Privacy Policy

1 · Who we are

You & AI ("we", "us", "our") is a UK charity dedicated to teaching the next generation to think clearly and safely with artificial intelligence. For the purposes of UK data protection law, we are the "data controller" responsible for the personal information described in this policy.

If you have any questions about how we handle your data, you can reach our team using the details in the Contact us section below.

2 · What we collect

We try to collect as little as possible, and only what we genuinely need. Depending on how you interact with us, that may include:

• —Contact details you give us — name and email when you join our mailing list, volunteer, or get in touch.
• —Volunteer & partner information — background, skills and interests you share when offering to help.
• —Donation details — processed securely by our payment provider; we do not store full card numbers.
• —Technical data — basic, mostly anonymised information about how our site is used, via cookies (see our Cookie Policy).

3 · How we use it

We use your information to run the charity and deliver our mission — never to sell to third parties. Specifically, we may use it to:

• →Send updates you've asked for, and respond to your enquiries.
• →Coordinate volunteers, partners and supporters.
• →Process and acknowledge donations, and meet our financial reporting duties.
• →Improve our website and educational materials.

4 · Our legal basis

Under the UK GDPR we rely on your consent (for example, to send you our newsletter — which you can withdraw at any time), our legitimate interests in running and promoting the charity in a way that respects your rights, and legal obligation where the law requires us to keep certain records.

5 · Children's data

Protecting children is at the heart of our work, so we treat their data with particular care. Our website is aimed at adults — educators, parents and supporters — and we do not knowingly collect personal information directly from children through it.

Where our educational programmes involve pupils, any data is handled through the school as data controller, governed by a separate agreement and our safeguarding standards. If you believe a child has given us personal data, please contact us and we will delete it.

6 · Who we share it with

We do not sell or rent your data. We share it only with trusted service providers who help us operate — such as email, payment and hosting platforms — under contracts that require them to protect it, or where we are required to by law. Where data is processed outside the UK, we ensure appropriate safeguards are in place.

7 · How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected, or as long as the law requires. When it is no longer needed, we securely delete or anonymise it. You can ask us to remove your details at any time.

8 · Your rights

Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, and to data portability. You can also withdraw consent at any time.

To exercise any of these, just contact us. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.

9 · Keeping it secure

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. No system is perfectly secure, but we take this responsibility seriously and review our practices regularly.

10 · Changes to this policy

As we grow, this policy will evolve. We'll post any updates on this page and revise the "last updated" date above. Significant changes will be communicated clearly.

11 · Contact us

Questions, requests or concerns about your privacy are always welcome.