is exactly where your details came from. We did not buy them, and we did not get them from a list broker.
We collected them ourselves, from sources that are open to anyone:
- Google Maps business listings. This is usually how we find a business in the first place, and how we spot that it has no website.
- Companies House. The public register of UK companies.
- Public Facebook business pages. The page a business runs for its customers.
What we keep is limited to business information:
- The business name and what it does.
- Business address, business phone number and business email address.
- The Facebook page address, and the Google star rating and review count.
- The director's name, where it appears on the public Companies House register.
- A note of whether we have contacted you and what you said back.
We do not collect special category information such as health, ethnicity, religion or anything similar. We are not interested in consumers, only in businesses, and we do not go looking for home addresses or personal contact details.
If you use the form on this site
If you fill in the booking form, we receive what you type: your business name, a phone number or email address so we can reply, anything you write in the message box, and any logo or photo files you attach.
That goes to a Google account we control, and attached files are stored in Google Drive. We use it only to reply to you about AI for your business. The form also has a hidden field that real people never see, which is an ordinary anti spam measure and is ignored unless a bot fills it in.
Why we use it
There are two answers, depending on who you are.
If we are approaching you about a website, our lawful basis is legitimate interests. We are a small local business offering a low cost, directly relevant service to other businesses that do not appear to have a website.
Before starting, we wrote down and signed a legitimate interests assessment, which is the balancing exercise the law expects when you rely on this basis. In plain English, it concluded:
- The details we use are ones the business published itself, so that customers could get in touch.
- The offer is directly relevant, because we only approach businesses that appear to have no website.
- The impact is low. We cap how much we send, each message is written for that specific business rather than blasted out, and nobody receives more than four approaches before we stop for good.
- Saying no is instant, free and permanent.
On that basis we concluded that our interest in making the approach does not override your rights and freedoms. That was our judgement to make, and it is why we have made the opt out below as easy as we possibly can. If you want to see the assessment, ask and we will send you a copy.
If you become a client, we process your details to perform our contract with you, and afterwards to meet legal obligations such as keeping tax records.
The rules we work to
Two sets of rules apply. The UK GDPR covers information about people generally. The Privacy and Electronic Communications Regulations, usually called PECR, cover marketing by email, phone and text specifically.
PECR is the one that decides who we are allowed to email. We send cold marketing email only to corporate subscribers. In practice that means limited companies and LLPs that we have confirmed on the Companies House register before anything is sent. The check is built into our software, so it runs automatically before anything can be sent.
Sole traders, ordinary partnerships, and any business we cannot confirm on Companies House, are treated as individuals. We do not cold email them at all. If we are not sure, we treat it as not confirmed.
We may also contact a business through its public Facebook page, or by post. Facebook messages are written and sent by Michael by hand, one at a time. Post is not restricted by PECR, but we hold ourselves to the same standards for it anyway.
Every marketing message we send says who we are, gives a postal address, links to this page, and gives you a way to stop it.
How to stop hearing from us
You can object to direct marketing at any time, and we have to stop. This right has no conditions attached and you never have to give a reason.
Replying to any message we have sent and telling us you would rather not be contacted is enough. Any wording works. You do not need to use a particular word, hunt for an unsubscribe link, or fill anything in. One line is plenty.
You can also email hello@savvyai.co.uk at any time, whether or not we have contacted you.
We action it the same day and it is permanent. We will not email back to confirm, and we will not try to change your mind.
One thing worth being upfront about. When you opt out, we keep the bare minimum, normally the business name and email address, on a do not contact list, and we keep that indefinitely. That is the only way to guarantee you are not added back if your business shows up in a later search. If you would rather we deleted absolutely everything including that record, tell us and we will, but then we cannot promise you will never be contacted again.
Your rights
Under the UK GDPR you have the right to:
- Access. Ask what we hold about you, and get a copy of it.
- Rectification. Have anything wrong or out of date corrected.
- Erasure. Ask us to delete what we hold.
- Restriction. Ask us to pause using it while something is being sorted out.
- Objection. Object to us using it. Where that objection is about direct marketing, it is absolute and we simply stop.
- Portability. Get a copy of the details you gave us, in a common format you can reuse somewhere else. This one applies to information you provided yourself, such as a form submission.
How to use any of them: email hello@savvyai.co.uk and tell us what you want. There is no form to fill in and no particular wording needed. It is free.
We will respond within one month, and in practice usually within a day or two. If a request were complicated enough to need longer, we would tell you that and explain why.
How long we keep things
Different things have different triggers:
- You ask us to stop, or to be deleted. Actioned the same day and permanently. Only the do not contact record survives, for the reason explained above.
- You do not reply. The sequence is at most four messages. After that we stop, and we do not start again later.
- You tell us you are not interested. We do not approach you again.
- Details we collected but never used. Deleted once the campaign they belong to has finished.
- Form enquiries that do not lead to work. Deleted within 12 months.
- Clients. Kept while we are working together, then for up to six years after the last piece of work, because HMRC and other legal duties require business records to be kept.
Cookies and analytics
This section is short, because this website deliberately does very little.
- No cookies. This site sets no cookies at all, ours or anyone else's. There is no cookie banner because there is nothing to ask you about.
- One privacy-first visitor counter. We use Cloudflare Web Analytics to count page views, so we can see which pages people actually read. It sets no cookies, stores nothing on your device, does not follow you between websites, and cannot identify you. There is still no Google Analytics or GA4, no Facebook pixel, and no advertising script anywhere on this site.
- Almost nothing third party loads with the page. Fonts, images and styles are all served from this site itself. The single exception is the counter script above, which loads from Cloudflare, who host this site. Nothing else is requested when you open a page.
- The video only loads if you press play. Some pages have a video. Until you click it, nothing at all is requested from YouTube or Google. If you do click play, the video is served by youtube-nocookie.com, and from that point YouTube may store data on your device in order to play it and count the view. That part is Google's processing under their privacy policy, and it only ever happens because you chose to watch.
- Server logs. Our host keeps standard technical logs, such as IP address, page requested and browser type, to serve the site and keep it secure. Those are ordinary hosting logs rather than analytics, and we do not use them to build a picture of you.
- Outbound buttons. Links that take you to Stripe to pay, or to WhatsApp to message us, are ordinary links. Nothing is sent to either until you click.
If this ever changes, we will say so here before it does.
Who else handles your information
We keep this list short on purpose:
- Google Workspace. Our email, and the account the booking form delivers into, including Drive for any files you attach.
- Cloudflare. Hosting for this website.
- Instantly. The tool we use to send outreach email and record replies and opt outs.
- Airtable. Where our lead records and the do not contact list are kept.
- Stripe. If you pay us, Stripe handles the card details. We never see your card number.
Each is used under its own data processing terms. Some are based outside the UK, and where information is transferred abroad it relies on the safeguards in those terms, such as the UK addendum to the standard contractual clauses. We do not sell your information to anyone, and we do not share it for anyone else's marketing.
Complaints
If you are unhappy with how we have handled your information, please tell us first at hello@savvyai.co.uk and we will do our best to put it right.
You can also complain to the Information Commissioner's Office, the UK regulator. You do not have to come to us first, and it costs nothing.
- Online: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF